Re: [Bug-apl] [Reproducible builds] add support for SOURCE_DATE_EPOCH

[Juergen Sauermann]

Hi Santiago,

I have adopted the environment variable approach, which is now
contained in *SVN 1026*. (and therefore also in the next GNU APL release).

I took the freedom to change your patch from:

+    BUILD_DATE=`date -u "%F %R:%S %Z" address@hidden

to:

+ BUILD_DATE=`date -u "+%F %R:%S %Z" --date=$SOURCE_DATE_EPOCH`

Best Regards,
/// Jürgen Sauermann


On 12/05/2017 06:50 PM, Santiago Torres-Arias wrote:
> Hi, thanks for getting back to me!
>
> I think a ./configure option could be an alternative. I'll CC the rest
> of the reproducible-builds ML in case they want to jump in and call me
> out :)
>
> And yes, I think this has come up for other projects too, hence the
> proposal of the S_D_E environment variable (for both setting a build
> date and to indicate that this build should be reproducible).
>
> Thanks again!
> -Santiago.
>
> On Tue, Dec 05, 2017 at 11:27:07AM +0100, Juergen Sauermann wrote:
> > Hi Santiago,
> >
> > I will look into this. Would it be acceptable to have a ./configure option
> > that
> > prevents the setting of the build date (so the build date would be roughly
> > the
> > time when the GNU APL sources were checked in rather than the time when
> > GNU APL was ./configure'd)?
> >
> > I suppose this issue will come up for other projects as well, so maybe a
> > common solution would be worthwhile to be investigated.
> >
> > Best Regards,
> > Jürgen Sauermann
> > GNU APL
> >
> >
> > On 12/04/2017 11:53 PM, Santiago Torres-Arias wrote:
> > > Hi,
> > >
> > > I'm a member of the Arch Linux Security team working on the reproducible
> > > builds initiative. Right now, apl compiles almost reproducibly, with the
> > > only caveat of embedding some time-based information into a header file.
> > > It would be nice if this could be overriden with an environment variable
> > > (or stripped out whatsoever).
> > >
> > > I'm attaching a patch on how I believe this could be achieved.
> > >
> > > Thanks!
> > > -Santiago.