sven-dmlr
commented
7 hours ago Related information: see https://hackernoon.com/building-reproducible-verifiable-binaries-with-golang --> "There is no built-in way to compile a reproducible binary with Golang."
Anyhow with the applied changes, now the build is reproducible on the same platform (Linux) with the same Go version (go version go1.21.6 linux/amd64) across different machines:
- Developer Laptop running Ubuntu
- local VM running Debian
- two different cloud VMs running Debian (different CPUs)
Also the build is now agnostic of build pathes. (Builds in different directories produce the same sha256 checksums.)
Situation
Explained here: #1919
ToDo
Make the Go client build produce identical binaries with the same Go version and repository tag. Should be achieved by removing the timestamp from the version information.