mk-origtargz: create reproducible tarballs and --mtime option

[Simon Josefsson]

+1 on reproducible tarballs.  I've been spending way too much time to
achieve this for 'make dist' tarballs of a couple of projects (libtasn1,
libidn2, inetutils, ...).  It is not a simple matter.  Modification time
of files is used by 'make' for dependency rebuild ordering and may also
end up as timestamps inside files.

"Diederik de Haas" <didi.debian at cknow.org> writes:

> On Thu Aug 31, 2017 at 10:57 AM CEST, Chris Lamb wrote:
>>> mk-origtargz: create reproducible tarballs and --mtime option
>>
>> Adding a Reproducible Builds usertag and pinging the ML -- I hadn't
>> spotted this wishlist bug before.
>
> How about adding f.e. ``--sort name`` to the tar invocation?

Here is one resource to read for more hints:

https://www.gnu.org/software/tar/manual/html_node/Reproducibility.html

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 1251 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20250320/9112c60c/attachment.sig>