[
https://issues.apache.org/jira/browse/CASSANDRA-20495?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17939311#comment-17939311
]
Stefan Miklosovic edited comment on CASSANDRA-20495 at 3/28/25 8:46 PM:
------------------------------------------------------------------------
Honestly I don't think it has a lot of practical value except being it an
exercise of what we can (re)-produce. Not having it "exactly the same every
time" does not matter too much anyway, we have signatures and checksums etc so
a receiver of built tarball can verify it was not tampered with after its
production so ...
On a practical level, this is "fake" reproducible build, because the variable
is time. Even it "same", it will never be, unless somebody would supply same
timestamp and I just wonder what object one would have to really do that.
We can close this, I just wanted to track what obstacles I encountered while
trying to do that but its practical usefulness is questionable.
was (Author: smiklosovic):
Honestly I don't think it has a lot of practical value except being it an
exercise of what we can (re)-produce. Not having it "exactly the same every
time" does not matter too much anyway, we have signatures and checksums etc so
a receiver for built tarball can verify it was not tampered with after its
production so ...
On a practical level, this is "fake" reproducible build, because the variable
is time. Even it "same", it will never be, unless somebody would supply same
timestamp and I just wonder what object one would have to really do that.
We can close this, I just wanted to track what obstacles I encountered while
trying to do that but its practical usefulness is questionable.
> Investigate what blocks us from having bit-by-bit reproducible builds /
> release tarballs
> ----------------------------------------------------------------------------------------
>
> Key: CASSANDRA-20495
> URL: https://issues.apache.org/jira/browse/CASSANDRA-20495
> Project: Apache Cassandra
> Issue Type: Task
> Reporter: Stefan Miklosovic
> Assignee: Stefan Miklosovic
> Priority: Normal
> Attachments: diffoscope-cassandra-bin-tarball.html,
> diffoscope-cassandra-src-tarball.html, indentical-minus-few-timestamps.html,
> jar-modification-time-zero.html, same-file-sizes-inside-bin-tarball.html,
> working-zip-details-same-build-date.html
>
> Time Spent: 0.5h
> Remaining Estimate: 0h
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
