On Monday, January 12, 2015 at 11:59:53 AM UTC+1, Thierry
(sage-googlesucks@xxx) wrote:
>
> Another mid-term compromise could be to strip some few upstream source,
> but in a checkable and reproducible manner, that is, with a spkg-src
> script that will produce deterministic tarballs, so that an
If the problem is that packaging is not deterministic... what if we run the
hash check on the unpacked files instead of the tarball?
El lunes, 12 de enero de 2015, 11:59:53 (UTC+1), Thierry
(sage-googlesucks@xxx) escribió:
>
> Hi,
>
> it is advised to distribute unmodified upstream tarball at
