Build reproducibility test

[szszszsz]

Hi!

Have you tried to confirm build reproducibility [2] with nitrocli? I wanted to do so using reprotest [1], however Rust does not seem to be supported well by it (I got toolchain-related errors despite multiple attempts to fix that [3]). I saw that there is a new tool used to confirm packages' build reproducibility for Arch Linux, and seemed to work with Rust packages, but I cannot find it right now unfortunately.

I will probably revisit this problem in some time.

[1] https://pypi.org/project/reprotest/
[2] reproducible-builds.org/
[3] rust build error: no default toolchain configured

[robinkrahl]

Debian packages are automatically tested for build reproducibility, and as far as I see, nitrocli is reproducible [1]. Note that the Debian Rust packaging software, debcargo [2] and dh-cargo [3], made some special provisions to make the builds reproducible. For example, the build path is embedded into the binary per default [4]. [1] https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/rust-nitrocli.html [2] https://salsa.debian.org/rust-team/debcargo [3] https://salsa.debian.org/rust-team/dh-cargo [4] https://salsa.debian.org/rust-team/dh-cargo/-/commit/089cf441f4a7b111ab56f3540bc8465536c9e08e

[d-e-s-o]

Thanks Robin!

I am closing this issue as it seems that no action is required. @szszszsz please let me know if there is something else missing.