kahing / goofys

a high-performance, POSIX-ish Amazon S3 file system written in Go
Apache License 2.0
5.19k stars 520 forks source link

Reproducible release build? #371

Open mengxr opened 6 years ago

mengxr commented 6 years ago

Is there a way to reproduce the official releases? I'm not sure whether I could re-build the same release (the same dependent library versions including transitive dependencies) if I checkout the release commit and run make build. cc: @kahing

I checked dep and it generates the following Gopkg.toml based on the current master:

[[constraint]]
  name = "github.com/aws/aws-sdk-go"
  version = "1.15.56"

[[constraint]]
  branch = "master"
  name = "github.com/jacobsa/fuse"

[[constraint]]
  branch = "master"
  name = "github.com/jinzhu/copier"

[[constraint]]
  name = "github.com/kahing/go-xattr"
  version = "1.1.1"

[[constraint]]
  branch = "master"
  name = "github.com/kardianos/osext"

[[constraint]]
  name = "github.com/sevlyar/go-daemon"
  version = "0.1.4"

[[constraint]]
  name = "github.com/shirou/gopsutil"
  version = "2.18.7"

[[constraint]]
  name = "github.com/sirupsen/logrus"
  version = "1.1.1"

[[constraint]]
  name = "github.com/urfave/cli"
  version = "1.20.0"

[[constraint]]
  branch = "master"
  name = "golang.org/x/net"

[[constraint]]
  branch = "v1"
  name = "gopkg.in/check.v1"

[prune]
  go-tests = true
  unused-packages = true
kahing commented 5 years ago

agreed that this is desired but go keeps switching the de facto tool on dependencies. Lets wait for https://github.com/golang/go/wiki/Modules to be finalized