[Rpm-maint] [rpm-software-management/rpm] Reproducible builds improvements (Discussion #2934)

[Zbigniew Jędrzejewski-Szmek]

"Implementation detail". The important part is to get the payload and significant metadata to be identical. Once we have that, we can do optimizations to handle comparisons efficiently. One option is to strip fields and hash that. Another option, for example, would be to define a hash method where some fields are masked (simply skipped when hashing). In fact, I think that this second option is more efficient, because you only need to read the original archive once and don't even need to write a dummy rpm.

> needing build outputs in addition to build inputs is still needing more

We're only talking about using build outputs for the comparison. We don't need them for the rebuild itself.


-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/2934#discussioncomment-8623344
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/repo-discussions/2934/comments/8623344 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20240228/7129b6ed/attachment.html>