Hello, zimoun <zimon.touto...@gmail.com> skribis:
> On Fri, 29 Oct 2021 at 16:12, Ludovic Courtès <l...@gnu.org> wrote: [...] >>> Well, because it is not affordable to switch from the current >>> tag-address to immutable commit-address for defining packages, in order >>> to be 100% reliable, any fallback should use Disarchive-DB which stores >>> the mapping from checksum to swhid; for all kind origins. >>> >>> Is it what you have in mind? >> >> No, I think we should consider always referring to commits instead of >> tags. It’s annoying from a readability viewpoint, but it would ensure >> reproducibility. Even flatpak has this policy. :-) > > Ah, IMHO, «it is not affordable to switch from the current tag-address > to immutable commit-address for defining packages, in order to be 100% > reliable» :-) > > Do you think the switch from tag to commit instead is really doable? > > Other said, do you think it should be possible to automatize such task? With enough effort, anything can be automated. That said, I think it would be fine to change things incrementally as packages are added/updated. > PS: Ah, refer to commit instead of tags could be a RFC. ;-) Yup! :-) Thanks, Ludo’.
