[Rpm-maint] [rpm-software-management/rpm] Reproducible builds improvements (Issue #2894)

[Michael Schroeder]

Here's some thoughts about improving reproducible builds with rpm. The goal (for me) is to be able to reproduce a rpm given the source rpm.

We currently have the following switches:
- `%source_date_epoch_from_changelog`
- `%use_source_date_epoch_as_buildtime`
- `%clamp_mtime_to_source_date_epoch`

This is centered around the sources and not really what I have in mind. I would prefer to keep setting the build time to the current time for normal builds and clamp the mtime to the build time. To reproduce a build, I would need a way to set the build time (and the build host) to the values from the rpm I want to reproduce.

So, would a `%clamp_mtime_to_buildtime` macro make sense? Should the getBuildTime() function check if a `%_buildtime` macro is set?

(This is somewhat related to pull request #2880. Basically $NEW_SOURCE_DATE_EPOCH is the build time.)

Thoughts?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/issues/2894
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/issues/2894 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20240209/a13bf991/attachment-0001.html>