-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 tl;dr: it is a bad thing and should be forbidden While working on reproducible builds for openSUSE I found this interesting class of bugs (see "Depends on" list) https://bugzilla.opensuse.org/show_bug.cgi?id=1109534 In several cases those architecture-dependent noarch packages prevented verification of official OBS builds and also produced incorrect build results in certain circumstances. 1218 packages sounds like a pretty large number, but I expect, that most can be fixed with ~20 changes throughout openSUSE (and its upstreams). E.g. most perl, python, java issues could be fixed with 1-2 patches. My checks did not cover noarch subpackages yet, so there might be some more to come. I'd like openSUSE to move to a policy like Fedora where noarch packages must produce the same build result on all architectures. This means that not only must the package build reproducibly, but it must also avoid writing %_lib in its output. Even for relatively harmless cases like xorg-docs where only the man-pages have /usr/lib64 vs /usr/lib reviewing for the impact of diffs is effort. Ciao Bernhard M. -----BEGIN PGP SIGNATURE----- iF0EARECAB0WIQRk4KvQEtfG32NHprVJNgs7HfuhZAUCW6vrnQAKCRBJNgs7Hfuh ZMaFAKCXquSFIMvx/TKno9mOMt/BHMX4lwCg6Q3RZbgnBFscNU1ecVSW4uGwA1o= =DXnZ -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org