-
I was wondering if any one would want to share their packages and we could see where we stand on reproducible builds.
-
Hi! This issue is about getting Kiss to compile without worrying about Cargo dependencies. I have two suggestions:
1. Use `"rev"` in the dependency sections of `Cargo.toml` to pull in the specific v…
-
It would be a little bit nice if you could check out a release tag and get a reproducible build. The serial number would need to be hard coded. Possibly more stuff too? I'm not sure if it's possible o…
-
Hi, Namecoin developer here (I talked to you on Reddit, I'm biolizard89 there). Do you have any plans regarding the possibility of reproducible builds of this tool? As far as I know Javascript is tr…
-
Users should be able to get the exact same binary as what we publish if they use identical tooling. For this we need to make sure we don't insert timestamps or similar.
-
For #24904, we have made changes to Go 1.21 to make the Go distribution builds trivially reproducible: given the source archive and a Go bootstrap toolchain that is new enough (Go 1.21 requires Go 1.1…
-
follow up here: https://forum.f-droid.org/t/app-not-showing-up-on-verification-server/1380
-
Currently rebuilding the site brings in the latest version of all external dependencies. This can cause problems for other trying to contribute to the site.
-
We should have reproducible builds. I tried remapping the the working directory and cargo home using `--remap-path-prefix` but that caused `cargo objcopy` to crate empty files.
See also:
- https:…
-
Two invocations of `krel obs specs` command with the same parameters are going to provide different tarballs (i.e. with tarballs with different hashes). If we would push these tarballs to OBS, it woul…