Hey folks, On Thu, Apr 02, 2026 at 11:32:37AM +0200, Jochen Sprickerhof wrote: >* Adrian Bunk <[email protected]> [2026-03-31 11:06]: >> On Mon, Mar 30, 2026 at 09:32:48PM +0100, Steve McIntyre wrote: >> > ... >> > So what *exactly* do you mean by a "vendored compiler"? I don't >> > *think* we need a special particular build/version of the compiler to >> > build shim. What we *do* need is to be able to rely on building >> > consistently reproducible (byte-identical) binaries in >> > unstable/testing for a short(-ish) period. That period is typically a >> > few weeks (but potentially up to a few months), depending on how long >> > it takes for people to reproduce and review our builds during the shim >> > review process: >> > ... >> >> Do people have to reproduce the build in unstable, or would snapshot work? > >Using snapshot sounds like a great idea. > >@Steve: would that be an option for you? > >An easy way to reproduce shim is: > >wcurl >https://buildinfos.debian.net/buildinfo-pool/s/shim/shim_16.1-1_amd64.buildinfo > >debrebuild --buildresult=out --builder=sbuild+unshare --cache=cache >shim_16.1-1_amd64.buildinfo > >Feel free to ping me if there are problems with it.
Using snapshot.d.o is an obvious option, yeah! I've used it for this in the past (see example in [1]), but some of our reviewers told me they had issues trying to reproduce as snapshot.d.o wasn't working reliably. That's why I've not relied on it since. I can try again if that would make people happier here? [1] https://github.com/steve-mcintyre/shim-review/blob/debian-shim-15.6-debian-12/Dockerfile -- Steve McIntyre, Cambridge, UK. [email protected] Mature Sporty Personal More Innovation More Adult A Man in Dandism Powered Midship Specialty
