Fwd: Re: buildinfo of old packages

Agustin Benito Bethencourt agustin.benito at codethink.co.uk
Wed Sep 14 11:01:09 BST 2016


Hi,

On 14/09/16 10:15, Paul Sherwood wrote:
> Hi all,
> I noticed this today, and think it would be worth some further
> investigation into how far the Reproducible Builds project has got and
> what we can learn. Also interesting is the work that Linus Gasser
> describes in his email, around federation of version haahes.

State of art of where openSUSE is in this area, with OBS: 
https://www.youtube.com/watch?v=OLoPQI-DhRY

>
> And I'm struck by Linus' closing comment 'which is NOT the same as the
> reproducible build hash, due to some differences in the  dependencies
> (which are great, btw).' I know that there are both strengths and
> weaknesses in the way we handle dependencies - can anyone outline what
> is the approach taken by the RB project please?



>
> br
> Paul
>
>
> _______________________________________________
> baserock-dev mailing list
> baserock-dev at baserock.org
> http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/baserock-dev-baserock.org
>

-- 
Agustin Benito Bethencourt
Principal Consultant - FOSS at Codethink
agustin.benito at codethink.co.uk



More information about the baserock-dev mailing list