Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add reproducible tarballs to the enhancements of EasyBuild v5 #279

Merged
merged 3 commits into from
Sep 27, 2024
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
15 changes: 15 additions & 0 deletions docs/easybuild-v5/enhancements.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ Various significant enhancements are included in EasyBuild v5.0, including:

* [`run_shell_cmd` function][run_shell_cmd]
* [Granular exit codes][granular_exit_codes]
* [Reproducible tarballs][reproducible_tarballs]

---

Expand All @@ -25,3 +26,17 @@ checksum check. The full list of exit codes is defined in the class
EasyBuild will always return its own exit codes on termination. Other exit
codes from external processes executed through `run_shell_cmd` or HTTP response
status codes are reported in the corresponding logs.

## Reproducible tarballs { : #reproducible_tarballs}

EasyBuild can now generate reproducible tarballs of sources downloaded from Git
lexming marked this conversation as resolved.
Show resolved Hide resolved
repositories. This means that the contents of sources obtained by cloning Git
repositories will be consistent across different systems and across time,
allowing to reliably validate those sources with checksums. EasyBuild follows
the [archival guidelines from reproducible-builds.org](https://reproducible-builds.org/docs/archives/)
to generate reproducible tarballs.

This new feature does not apply to sources cloned with `keep_git_dir` enabled.
Including the `.git` folder in the sources is inherently time-dependent as it
contains information about the clone action itself, which hinders the creation
of a reproducible tarball.
Loading