Hi, thanks for getting back to me! I think a ./configure option could be an alternative. I'll CC the rest of the reproducible-builds ML in case they want to jump in and call me out :)
And yes, I think this has come up for other projects too, hence the proposal of the S_D_E environment variable (for both setting a build date and to indicate that this build should be reproducible). Thanks again! -Santiago. On Tue, Dec 05, 2017 at 11:27:07AM +0100, Juergen Sauermann wrote: > Hi Santiago, > > I will look into this. Would it be acceptable to have a ./configure option > that > prevents the setting of the build date (so the build date would be roughly > the > time when the GNU APL sources were checked in rather than the time when > GNU APL was ./configure'd)? > > I suppose this issue will come up for other projects as well, so maybe a > common solution would be worthwhile to be investigated. > > Best Regards, > Jürgen Sauermann > GNU APL > > > On 12/04/2017 11:53 PM, Santiago Torres-Arias wrote: > > Hi, > > > > I'm a member of the Arch Linux Security team working on the reproducible > > builds initiative. Right now, apl compiles almost reproducibly, with the > > only caveat of embedding some time-based information into a header file. > > It would be nice if this could be overriden with an environment variable > > (or stripped out whatsoever). > > > > I'm attaching a patch on how I believe this could be achieved. > > > > Thanks! > > -Santiago. >
signature.asc
Description: PGP signature
