[tasks] 01/01: add note that 90% of the .buildinfo files being created today are useless and broken

Holger Levsen holger at layer-acht.org
Wed Dec 21 11:35:38 UTC 2016


On Wed, Dec 21, 2016 at 12:27:54PM +0100, Mattia Rizzolo wrote:
> On Wed, Dec 21, 2016 at 10:00:46AM +0000, Holger Levsen wrote:
> > +- .buildinfo file workflow design problem: Autobuilders only generate the arch:all and arch:any binary packages from the source package they are given. They do not regenerate the source package. Thus, they will call dpkg-buildpackage with --build=any or --build=all which in turn will create a .buildinfo that doesn't contain the source hash. (see #774415)
> 
> That's also what we're doing, btw.
> 
> Also, do you remember this long email of mine?
> https://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-Mon-20160919/007119.html
 
yes, I still have a tab open on it… :(

> that is still in my inbox and waiting for a long enough bunch of my time
> to read it all and reply properly ]

same here :/


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20161221/99ca6291/attachment.sig>


More information about the Reproducible-builds mailing list