If it is reproducible I assume bit by bit the same from the same sources. Build date then seems irrelevant as you only need to date/version source. Also I think a metadata file could be put aside as an optional thing.
Compilers embed a lot of metadata (incl. but not limited to build date) into the binaries which changes the final artifact checksum in every compilation.
Removing this information what makes reproducible builds reproducible.
If you want bit-by-bit reproduction, you can't have that metadata inside your final artifact.
9 comments
[ 2.6 ms ] story [ 33.4 ms ] threadThe man page for mk.conf says the option, MKREPRO, defaults to "no", and I'm curious why that's default if the base system supports it.
Removing this information what makes reproducible builds reproducible.
If you want bit-by-bit reproduction, you can't have that metadata inside your final artifact.