[
https://issues.apache.org/jira/browse/CASSANDRA-20495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17939311#comment-17939311
]
Stefan Miklosovic edited comment on CASSANDRA-20495 at 3/28/25 8:47 PM:
------------------------------------------------------------------------
Honestly I don't think it has a lot of practical value except being it an
exercise of what we can (re)-produce. Not having it "exactly the same every
time" does not matter too much anyway, we have signatures and checksums etc so
a receiver of built tarball can verify it was not tampered with after its
production so ...
Anyway, this is "fake" reproducible build, because the variable is time. Even
it is "same", it will never be, unless somebody supplies same timestamp and I
just wonder what object one would have to really do that.
We can close this, I just wanted to track what obstacles I encountered while
trying to do that but its practical usefulness is questionable.
was (Author: smiklosovic):
Honestly I don't think it has a lot of practical value except being it an
exercise of what we can (re)-produce. Not having it "exactly the same every
time" does not matter too much anyway, we have signatures and checksums etc so
a receiver of built tarball can verify it was not tampered with after its
production so ...
Anyway, this is "fake" reproducible build, because the variable is time. Even
it is "same", it will never be, unless somebody would supply same timestamp and
I just wonder what object one would have to really do that.
We can close this, I just wanted to track what obstacles I encountered while
trying to do that but its practical usefulness is questionable.
> Investigate what blocks us from having bit-by-bit reproducible builds /
> release tarballs
> ----------------------------------------------------------------------------------------
>
> Key: CASSANDRA-20495
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20495
> Project: Apache Cassandra
> Issue Type: Task
> Reporter: Stefan Miklosovic
> Assignee: Stefan Miklosovic
> Priority: Normal
> Attachments: diffoscope-cassandra-bin-tarball.html,
> diffoscope-cassandra-src-tarball.html, indentical-minus-few-timestamps.html,
> jar-modification-time-zero.html, same-file-sizes-inside-bin-tarball.html,
> working-zip-details-same-build-date.html
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
