search

science-computing / butido

Build Linux packages using Docker containers
Eclipse Public License 2.0
22 stars 8 forks source link

Idea: Reproducible-ish builds #349

Closed primeos-work closed 1 month ago

primeos-work commented 8 months ago

Reproducible builds offer several advantages: See, e.g., https://reproducible-builds.org/ and https://reproducible-builds.org/docs/buy-in/.

It's not a requirement for us (yet) and it would currently require major changes but we could implement a few low hanging fruits to improve consistency/QA.

It might be nice to support SOURCE_DATE_EPOCH and limit network access during builds (https://reproducible-builds.org/docs/volatile-inputs/; we have both checksums and backups of the specified sources but content fetched from the Internet during builds could change or disappear at any time).

primeos-work commented 1 month ago

We deemed this feature not important/required for now.