diffoscope 217 released 💠

Hi, The diffoscope maintainers are pleased to announce the release of version 217 of diffoscope. diffoscope tries to get to the bottom of what makes files or directories different. It will recursively unpack archives of many kinds and transform various binary formats into more human-readable form

Re: Making reproducible builds & GitBOM work together in spite of low-level component variation

On Wed, Jun 22, 2022 at 11:43:49AM -0700, Vagrant Cascadian wrote: > On 2022-06-22, David A. Wheeler wrote: > > The challenge is that I believe that there will be subtle variations in > > inputs caused by > > very low-level components, particularly kernels & but also potentially also > > low-leve

Re: Making reproducible builds & GitBOM work together in spite of low-level component variation

On Wed, Jun 22, 2022 at 12:28:51PM -0700, Vagrant Cascadian wrote: > On 2022-06-22, Vagrant Cascadian wrote: > > On 2022-06-22, David A. Wheeler wrote: > >> GitBOM is explained at . As they explain it, its > >> purpose is to: > >>• Build a compact Artifact Dependency Graph

Re: Making reproducible builds & GitBOM work together in spite of low-level component variation

Hello, Am Wed, Jun 22, 2022 at 11:43:49AM -0700 schrieb Vagrant Cascadian: > Presuming I am understanding GitBOM correctly, I would consider the > GitBOM metadata about the build, and not the build artifact itself. is the problem not solved by Guix? I wonder if GitBOM takes a good decision by has

Re: Making reproducible builds & GitBOM work together in spite of low-level component variation

On 2022-06-22, Vagrant Cascadian wrote: > On 2022-06-22, David A. Wheeler wrote: >> GitBOM is explained at . As they explain it, its >> purpose is to: >> • Build a compact Artifact Dependency Graph (ADG), tracking every >> source code file incorporated into each built ar

Re: Making reproducible builds & GitBOM work together in spite of low-level component variation

On 2022-06-22, David A. Wheeler wrote: > The challenge is that I believe that there will be subtle variations in > inputs caused by > very low-level components, particularly kernels & but also potentially also > low-level > runtimes like the C runtime. This could result it irreproducibility of >

Re: Profile Guided Optimization (PGO)

> On Jun 21, 2022, at 2:56 PM, Orians, Jeremiah (DTMB) > wrote: > >>> It'll solve the reproducible problem but introduce a bootstrapping >>> problem for how those files were generated in the first place. >> FWIW, this seems sorta fine to me. >> As long as a build path exists which _doesn't_

Making reproducible builds & GitBOM work together in spite of low-level component variation

All: I would like for reproducible builds & GitBOMs to be able to work simultaneously. Unfortunately, I strongly suspect there's a subtle incompatibility when you try to combine them to due to low-level component variation. The good news is that I think there are ways to address this. This mes