On Mon, Jul 04, 2016 at 06:01:51PM +0200, t3sserakt wrote:
> Hi Ludo,
> 
> thx for your quick reply, but no.
> 
> I was talking about reproducible builds like it is mentioned here:
> 
> https://lwn.net/Articles/663954/
> 
> Cheers
> 
> t3sserakt
> 

based on my experience with the aarch64 bootstrap-tarballs,
guile-2.0.11.tar.xz and gcc-4.9.3.tar.xz aren't reproducable, but
binutils-2.25.1.tar.xz, glibc-2.23.tar.xz and the static-binaries.tar.xz
are. After building them twice the later 3 had the same `guix hash'
value.

From the given tarballs, all the packages should be reproducable, and
there's always the `guix challenge' command to check a local build
against the one built from the build-farm.

-- 
Efraim Flashner   <efraim@flashner.co.il>   אפרים פלשנר
GPG key = A28B F40C 3E55 1372 662D  14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted