On 2024-04-03, Albert Vaca Cintora <albertv...@gmail.com> wrote: > What's the advantage of providing tarballs?
I do think there is an advantage in being able to verify that the soure tarball is the same across distributions. Using a checksum on the tarball is an easy way of doing it. Different git invocations for git archive, different tar options and so on can create different checksums for the same content. I do also think it is nice if we get someone else to verify that the tarball we ship actually matches the tag. I think some people in distributions have already started looking into verifying that. Also, git tags can be moved. /Sune