On 24/04/2021 17.59, Roland Clobus wrote:
> I've looked the reproducible report for apt-cacher-ng [1].
> It looks like it is caused by a linker flag: -Wl,--build-id=sha1


man ld says
> --build-id=style
> If style is omitted, "sha1" is used.


So this is just the default made explicit.

If you see --build-id=uuid it is bad, because it will use randomness
instead of hashing inputs.

If you see variations in build-id with sha1 mode, it means there were
already variations in inputs before and those inputs should be made
deterministic.


Ciao
Bernhard m.

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to