Hi, On 02/15/2016 08:38 AM, Ulrich Windl wrote: >>>> Christian Seiler <[email protected]> schrieb am 13.02.2016 um >>>> 01:05 in > Nachricht <[email protected]>: >> Hi, >> >> Debian is currently working on making the entire archive build >> reproducibly. <https://reproducible-builds.org/> is a good >> resource describing the motivation behind this effort. >> >> There was one problem that was found in the open-iscsi package >> build system that prevented builds from being reproducible: >> the list of object files generated by the wildcard Makefile >> function are not in a deterministic order, causing changes in >> the output depending on the order in the underlying filesystem. > > Hi! > > I wonder: Would adding those objects to an object library (and use > that library to add the needed objects) also fix this problem? (I > thought objects in a library are sorted)
Unfortunately not, that would suffer from the same problem - the order of the object files determines to some extent the order of the functions in the final executable. An object library is not really that much different than from specifying a list of object files explicitly, and the order in which they were added to the object library matters. The result of the build is of course functionally equivalent (which is why the current state of having a random order at build time depending on the underlying file system is not a problem in terms of functionality), but not bit-for-bit identical, which is what reproducible builds are about. (Whether using an object library during the open-iscsi build process is a good idea irrespective of reproducible builds is something I don't have any opinion on.) Regards, Christian -- You received this message because you are subscribed to the Google Groups "open-iscsi" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at https://groups.google.com/group/open-iscsi. For more options, visit https://groups.google.com/d/optout.
