Open KSXGitHub opened 4 years ago
Hi! Thanks for raising the issue, I think it's something that indeed should be done.
I'm on a vacation at the moment, I'll get back to it a bit later.
@KSXGitHub I notice that some packages somehow use github itself to host the built artifacts. E.g. here: https://github.com/Jguer/yay/releases https://github.com/Superjo149/auryo/releases https://github.com/scalameta/scalafmt/releases/tag/v2.4.2
Do you know how it's done? Is it travis underneath, or what is?
They probably:
I am quite surprised that you didn't know GitHub Release host build artifacts.
I find using Travis for deployment more reliable. You can read more about it here: https://docs.travis-ci.com/user/deployment/releases/
@vn971 This might be helpful https://github.com/japaric/trust
@vn971 is anyone working on this? I could quickly try to do something like this. (with GitHub actions)
@micwoj92 hey, sorry for the late reply... I'd love to use an automated system like Travis or GH Actions, however only if the builds are reproducible, e.g. if I make a local build/release as well, I get all the same hashsums. Last time I checked RUA, I think it gave the same binary on the same OS (with only the build re-started).
If the PR produces binaries that have the same hashes that I can obtain by a local compilation, then I'll definitely happy accept such an MR
@micwoj92 hey, sorry for the late reply... I'd love to use an automated system like Travis or GH Actions, however only if the builds are reproducible, e.g. if I make a local build/release as well, I get all the same hashsums.
I tried and I couldn't figure it out, build from GH Actions had different sums than one built locally, I even tried building in docker.
Last time I checked RUA, I think it gave the same binary on the same OS (with only the build re-started).
I did the same, compiled rua, removed build directory and compiled again, same hashes on same machine, but GH actions had different. I will try building on my laptops later today and see if it has same hashes as the one built on my main pc.
Sorry for ping @Morganamilo, do you know if your paru binaries are reproducible?
Instaling rua from AUR requires compiling, which costs time, CPU, and memory. It would be cool if you release pre-built binary to GitHub Release. I can create
.travis-ci.yml
for you if you are lazy.