Hello! Looks like reproducible builds are like videos on video hosting. You may share your screencast or videos, the others can see your screen exactly. But there are limitations: you need to have an account on exactly one video hosting. There were challenges in Ludovic Courtès article. Releases tarballs are not the same as version control revisions: tarballs may have `configure` scripts and developers signatures. What to choose for using in certain reproducible build?

There is in need a help from FSF for definition of standards. What do you think?


Mar 29, 2019, 4:05 PM by ludo@gnu.org:
Hello!

I’ve written a post on the Software Heritage support in Guix:

https://gnu.org/s/guix/blog/2019/connecting-reproducible-deployment-to-a-long-term-source-code-archive

Happy reading! :-)

Ludo’.