Mailinglist Archive: opensuse-factory (226 mails)

< Previous Next >
[opensuse-factory] arch-dependent noarch packages
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

tl;dr: it is a bad thing and should be forbidden


While working on reproducible builds for openSUSE
I found this interesting class of bugs (see "Depends on" list)
https://bugzilla.opensuse.org/show_bug.cgi?id=1109534

In several cases those architecture-dependent noarch packages
prevented verification of official OBS builds and also produced
incorrect build results in certain circumstances.

1218 packages sounds like a pretty large number, but I expect, that
most can be fixed with ~20 changes throughout openSUSE (and its
upstreams).
E.g. most perl, python, java issues could be fixed with 1-2 patches.
My checks did not cover noarch subpackages yet, so there might be some
more to come.


I'd like openSUSE to move to a policy like Fedora where noarch
packages must produce the same build result on all architectures.
This means that not only must the package build reproducibly, but it
must also avoid writing %_lib in its output.

Even for relatively harmless cases like xorg-docs
where only the man-pages have
/usr/lib64 vs /usr/lib
reviewing for the impact of diffs is effort.


Ciao
Bernhard M.
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQRk4KvQEtfG32NHprVJNgs7HfuhZAUCW6vrnQAKCRBJNgs7Hfuh
ZMaFAKCXquSFIMvx/TKno9mOMt/BHMX4lwCg6Q3RZbgnBFscNU1ecVSW4uGwA1o=
=DXnZ
-----END PGP SIGNATURE-----
--
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
To contact the owner, e-mail: opensuse-factory+owner@xxxxxxxxxxxx

< Previous Next >
Follow Ups