3 ms·
So this is a dumb question, but isn't the question of reproducible builds made trivial by vendoring dependencies? Why is it treated like this holy grail when it
by jpfed 8y ago
So this is a dumb question, but isn't the question of reproducible builds made trivial by vendoring dependencies? Why is it treated like this holy grail when it should be dirt simple? I must be misunderstanding something.
- heavenlyhash 8y agoIt's not a dumb question, but unfortunately, we live in a dumb^H^H^H^H interesting world. Check out all the links under this heading: https://reproducible-builds.org/docs/#achieve-deterministic-builds https://reproducible-builds.org/docs/#achieve-deterministic-... Many legacy systems capture all sorts of nondeterministic values -- from build date (it might be a desire to be "helpful", but breaks reproducibility) to accidentally depending on the order of inodes on your files system! All of these problems are solvable. It should be dirt simple. It's just a "small matter of programming" :)