[Rpm-maint] [rpm-software-management/rpm] Make rpm builds more reproducible (Discussion #2654)

[Simon J Mudd]

"Ideally, the NEVRA would indicate the vendor via the %_dist suffix."

- this does not handle builds for the different "EL" flavours.  They **all** tend to use **the same value**: `.el7`, `.el8`, `.el9`, etc and then again this is not done consistently, there is no agreed specification of how/when this should be done.

I've also seen issues like this when doing MySQL rpm rebuilds: https://github.com/sjmudd/mysql-rpm-builder/blob/main/config/ossetup__centos.9__8.0.33%2B.sh#L15-L25, when setting up a build environment different repos need to be used depending on which "EL" distribution you are using.
What's worse is that the similarly named packages are not actually the same, so https://github.com/sjmudd/mysql-rpm-builder/blob/main/config/ossetup__centos.9__8.0.33%2B.sh#L59-L70 is required to build MySQL on CentOS 9 vs on Oracle Linux 9 (2 variations I was testing) as symlinking is different. This may be unusual but it's just an indication of RPM builds that "should work" but fail or really obscure reasons, precisely because the "reproducible builds is actually quite hard to do". Mainly it works: sometimes it doesn't and you need to dig really deep to figure out what triggers breakages like this.

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2654#discussioncomment-9062339
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/repo-discussions/2654/comments/9062339 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20240409/10a58044/attachment.html>