[OE-core] [PATCH 1/1] rpm_4.14.0: clamp timestamps by default

Bystricky, Juro juro.bystricky at intel.com
Wed Jan 3 16:59:09 UTC 2018


> I'm not sure I understand the necessity of this. What matters for
> reproducibility is that rpms install the same files; why is it important
> that the rpm file itself has exactly same build time and is otherwise
> identical bit by bit?
> 

There is actually a demand for binary reproducible packages.
See for example https://wiki.debian.org/ReproducibleBuilds/About
Debian packages already clamp timestamps by default. I am not even sure you can disable this 
(short of unsetting SOURCE_CODE_EPOCH). The same functionality exists for RPM packages,
except it is not the default behavior.

> A technicality: do not patch mnacros.in, set the macro directly from
> package_rpm.bbclass.
>

Yes, I considered this (see the [patch 0/1]). I chose to patch macros.in in the 
recipe rpm_4.14.0 instead because the new macro is introduced in RPM 4.14.0. 
I assumed we did not want to have RPM version dependencies in package_rpm.bbclass. 
But I have no strong feelings regarding this, I am pretty sure the new macro is here
to stay in the future and it is unlikely anyone would want to use a pre-4.14.0 
version of RPM either. If you think patching package_rpm.bbclass makes more sense,
I can send in another patch.
 
Juro


More information about the Openembedded-core mailing list