Hi Alex, While reproducible builds are a great idea, the Incubator PMC does not require them. Plugging away at improving things so that reproducible builds can be produced in future is a useful thing to do.
Regards, PJ On Tue, 23 Jan 2024 at 14:58, Alex Porcelli <porce...@apache.org> wrote: > > In the KIE podling, we regularly publish container images as part of > our releases. We've achieved semantically identical images, verified > using the 'diffoci' tool. However, due to current Docker/OCI engine > limitations, we can't eliminate variations in file metadata caused by > automatically appended timestamps. > > The latest version of Buildkit offers a solution but still needs to be > integrated into the build engines. I want to ask the Incubator PMC: Is > achieving semantically verifiable images sufficient for now, as we > await the integration of Buildkit changes into Docker/OCI build > engines? > > Regards, > - > Alex > Apache KIE PPMC > > --------------------------------------------------------------------- > To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org > For additional commands, e-mail: general-h...@incubator.apache.org > --------------------------------------------------------------------- To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org For additional commands, e-mail: general-h...@incubator.apache.org
