From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 8DA404406C; Sun, 19 May 2024 19:13:40 +0200 (CEST) Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 1F0BE4029C; Sun, 19 May 2024 19:13:40 +0200 (CEST) Received: from wfout1-smtp.messagingengine.com (wfout1-smtp.messagingengine.com [64.147.123.144]) by mails.dpdk.org (Postfix) with ESMTP id 316214028B for ; Sun, 19 May 2024 19:13:38 +0200 (CEST) Received: from compute2.internal (compute2.nyi.internal [10.202.2.46]) by mailfout.west.internal (Postfix) with ESMTP id 4894F1C0007D; Sun, 19 May 2024 13:13:34 -0400 (EDT) Received: from mailfrontend1 ([10.202.2.162]) by compute2.internal (MEProxy); Sun, 19 May 2024 13:13:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=monjalon.net; h= cc:cc:content-transfer-encoding:content-type:content-type:date :date:from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to; s=fm1; t=1716138813; x=1716225213; bh=fQIfVhul11UBGMzwk095mFqzfkqOT94HqxS5YzvuPEA=; b= i88uO0GPM9dsJITln6j0/5ynq/kLOO4De28UngncWKcYYIfbNd0z1fI/sgPsuWwM 44YgfMOiIOEF/bxDr3DIWpO7HW/udxH3ASC0wOVjIZiHexCuEo5r3zbNEztxujXK MWQzoNYTj822Bm14wE+74ihrv38ENRJy4KPCTALmnhIFrpRoxJmJgqgnNmuITvbD aSXIUROPyA/kmDAljtRnBR8cPg80F+/Zgobz0m4YVI0P+VjzzQxaCksNvlG5b5Mg yqjZ6ndKLzjZAcjcw+99vFB7O85PU7aT+CTQ73U1bsjqZTBPoaSuK7phoDQAoPRU mjn2cG47iYxABcO5BzeJEg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-transfer-encoding :content-type:content-type:date:date:feedback-id:feedback-id :from:from:in-reply-to:in-reply-to:message-id:mime-version :references:reply-to:subject:subject:to:to:x-me-proxy:x-me-proxy :x-me-sender:x-me-sender:x-sasl-enc; s=fm1; t=1716138813; x= 1716225213; bh=fQIfVhul11UBGMzwk095mFqzfkqOT94HqxS5YzvuPEA=; b=Y lv+stAzR+Brr9VbThFKPyo9NLplC+A3MP+g8f4bqhJGmbc4pNOO8/ANKGBid2UGH v1h5qHsdBgsbn/eHFSTOJBitwRHtjvM89IHtLl2nTYtIuF7imVXUnE0ynPgLMRWB XEtmxDD7iJEm+92OdFazCe3QMTzZyScmlO1DXcdzK3LxYFiDYp5scbFd5b/dnWGo Dklt8/GRSabizQ6AN/CJodpCCsK5+EZxjb/Miw3rCej3g9pmeXKHFgLtPxA7I2IR S4ECE4Ov5YXjeNoVTR/FD0AnrXmvGGLBT626a4MdxzbokPgyjB8gAu4Om/XVwJ7t 2k39ind9c16sXbj2wsGqA== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedvledrvdehkedguddtkecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpqfgfvfdpuffrtefokffrpgfnqfgh necuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivghnthhsucdlqddutddtmd enfghrlhcuvffnffculddqiedmnecujfgurhephffvvefufffkjghfggfgtgesthfuredt tddtjeenucfhrhhomhepvfhhohhmrghsucfoohhnjhgrlhhonhcuoehthhhomhgrshesmh honhhjrghlohhnrdhnvghtqeenucggtffrrghtthgvrhhnpedvtedvgfffffetkeffgfeh vdefvdevhffhgeekvdetjeefjeekgfdvgfefffekvdenucffohhmrghinheptghishgrrd hgohhvnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrghmpehmrghilhhfrhhomhep thhhohhmrghssehmohhnjhgrlhhonhdrnhgvth X-ME-Proxy: Feedback-ID: i47234305:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Sun, 19 May 2024 13:13:32 -0400 (EDT) From: Thomas Monjalon To: Luca Boccassi Cc: Christian Ehrhardt , Bruce Richardson , dev@dpdk.org, david.marchand@redhat.com, "Mcnamara, John" Subject: Re: [PATCH] doc: ensure sphinx output is reproducible Date: Sun, 19 May 2024 19:13:31 +0200 Message-ID: <2121200.bB369e8A3T@thomas> In-Reply-To: References: <20230629125838.1995751-1-christian.ehrhardt@canonical.com> <24173311.ouqheUzb2q@thomas> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="utf-8" X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org 19/05/2024 18:36, Luca Boccassi: > On Sun, 19 May 2024 at 15:01, Thomas Monjalon wrote: > > 17/05/2024 13:29, Luca Boccassi: > > > On Mon, 27 Nov 2023 at 17:04, Bruce Richardson > > > wrote: > > > > > > > > On Mon, Nov 27, 2023 at 05:45:52PM +0100, Thomas Monjalon wrote: > > > > > I would prefer adding an option for reproducible build > > > > > (which is not a common requirement). > > > > > > > > > Taking a slightly different tack, is it possible to sort the searchindex.js > > > > file post-build, so that even reproducible builds get the benefits of > > > > parallelism? > > > > > > Given the recent attacks with malicious sources being injected in open > > > source projects, reproducible builds are more important than ever and > > > should just be the default. > > > > Yes it should be the default when packaging. > > Why should it be the default for normal builds? > > Build reproducibility is everyone's responsibility, not just Linux > distributions. There should be no difference between a "normal build" > and a "packaging build". As far as I know, it is still fully supported > for DPDK consumers to take the git repository, build it and ship it > themselves - those cases also need their builds to be reproducible. Sorry I really don't understand this point. The goal of a reproducible build is to maintain a stable hash, right? This hash needs to be stable only when it is published, isn't it? So isn't it enough to give a build option for having a reproducible build? > Nowadays reproducibility is no longer a "nice-to-have", it's table > stakes, as especially after the cybersecurity executive order of the > US govt from some time ago, procurement rules are getting stricter. > See the "Reproducible Builds" paragraph under the "2.4 Harden the > Build Environment" section in this CISA document on supply chain > security recommendations: > > https://www.cisa.gov/sites/default/files/publications/ESF_SECURING_THE_SOFTWARE_SUPPLY_CHAIN_DEVELOPERS.PDF