I am working on reproducible builds for openSUSE. Last weekend, I managed the first time to build rpms with 'osc build' that were every bit identical using the rpm+build versions from
https://build.opensuse.org/project/show/home:bmwiedemann:reproducible
for that to work, you also have to export SOURCE_DATE_EPOCH with a timestamp value and add it to /etc/sudoers in the line with Defaults env_keep

Python packages are tricky to get right, because .pyc and .pyo files contain timestamps of their source file and will not be used unless it matches exactly.
It is even more tricky to get fully reproducible builds In OBS,  because the build host name and signature time will vary.
So for now I guess, I will continue working on fixing build-compare failures (e.g. from embedded timestamps or compile-time CPU detection)
Shared publiclyView activity