Reproducable builds

Hal Murray halmurray at sonic.net
Wed Aug 5 03:32:50 UTC 2026


I started looking at the patch files.  Looks good, thanks.

But it's hard to verify all that by eyeball.  Is there a way we can get 
the reproducable build stuff to verify that you haven't make any real 
changes?

If I build ntpd, get the checksum, build again (no source changes) I get 
the same sum.

If I add a comment, I get a different sum.

Is there a flag or such that will leave ignore comments?

------

I can use objdump to look at the code.  It puts the file name in the 
output, but skipping that part of a diff by hand is pretty simple.

1529 looks clean.

1530 says:
21280c21280
<    15875:	be 38 0f 00 00       	mov    $0xf38,%esi
---
>    15875:	be 46 0f 00 00       	mov    $0xf46,%esi
24790c24790
<    19113:	be 44 09 00 00       	mov    $0x944,%esi
---
>    19113:	be 4d 09 00 00       	mov    $0x94d,%esi

1531 and 1532 are clean.


Do you want me to approve the ones I like?


-- 
These are my opinions.  I hate spam.





More information about the devel mailing list