From mboxrd@z Thu Jan 1 00:00:00 1970 From: Efraim Flashner Subject: Re: Reproducible bootstrapping Date: Mon, 4 Jul 2016 19:46:17 +0300 Message-ID: <20160704164617.GA23163@debian-netbook> References: <874m85ctdj.fsf@gnu.org> <25ed67bc-3e51-b223-69a7-1bf4fec84a50@posteo.de> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="IJpNTDwzlM2Ie8A6" Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:39744) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bK712-0001Qk-Hp for help-guix@gnu.org; Mon, 04 Jul 2016 12:46:37 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bK70y-0001zV-F0 for help-guix@gnu.org; Mon, 04 Jul 2016 12:46:35 -0400 Content-Disposition: inline In-Reply-To: <25ed67bc-3e51-b223-69a7-1bf4fec84a50@posteo.de> List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: help-guix-bounces+gcggh-help-guix=m.gmane.org@gnu.org Sender: "Help-Guix" To: t3sserakt Cc: help-guix@gnu.org, t3sserakt --IJpNTDwzlM2Ie8A6 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Mon, Jul 04, 2016 at 06:01:51PM +0200, t3sserakt wrote: > Hi Ludo, >=20 > thx for your quick reply, but no. >=20 > I was talking about reproducible builds like it is mentioned here: >=20 > https://lwn.net/Articles/663954/ >=20 > Cheers >=20 > t3sserakt >=20 based on my experience with the aarch64 bootstrap-tarballs, guile-2.0.11.tar.xz and gcc-4.9.3.tar.xz aren't reproducable, but binutils-2.25.1.tar.xz, glibc-2.23.tar.xz and the static-binaries.tar.xz are. After building them twice the later 3 had the same `guix hash' value. =46rom the given tarballs, all the packages should be reproducable, and there's always the `guix challenge' command to check a local build against the one built from the build-farm. --=20 Efraim Flashner =D7=90=D7=A4=D7=A8=D7=99=D7=9D = =D7=A4=D7=9C=D7=A9=D7=A0=D7=A8 GPG key =3D A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351 Confidentiality cannot be guaranteed on emails sent or received unencrypted --IJpNTDwzlM2Ie8A6 Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJXepLWAAoJEPTB05F+rO6TFTkQAIu3G3dlyvH453iYp8m8paZh WCqvehAhUdjcR0hCwZ+JhS9lH8wm082tdkYapm/TK4iB9SmJppPK7/zIjo9tWNwN 1hbr9vBZqvc7Wr7sp102JIp41sBPnpsnyTvYt803RbFprOPzDii6NnqRfuzDG/AM j2FkZeQoDtkNxCLHxkCsUB2mc35HZj4aRSiNqNS1XhYcSod1HMY6ybLYXiSmalZh 80cRGDZYBUjLuCM67ZA7ajQp1xCeYVDsELYd7U77H3FQmxvGOPUyNwr+rZPZf18Q euCcVGJla9zn18Te6bRo17ukqOKAOOt/v3SX5kK7WoCdMqVdVgiSxSYjrlWD/rzd GQWcvoTGt/EgUcBVM6hVh99OQRcdeLrlUT8HqSWzNT/ihIiw21UrIrcjUgD9ZaMK PHvj1k8+gCzhlVddWJqeZI81JWdoIdioqYRF90PXeBOA+RHrzjw8cmxSJj2Y571O WxmHCLhk0KqjIP5r7vTBAU0OH9u8WwqNkek0/cbIuKRiBZ6XEQWiOskleqqxVbwu Br4h2k7TUvoeD07JytQn9tiFXMTzo6pXMi4jwKol1wFAiK9hqegshBizawTVusd3 ztJN9qv/sMImgxPyQwNGWaru0FvVLNJdidYLg64jcr7nBSz97H8nbRNUfDNKYUz8 fOiXnna2b1fJHxJtGksF =z5y2 -----END PGP SIGNATURE----- --IJpNTDwzlM2Ie8A6--