From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from list by lists.gnu.org with archive (Exim 4.71) id 1f1T61-0004ol-E2 for mharc-grub-devel@gnu.org; Thu, 29 Mar 2018 04:39:45 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:55214) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1f1T5z-0004nf-1M for grub-devel@gnu.org; Thu, 29 Mar 2018 04:39:44 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1f1T5v-0002Tt-Up for grub-devel@gnu.org; Thu, 29 Mar 2018 04:39:43 -0400 Received: from mout.gmx.net ([212.227.17.22]:42673) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1f1T5v-0002Sz-LI for grub-devel@gnu.org; Thu, 29 Mar 2018 04:39:39 -0400 Received: from scdbackup.webframe.org ([91.8.164.220]) by mail.gmx.com (mrgmx102 [212.227.17.168]) with ESMTPSA (Nemesis) id 0Meutp-1fCq0u02cT-00OYds; Thu, 29 Mar 2018 10:39:29 +0200 Date: Thu, 29 Mar 2018 10:37:57 +0200 From: "Thomas Schmitt" To: grub-devel@gnu.org Subject: Re: [PATCH 1/4] Add new "version" command Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit Cc: hdegoede@redhat.com,daniel.kiper@oracle.com,olaf@aepfle.de References: <20180329075302.GB28579@aepfle.de> In-Reply-To: <20180329075302.GB28579@aepfle.de> Message-Id: <136837734269051042930@scdbackup.webframe.org> X-Provags-ID: V03:K0:DPps8Lk26SXrQDM4Kf8NMhktLQo57B/Zsydfkd0PyVHLFfEujak rsG+W3lETV/XVLMDpnXopkMuFw3QauLXt2QNmNaTpXY0MVF5Yf66l3uSL5A1k2a4uSHArNm REci/2pVxFW49bfg88tqoiVTyT5bzd/0R7iV/8J7mbhTLC2MBmrh3AiKQa356so1+Z4a2e3 dfpL1JSXwhLHx25fqPYLg== X-UI-Out-Filterresults: notjunk:1;V01:K0:DukHhvVK8iQ=:Y7bcmK3uPwe+sz0hESjjER Qj9bcS4XFxNXk+D7bV6seJ0HLVs5+PigvYsYeeB2BwESqpBP0SLruu+0ln2t+EiJLip178dI/ oGwBJc784iKMZwZeKrfajC1MLAwc/beeQUeMoD0Z794Ws8x4OxL2kW11agz8xHdXDRn7Nu3Ey c/SS0YM6MTgUstYxY4M7mbbMDnLy8x/854NcHzrOVF1ORFV5+CFwuRcZrZQ43xwFuoPsWQHmZ cr9TF/fcjYXtqYqEtqrWL4SJLLjk0Edm9XbDvZ2z+KHvktU2GJHGrYGjAhWht62pAwxY0x3sj 48PRd7jSxx5sMoBpuXihOchIDSu4DYL8GwrHOVWBv5YDjTTOi3m27dGnhSkwgH6gHppZAmX/9 43QD6iBA8tB7p3HtOik3ZnJa1lSU5/g1BlyKg5sMDWfXsIekYnajY1IbPu8QCbU+Qg5qN57XP p7kZBk0K8yVic/dWHKtnasAVhuNkn0wr7o+OY5O3RFq1gjbMJwtGkcz8xePEYa8M0WQktMhXG Vj3kfzUHy2pZzPf1Slwla8TLyu3DcuBN8mI24AX3OKvXv2AXNl9CwwW8DsS95Iu/qLoJ8MxxF JSzdKsFjYxspQCx8Qf4KtrnPaWd6it4eh1VuxtYI7aqOjwlVuAVYkEjp5tHJZHDp7VHYAdZoK osDofvq85UdOC9LMN9JsYci1dG58wYOqx/a6KdRc/YYSkARd9ElViUAHgDcxZi4oIOb3tEM67 hRfwKyPffjbAuUYpQgmI63pyyGhF9+UkR8UrjjvfW3bM9lTUFyTfeWrEYJRG4ibHbZrl37MUh zYkqwRObH8+Ee7u/JR7uR2Zta2LlMpyM+512SA+1RRPP0rhN2o= X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] [fuzzy] X-Received-From: 212.227.17.22 X-BeenThere: grub-devel@gnu.org X-Mailman-Version: 2.1.21 Precedence: list List-Id: The development of GNU GRUB List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2018 08:39:44 -0000 Hi, Hans de Goede wrote: > > + grub_printf ("%s, build %s %s\n", PACKAGE_STRING, __DATE__, __TIME__); Olaf Hering wrote: > Debian sells something what they call "reproducible build". It's not actually a Debian thing, although some Debian Developers seem to have initiated it and urge people to make binary production deterministic and reproducible. https://reproducible-builds.org/ > Check their website why usage of __DATE__ and __TIME__ is a bad thing. They offer a solution for the problem of timestamps by the definition of an environment variable SOURCE_DATE_EPOCH, which shall override the current time. https://reproducible-builds.org/docs/timestamps/ In the libraries underneath xorriso i based all timestamps and pseudo-random data fields on this user-set timestamp, if it is present. So if you set the variable SOURCE_DATE_EPOCH to the same value before runs of grub-mkrescue, and if all GRUB tools underneath grub-mkrescue build reproducible binaries and xorriso options, and if the other input files are still the same (*), then the resulting ISO images of two runs will be identical. (Needs xorriso-1.4.6 or younger.) (*) Some attributes of input files do not matter in this case. A good tar copy of the input tree should be sufficiently similar. Have a nice day :) Thomas