Re: [Bug-apl] [Reproducible builds] add support for SOURCE_DATE_EPOCH

[Santiago Torres-Arias]

Hi, thanks for getting back to me!

I think a ./configure option could be an alternative. I'll CC the rest
of the reproducible-builds ML in case they want to jump in and call me
out :)

And yes, I think this has come up for other projects too, hence the
proposal of the S_D_E environment variable (for both setting a build
date and to indicate that this build should be reproducible).

Thanks again!
-Santiago.

On Tue, Dec 05, 2017 at 11:27:07AM +0100, Juergen Sauermann wrote:
> Hi Santiago,
> 
> I will look into this. Would it be acceptable to have a ./configure option
> that
> prevents the setting of the build date (so the build date would be roughly
> the
> time when the GNU APL sources were checked in rather than the time when
> GNU APL was ./configure'd)?
> 
> I suppose this issue will come up for other projects as well, so maybe a
> common solution would be worthwhile to be investigated.
> 
> Best Regards,
> Jürgen Sauermann
> GNU APL
> 
> 
> On 12/04/2017 11:53 PM, Santiago Torres-Arias wrote:
> > Hi,
> > 
> > I'm a member of the Arch Linux Security team working on the reproducible
> > builds initiative. Right now, apl compiles almost reproducibly, with the
> > only caveat of embedding some time-based information into a header file.
> > It would be nice if this could be overriden with an environment variable
> > (or stripped out whatsoever).
> > 
> > I'm attaching a patch on how I believe this could be achieved.
> > 
> > Thanks!
> > -Santiago.
>

signature.asc
Description: PGP signature