The %clamp_mtime_to_source_date_epoch RPM macro will be set to 1. When an RPM package is built, mtimes of packaged files will be clamped to $SOURCE_DATE_EPOCH which is already set to the date of the latest %changelog entry. As a result, more RPM packages will be reproducible: The actual modification time of files that are e.g. modified in the %prep section or built in the %build section will not be reflected in the resulting RPM packages. Files in RPM packages will have mtimes that are independent of the time of the actual build.
Owners, do not implement this work until the FESCo vote has explicitly ended. The Fedora Program Manager will create a tracking bug in Bugzilla for this Change, which is your indication to proceed. See the FESCo ticket policy and the Changes policy for more information.
Some people seem not to like this. I obviously want to do it, so technically, I am +1, but if the consensus is that this is a bad thing, I am not going to die on this hill.
+1 (as change owner)
+1
I think reproducible builds are an important goal. After reading and considering the devel thread (including the comments from those not fully convinced), I still think this is a reasonable step in that direction.
I thought we already had this enabled, but I might be confusing this with another "clamp" feature of RPM ... so +1
+1 (I love reproducible builds!)
This had (+5, 0, -0) as of the seven-day mark, so this is APPROVED.
(+5, 0, -0)
Metadata Update from @sgallagh: - Issue tagged with: pending announcement
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/2ZKJ7FWMOIXERV5AFH6I5G5R5WRLQTU3/
Metadata Update from @churchyard: - Issue close_status updated to: Accepted - Issue status updated to: Closed (was: Open)
Login to comment on this ticket.