On Thu, Sep 20, 2018 at 02:47:23PM +0100, Iain Learmonth wrote: > Hi, > > On 20/09/18 00:51, Ian Goldberg wrote: > > If you make it use, say, the timestamp on the tip git commit of the > > source, then it's (a) automated, and (b) reproducible. But that's more > > of a build date than a release date, of course. (That's what otr uses.) > > Please don't make your build system depend on git! > > Distributions don't want to ship the entire project history with every > package release. > > stem had been doing this and as a result the test suite had never been > run as part of the build process for the Debian package, which always > starts from a tarball with no VCS information. (This is now fixed in stem). > > https://trac.torproject.org/projects/tor/ticket/26984
To be clear, the place this is used in otr is exactly to build the released *source tarball* from git, so that even the source tarball is reproducible. The binary package builders then build (reproducible) binaries from the reproducible source tarball. - Ian _______________________________________________ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev