6 ms·
"Reproducible" is a nice word, but I feel like if the granularity of the contents is "other APKs", then it's not as useful as reproducibility in tools which all
by rgoulter 5y ago
"Reproducible" is a nice word, but I feel like if the granularity of the contents is "other APKs", then it's not as useful as reproducibility in tools which allow more arbitrary contents.
I know some people don't like seeing it brought up in every thread, but if you're talking about declarative, reproducible, minimal, SBOMs, non-Dockerfile building of OCI images, I think a comparison to Nix would be useful. -- Probably a tool like this is easier to use, and surely quicker; but with this you're restricted to just bunch of existing APKs.
- encryptluks2 5y ago> I know some people don't like seeing it brought up in every thread, but if you're talking about declarative, reproducible, minimal, SBOMs, non-Dockerfile building of OCI images, I think a comparison to Nix would be useful. -- Probably a tool like this is easier to use, and surely quicker; but with this you're restricted to just bunch of existing APKs. Very true, but their sister tool melange will address that by also creating and building new APKs to package new software. After trying out apko, I am impressed but it is obvious that both tools are still in pretty early-stage development, but apko is impressive from what I've seen so far.
- dlor 5y agoThanks! They're both only a month or so old, and still moving fast. Please leave some feedback in the repo if you'd like to see anything else! Disclosure: I work at Chainguard.
- encryptluks2 5y agoThanks, will do!