Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #842904
| From | Sean Whitton <spwhitton@spwhitton.name> |
|---|---|
| Newsgroups | linux.debian.bugs.dist, linux.debian.policy |
| Subject | Bug#844431: Revised patch: seeking seconds |
| Date | 2017-08-13 00:40 +0200 |
| Message-ID | <udNey-6XD-15@gated-at.bofh.it> (permalink) |
| References | (2 earlier) <udLw5-5Mr-3@gated-at.bofh.it> <sDPS9-7Wd-3@gated-at.bofh.it> <udLPv-698-25@gated-at.bofh.it> <sDPS9-7Wd-3@gated-at.bofh.it> <udLPv-698-25@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Cross-posted to 2 groups.
[Multipart message — attachments visible in raw view] - view raw
Hello,
On Sat, Aug 12 2017, Russ Allbery wrote:
> I suspect we want to say build and host architecture for right now.
> (Maybe we can later aspire to making the build architecture not
> matter.)
On Sat, Aug 12 2017, Ximin Luo wrote:
> To echo dkg and others' comments, it would be nice if we could add
> here:
>
> +Packages are encouraged to produce bit-for-bit identical binary
> packages even +if most environment variables and build paths are
> varied. This is technically +more difficult at the time of writing,
> but it is intended that this stricter +definition would replace the
> above one, when appropriate in the future.
Here is an updated patch addressing these. I reworded it to use
'recommended' and changed the tone to better suit policy.
Thank you Ximin, Russ and Johannes!
> "precisification" -> "more precise version"
Our definition is not actually a /version/ of the
reproducible-builds.org definition -- that would imply that our
definition could replace the reproducible-builds.org definition, like
upgrading a package.
'precisification' means roughly "filling out the missing specification
when it is appropriate to fill it out", which is what the r-p.org
definition instructs distributors to do.
diff --git a/policy/ch-source.rst b/policy/ch-source.rst
index 127b125..6e32870 100644
--- a/policy/ch-source.rst
+++ b/policy/ch-source.rst
@@ -661,6 +661,28 @@ particularly complex or unintuitive source layout or build system (for
example, a package that builds the same source multiple times to
generate different binary packages).
+Reproducibility
+---------------
+
+Packages should build reproducibly, which for the purposes of this
+document [#]_ means that given
+
+- a version of a source package unpacked at a given path;
+- a set of versions of installed build dependencies;
+- a set of environment variable values;
+- a build architecture; and
+- a host architecture,
+
+repeatedly building the source package for the build architecture on
+any machine of the host architecture with those versions of the build
+dependencies installed and exactly those environment variable values
+set will produce bit-for-bit identical binary packages.
+
+It is recommended that packages produce bit-for-bit identical binaries
+even if most environment variables and build paths are varied. It is
+intended for this stricter standard to replace the above when it is
+easier for packages to meet it.
+
.. [#]
See the file ``upgrading-checklist`` for information about policy
which has changed between different versions of this document.
@@ -790,3 +812,7 @@ generate different binary packages).
often creates either static linking or shared library conflicts, and,
most importantly, increases the difficulty of handling security
vulnerabilities in the duplicated code.
+
+.. [#]
+ This is Debian's precisification of the `reproducible-builds.org
+ definition <https://reproducible-builds.org/docs/definition/>`_.
--
Sean Whitton
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-12 20:30 +0200
Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-12 21:00 +0200
Bug#844431: Revised patch: seeking seconds Ondrej Novy <novy@ondrej.org> - 2017-08-12 21:00 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 21:30 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-12 22:10 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 22:30 +0200
Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-12 22:40 +0200
Bug#844431: Revised patch: seeking seconds Johannes Schauer <josch@debian.org> - 2017-08-12 22:50 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 23:10 +0200
Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-13 00:40 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-13 01:20 +0200
Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-13 14:30 +0200
Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-13 15:40 +0200
Bug#844431: Revised patch: seeking seconds gregor herrmann <gregoa@debian.org> - 2017-08-13 17:00 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 20:10 +0200
Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-15 22:10 +0200
Bug#844431: Revised patch: Oppose Adrian Bunk <bunk@stusta.de> - 2017-08-16 17:40 +0200
Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 18:40 +0200
Bug#844431: Revised patch: Oppose Adrian Bunk <bunk@debian.org> - 2017-08-16 20:30 +0200
Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 20:40 +0200
Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-16 20:50 +0200
Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 21:20 +0200
Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-16 23:50 +0200
Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-17 00:10 +0200
Bug#844431: Revised patch: Oppose Ximin Luo <infinity0@debian.org> - 2017-08-21 16:30 +0200
Bug#844431: Revised patch: Oppose Don Armstrong <don@debian.org> - 2017-08-16 21:40 +0200
Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-17 00:00 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 20:00 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 21:00 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 21:20 +0200
Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-15 22:00 +0200
Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-15 23:20 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 18:40 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 22:10 +0200
Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-15 22:20 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 23:10 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 23:40 +0200
Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-16 01:10 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 07:40 +0200
Bug#844431: Revised patch: seeking seconds Mattia Rizzolo <mattia@debian.org> - 2017-08-16 12:30 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 13:30 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 13:50 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 17:10 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 17:50 +0200
Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 18:20 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 18:40 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 18:50 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 20:30 +0200
Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-15 23:40 +0200
Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 13:00 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 18:40 +0200
Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-16 20:00 +0200
Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 20:00 +0200
Bug#844431: Revised patch: seeking seconds Chris Lamb <lamby@debian.org> - 2017-08-17 02:50 +0200
Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-20 21:30 +0200
Bug#844431: Revised patch: seeking seconds Chris Lamb <lamby@debian.org> - 2017-08-21 02:40 +0200
Bug#872288: debian-policy: document .buildinfo files Holger Levsen <holger@layer-acht.org> - 2017-08-15 21:50 +0200
csiph-web