Ludovic Courtès <l...@gnu.org> writes: >> I tried to simplify things by using 'guix shell' like this (using Guix >> commit a36ff7d51110403295a359e7f40c3eb42ccfd509): > > FWIW, I used ‘guix shell -CPDf guix.scm texlive-scheme-basic’ from this: ... > Could you check if that works better? (You can probably just start with > ‘guix time-machine -q --commit=143faecec3c81e4c7325430a6e759b1619eb406f …’).
With
jas@kaka:~/src/shepherd$ git log -1
commit f7fa03a74be697c0926c62e9297e9f78d58ff469 (HEAD, tag: v1.0.4)
Author: Ludovic Courtès <l...@gnu.org>
Date: Wed Apr 16 12:15:26 2025 +0200
build: Bump to version 1.0.4.
* configure.ac: Bump to version 1.0.4.
jas@kaka:~/src/shepherd$ git clean -d -x -f; git restore --staged .
jas@kaka:~/src/shepherd$ git restore .
jas@kaka:~/src/shepherd$ guix time-machine -q
--commit=143faecec3c81e4c7325430a6e759b1619eb406f -- shell -CPDf guix.scm
texlive-scheme-basic -- sh -c 'autoreconf -fvi && ./configure && make && make
dist'
...
jas@kaka:~/src/shepherd$ sha256sum ../shepherd-1.0.4.tar.gz
13306a6b56dfe252464e84a23c23a7234338cc752c565e1b865f7cbf8a03f0cf
../shepherd-1.0.4.tar.gz
jas@kaka:~/src/shepherd$ trydiffoscope --webbrowser ../shepherd-1.0.4.tar.gz
shepherd-1.0.4.tar.gz
http://try.diffoscope.org/uhcedrquzdpu
jas@kaka:~/src/shepherd$
I got this diff: https://try.diffoscope.org/uhcedrquzdpu
> Starting from 1.1.x, I’m considering dropping tarballs altogether.
> They’re not useful (at least for this project) and this whack-a-mole
> effort to achieve some level of reproducibility is terrible.
That would be nice, although I'm happy if you could still PGP sign that
artifact. I also don't think there is a lot of use of the 'make dist'
tarballs for shepherd, and a release without them could confirm that....
Could be simple like this:
jas@kaka:~/src/shepherd$ git archive --prefix=shepherd-$(git describe)/ -o
shepherd-$(git describe)-src.tar.gz v1.0.4
jas@kaka:~/src/shepherd$ sha256sum shepherd-v1.0.4-src.tar.gz
1ba6959afcb2bd8cb8c6d0967a02c3bd26698133325f64293ff9fcee1ed7a41b
shepherd-v1.0.4-src.tar.gz
jas@kaka:~/src/shepherd$ git --version
git version 2.49.0
jas@kaka:~/src/shepherd$
Reproducing these git-archive artifacts is easier, but still not
trivial. It depends on the Git version you use, and I think it in
theory could also depend on build dependencies of git too. So I think
it would help if you said which Guix commit you used and/or Git version
in the release announcement, if we should have any chance to be able to
reproduce it in 10 or 50 years. Assuming we can still access the
intended git repository by then...
/Simon
signature.asc
Description: PGP signature
