Re: Mutable Git tags & Software Heritage

["Ludovic Courtès" <ludo@gnu.org>]

Hello,

zimoun <zimon.toutoune@gmail.com> skribis:

> On Fri, 29 Oct 2021 at 16:12, Ludovic Courtès <ludo@gnu.org> wrote:

[...]

>>> Well, because it is not affordable to switch from the current
>>> tag-address to immutable commit-address for defining packages, in order
>>> to be 100% reliable, any fallback should use Disarchive-DB which stores
>>> the mapping from checksum to swhid; for all kind origins.
>>>
>>> Is it what you have in mind?
>>
>> No, I think we should consider always referring to commits instead of
>> tags.  It’s annoying from a readability viewpoint, but it would ensure
>> reproducibility.  Even flatpak has this policy.  :-)
>
> Ah, IMHO, «it is not affordable to switch from the current tag-address
> to immutable commit-address for defining packages, in order to be 100%
> reliable» :-)
>
> Do you think the switch from tag to commit instead is really doable?
>
> Other said, do you think it should be possible to automatize such task?

With enough effort, anything can be automated.  That said, I think it
would be fine to change things incrementally as packages are
added/updated.

> PS: Ah, refer to commit instead of tags could be a RFC. ;-)

Yup! :-)

Thanks,
Ludo’.