[tor-dev] Proposal 297: Relaxing the protover-based shutdown rules

[Ian Goldberg]

On Thu, Sep 20, 2018 at 02:47:23PM +0100, Iain Learmonth wrote:
> Hi,
> 
> On 20/09/18 00:51, Ian Goldberg wrote:
> > If you make it use, say, the timestamp on the tip git commit of the
> > source, then it's (a) automated, and (b) reproducible.  But that's more
> > of a build date than a release date, of course.  (That's what otr uses.)
> 
> Please don't make your build system depend on git!
> 
> Distributions don't want to ship the entire project history with every
> package release.
> 
> stem had been doing this and as a result the test suite had never been
> run as part of the build process for the Debian package, which always
> starts from a tarball with no VCS information. (This is now fixed in stem).
> 
> https://trac.torproject.org/projects/tor/ticket/26984

To be clear, the place this is used in otr is exactly to build the
released *source tarball* from git, so that even the source tarball is
reproducible.  The binary package builders then build (reproducible)
binaries from the reproducible source tarball.

   - Ian