Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:121842 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 61747 invoked from network); 29 Nov 2023 00:48:43 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 29 Nov 2023 00:48:43 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 92A9B18003E for ; Tue, 28 Nov 2023 16:48:50 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,FREEMAIL_FROM, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-vk1-f180.google.com (mail-vk1-f180.google.com [209.85.221.180]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Tue, 28 Nov 2023 16:48:47 -0800 (PST) Received: by mail-vk1-f180.google.com with SMTP id 71dfb90a1353d-4ac2c1a4b87so1896253e0c.0 for ; Tue, 28 Nov 2023 16:48:39 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1701218918; x=1701823718; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=FIGpt4JGTBLImKMtDvLw/VL+mp7Yc9X6ceDkFLZCpXI=; b=cweUA1nyO79P8AiXYDcf4OAIstemkhK1voNER5ru8lrQTjT0QgXaMKP6+f4xa877hh 4MO8Ll4o+s/UDT3ff6G7qhQC67eJDSsj9i+3viQZVFcH8Dxw7bGKHeC4+KsIH2XbRY9r XhIdKdgu2US/izEQtt0k++Opl2aYrH9Z9K2MHdYUZxUqok5YD7iqGTt5IQc+D1horObQ 6WIPb0SyIwRAKX4l5ZY39d3k7xaZSztnOxkRNlocwlD0NmS+HWml/JUyDnyB/QQRFWWH JOPIAuMEZResn+rp/H8gCKN9aci7VQ3CfEQnvLb9+vLQ5ptjAUZHOa7jMcJ93hgrSLu+ BJig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1701218918; x=1701823718; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=FIGpt4JGTBLImKMtDvLw/VL+mp7Yc9X6ceDkFLZCpXI=; b=uw8tPLq3onP0lEa0i35uSzqaOAaV7wdiikMMOJlAUnbmZJBIwmZlqe5wHMNNTD4l41 +3iWH/TmI4Ow+VW2f2grdj2Tq7s6oQSh7KunVCMWT68LYDtTheQ9gBkPtKxi6wUIOy3D T6efLScu3XqQAfLFVrNC8rc5AZ3mcmP0Sphu38pOkynrs/lWIGlSUt6lFN2MsZNYvkmm wJyKydZGqFByojokI7WK2QLTvlVK164IUdQ9RTaaXojgt3ZPLW3WtteOSRlNflfEaTnK 8Qthku5Nbf4j64i0rRX0W8WZanTPWhVRY4Wb9o8Rb6OkObWe7OF5VdKAMQlb0V1cZ8EA HtYA== X-Gm-Message-State: AOJu0YzXEbCjmggZW748gucf6ht4puKNuv7r+3knp8V09sAOug166S5M vW3KVmv9cZjSok14mU1qJnSz6y8fPVXj7Kse8cqEmbOP X-Google-Smtp-Source: AGHT+IHmLzSW6Ws/gA0XWwWHYSxeYkdu+IiyY246WU4evQisz3ESxil3rOJ1qGH4h54PixLYNiwB/7KgiDRAsVPwj/k= X-Received: by 2002:a05:6122:179a:b0:495:dc43:7440 with SMTP id o26-20020a056122179a00b00495dc437440mr13868567vkf.9.1701218918566; Tue, 28 Nov 2023 16:48:38 -0800 (PST) MIME-Version: 1.0 References: <62C2C517-B14F-445E-AD3B-7915544B17B2@php.net> In-Reply-To: <62C2C517-B14F-445E-AD3B-7915544B17B2@php.net> Date: Tue, 28 Nov 2023 18:48:28 -0600 Message-ID: To: Derick Rethans Cc: PHP Developers Mailing List Content-Type: multipart/alternative; boundary="0000000000005392e4060b3fe581" Subject: Re: [PHP-DEV] Reproducible Builds From: mweierophinney@gmail.com ("Matthew Weier O'Phinney") --0000000000005392e4060b3fe581 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Nov 28, 2023, 5:28=E2=80=AFPM Derick Rethans wrote= : > On 28 November 2023 17:28:18 GMT, Sebastian Bergmann > wrote: > > >While we could probably replace __DATE__ and __TIME__ with > SOURCE_DATE_EPOCH [3] [4], I cannot help but wonder whether having the da= te > and time when the executable was built in the executable is actually > useful. How attached are we to having the date and time of the build in t= he > output of phpinfo(), "php -i", etc.? > > It is really useful for the development versions of PHP. Knowing whether > your are running a PHP-dev from last week or last month is important. Would Marco's suggestion of using a git hash solve that? You'd then get both a reproducible build AND know when/what it was generated from. > > > > --0000000000005392e4060b3fe581--