At 08:08 PM 4/6/2009 +0900, David Cournapeau wrote:
My use case is very simple, and yet very common. If you have your
sources in a VCS system, say svn:
python setup.py sdist # put everything under svn into the tarball
cd dist && uncompress tarball && python setup.py sdist # the tarball is
not the same
Does this actually fail under setuptools? It should not, as RPM
building from an sdist would then fail, and there was code
specifically added to ensure that use case works.
Have you actually tested this, or are you simply theorizing?
That's a concrete example of what I mean by magic. The distributed files
depends on how where you build it. It means that someone who get this
tarball, modify it, and regenerate it cannot do it correctly.
The whole point of packaging tools is reproducibility. Using the VCS as
is done currently breaks this.
cheers,
David
_______________________________________________
Distutils-SIG maillist - Distutils-SIG@python.org
http://mail.python.org/mailman/listinfo/distutils-sig
_______________________________________________
Distutils-SIG maillist - Distutils-SIG@python.org
http://mail.python.org/mailman/listinfo/distutils-sig
