DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:subject:to:references:from:message-id:date
	:mime-version:in-reply-to:content-type
	:content-transfer-encoding; q=dns; s=default; b=U6dTxEqTWtlYWiZb
	y8nMEdEKUkqLSeH/9U5VdF/AsbmdjEwK6n1m3K4WaBEyTTDaFq1Jc4RXs4nXMNZU
	smVsBtCyMtvZH87JcIi1qKwn3qP6BjGuqweK6RlM8fuwsfiuzQBwzAw7/5wTestB
	DRdC2DryBDb9kUusnO+C7mB9Z3s=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
Subject: Re: Deterministic builds
To: cygwin@cygwin.com
References: <ff5f5b20-33e2-ef2d-012a-a9e02903ba21@cornell.edu> <CAFo71_4uBbNZ6JakbNE3mJ3HgvFRnFa-dK+GSrNdpmds1iXzow@mail.gmail.com> <258af4b4-e1f0-171c-4b94-772603038fde@cornell.edu> <c69da505-542a-0256-46d9-f35a379c3443@cornell.edu> <AC9BB4BE-DE9D-4AC3-8FB3-7B0E58851F03@etr-usa.com>
From: Ken Brown <kbrown@cornell.edu>
Message-ID: <466e1bc4-94b6-8eb7-0ea8-59680838e549@cornell.edu>
Date: Thu, 5 May 2016 17:46:16 -0400
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.0
MIME-Version: 1.0
In-Reply-To: <AC9BB4BE-DE9D-4AC3-8FB3-7B0E58851F03@etr-usa.com>
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Transfer-Encoding: 8bit

On 5/5/2016 4:26 PM, Warren Young wrote:
> On May 5, 2016, at 11:59 AM, Ken Brown <kbrown@cornell.edu> wrote:
>>
>> Ismail's suggestion did indeed produce deterministic builds in my setup.  I built a large project with about 150 executables, changed a few source files, removed the build directory, rebuilt, and found that only the (expected) few executables changed.
>
> …and does it do the same on a very different system?  e.g. Try it on both 64-bit Windows 10 and on 32-bit Windows 7.
>
> Perhaps you don’t need it, but part of the reason for the big push recently for reproducible builds is to be able to verify that binaries from a given source (e.g. Red Hat’s RPM feed) are in fact buildable from the sources distributed from the same source (e.g. Red Hat’s SRPMs).

Yes, that's a much more ambitious goal, and it's not what I was trying 
to do.

Ken

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple