On Thu, Apr 02, 2026 at 08:55:15PM +0100, Steve McIntyre wrote: > Hey folks, > > On Thu, Apr 02, 2026 at 11:32:37AM +0200, Jochen Sprickerhof wrote: > >* Adrian Bunk <[email protected]> [2026-03-31 11:06]: > >> On Mon, Mar 30, 2026 at 09:32:48PM +0100, Steve McIntyre wrote: > >> > ... > >> > So what *exactly* do you mean by a "vendored compiler"? I don't > >> > *think* we need a special particular build/version of the compiler to > >> > build shim. What we *do* need is to be able to rely on building > >> > consistently reproducible (byte-identical) binaries in > >> > unstable/testing for a short(-ish) period. That period is typically a > >> > few weeks (but potentially up to a few months), depending on how long > >> > it takes for people to reproduce and review our builds during the shim > >> > review process: > >> > ... > >> > >> Do people have to reproduce the build in unstable, or would snapshot work? > > > >Using snapshot sounds like a great idea. > > > >@Steve: would that be an option for you? > > > >An easy way to reproduce shim is: > > > >wcurl > >https://buildinfos.debian.net/buildinfo-pool/s/shim/shim_16.1-1_amd64.buildinfo > > > >debrebuild --buildresult=out --builder=sbuild+unshare --cache=cache > >shim_16.1-1_amd64.buildinfo > > > >Feel free to ping me if there are problems with it. > > Using snapshot.d.o is an obvious option, yeah! I've used it for this > in the past (see example in [1]), but some of our reviewers told me > they had issues trying to reproduce as snapshot.d.o wasn't working > reliably. That's why I've not relied on it since. I can try again if > that would make people happier here? >...
I want to repeat that your rationale for using an older compiler does not match well with reality. When Matthias does gcc (or openjdk) uploads to unstable, this tends to happen in a batch of half a dozen versions. Number of uploads to unstable during Q1 2026: 4x gcc-11 3x gcc-12 6x gcc-13 4x gcc-14 4x gcc-15 4x gcc-16[1] A point could be made that newer versions contain more changes, but every version is a moving target - especially >= 13 where unstable gets updates from the maintained upstream stable branch 1-2 times per month. cu Adrian [1] pre-release version, also had uploads to experimental

