Pin everything the build reads (toolchain, lockfiles, vendored crates, node and pnpm versions, SOURCE_DATE_EPOCH), build the RPM on two machines, and diff. Document every remaining difference and fix what can be fixed.
Acceptance
diffoscope on two independent builds of the same tag is empty, or every difference is listed in doc/reproducibility.md with a reason.
Parent: #10
## Scope
Pin everything the build reads (toolchain, lockfiles, vendored crates, node and pnpm versions, `SOURCE_DATE_EPOCH`), build the RPM on two machines, and diff. Document every remaining difference and fix what can be fixed.
## Acceptance
`diffoscope` on two independent builds of the same tag is empty, or every difference is listed in `doc/reproducibility.md` with a reason.
## Depends on
The RPM child of #5.
grenade
added the child label 2026-09-15 12:42:04 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Parent: #10
Scope
Pin everything the build reads (toolchain, lockfiles, vendored crates, node and pnpm versions,
SOURCE_DATE_EPOCH), build the RPM on two machines, and diff. Document every remaining difference and fix what can be fixed.Acceptance
diffoscopeon two independent builds of the same tag is empty, or every difference is listed indoc/reproducibility.mdwith a reason.Depends on
The RPM child of #5.