[PATCH] Allow ./configure to explicitly set libgpg-error's build timestamp

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Sep 22 23:19:36 CEST 2014


On 09/22/2014 03:40 PM, Daniel Kahn Gillmor wrote:
> A group within Debian is working on making the archive rebuildable in
> a reproducible way, so that the compiled binary outputs are
> byte-for-byte identical when built for the same platform using the
> same toolchain.  This is useful in providing auditability and
> corroboration for users of the operating system.
> 
> libgpg-error is very close to reproducible except for embedding the
> build timestamp in the generated binary.  This timestamp is set in
> config.h during ./configure.
> 
> This patch allows an external build system to set this embedded
> timestamp explicitly, which appears to make the package build
> repeatably when ./configure is called with EXTERNAL_BUILD_TIMESTAMP
> set.

Of course, another reasonable approach would be to avoid embedding the
timestamp in the build at all.

What is the advantage of including the timestamp in the built executable?

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: </pipermail/attachments/20140922/79bd8dd5/attachment.sig>


More information about the Gnupg-devel mailing list