Details
-
New Feature
-
Status: Closed
-
Major
-
Resolution: Fixed
-
3.1.0
-
None
Description
comparing current build output to reference is finally the only goal useful to check if a build is reproducible, completely independent of creating a buildinfo or not
talking much about buildinfo is misleading: it makes feel that buildinfo is
1. necessary
2. sufficient
to get a reproducible build.
Buildinfo is netiher necessary nor sufficient to get a reproducible build: it just records current effective build output, without any hint if the build will be reproducible or not.
The only way to check that a build is reproducible is to rebuild and compare build output with previous build output: this is usually done without buildinfo.
Creating an artifact:compare goal that will produce a .compare file will make the reproducible build check easier and more clear than previous artifact:buildinfo with additional arguments that produced a .buildinfo.compare