[asterisk-dev] reproducible builds of asterisk

[Matt Fredrickson]

Hey Tzafrir,

On Wed, Dec 20, 2017 at 3:53 AM, Tzafrir Cohen <tzafrir.cohen at xorcom.com> wrote:
> Hi,
>
> There is a patch in the Debian package to build Asterisk in a
> reproducible way[1] if so needed. Patch is really simple, but as I did
> not write it, I can't push it. I described what it does.
>
> If anybody wants to help Asterisk in that front:
> https://issues.asterisk.org/jira/browse/ASTERISK-27499
>
> Are there any other sources of non-determinism in the Asterisk build
> process?

Great question - not sure myself.

> I'd like to stress again that it's fine that the Asterisk standard build
> process is not reprodicible (e.g.: includes a build timestamp), and the
> patch does not break that. But there are useful use cases for a reprodicible
> build of Asterisk.

I haven't looked very much into reproducible builds and the benefits
you get from it.  Is the desire for reproducible builds mostly about
some kind of perfect, a posteriori verification of running/pre-built
code for reproduction and other debugging purposes?

Or am I missing something?

-- 
Matthew Fredrickson
Digium, Inc. | Engineering Manager
445 Jan Davis Drive NW - Huntsville, AL 35806 - USA