-
Notifications
You must be signed in to change notification settings - Fork 317
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
make deb packages reproducible by NOT having gzipped time-stamp. #253
Comments
Hi, In this case the .gz files weren't generated by jdeb, so unless jdeb reimplements strip-nondeterminism there isn't much we can do. |
AFAICT, overwriting archive entries' |
Supporting the SOURCE_DATE_EPOCH environment variable would be good too. |
FWIW, it looks to me like As far as I'm concerned, adding some API such that this could be controlled at least for control files could be enough; the Nebula plugin for Gradle could then take advantage of it to respect Gradle's |
Hi there,
I'm sure you have heard about reproducible builds . I ran lintian over a package mars-sim and found it generated quite a few warnings, as shown in mars-sim bug-tracker . Talking with reproducible-builds debian upstream came to know that it may well be because of src/main/java/org/vafer/jdeb/DebMaker.java . Please take a look at it.
The text was updated successfully, but these errors were encountered: