Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:121843 Return-Path: Delivered-To: mailing list internals@lists.php.net Received: (qmail 63140 invoked from network); 29 Nov 2023 00:54:37 -0000 Received: from unknown (HELO php-smtp4.php.net) (45.112.84.5) by pb1.pair.com with SMTP; 29 Nov 2023 00:54:37 -0000 Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 2CFB318002F for ; Tue, 28 Nov 2023 16:54:44 -0800 (PST) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=-3.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,FREEMAIL_FROM, HTML_MESSAGE,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE, SPF_PASS autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-pg1-f172.google.com (mail-pg1-f172.google.com [209.85.215.172]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Tue, 28 Nov 2023 16:54:43 -0800 (PST) Received: by mail-pg1-f172.google.com with SMTP id 41be03b00d2f7-5bd306f86a8so4440181a12.0 for ; Tue, 28 Nov 2023 16:54:36 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1701219275; x=1701824075; darn=lists.php.net; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:from:to:cc:subject:date:message-id:reply-to; bh=WAMSeEYq36WYcyyD2/42z9oDMMy9li1Fp4dm8uvjSAk=; b=CWDHIDy5iR/e8xgV4/o5c620NGbKHYuRIkveghkjaO/o6FI5Ge5VFsbPjQVKM222Xi W6yUf+VwodCMWZB7YXCugXcrYqMSA9AXBjBijdvPtwC7TI8yq6GkS4MpjnW9hsIVsLdj ScyyBvHwqAIsasOMu3Wq3B4YWwAuXIdWycia9zdrA3b2wzDXD08Udh9MN8sRGz7f6HLw H5AyDHrha/orDmvy20A3+YiFcR5Ok4HbEW18vino7dB1BevMuOmHPRJZwlz+UorlDmfS ctYGf4XRChAf7fajd6peYGlF6CcN464XTpIi/d/cQcyuHoEF+RZUfRwhSloVv8xcn96S J46w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1701219275; x=1701824075; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=WAMSeEYq36WYcyyD2/42z9oDMMy9li1Fp4dm8uvjSAk=; b=YNiHgemdnxcSAd7v4o9LSgHZK4gZVvwVrCPvCHcEBd33Ps/k4vKC8IG+lLts7n8UMD NJ32m3nuBtQDfG0FOmW6BXzcBayo+m8rr9tAj//Esmb0WRAxF5lTCLMFCavPTjp2RCL+ VBfLJy5QxOtn8MN2mnvLHPGdfT6z7w4Q90YyIlCBKnMZsNAmy8xitRKHKo1FEKot/1Jq O8lWtydTh1zHLDoLSh9IBY2mnV4DUtjUkEmWMVs0APJDtlNiKhT8tIBnwoEonAw6NjDx sqSEoxrRtyumgYIw8xJ5m7t77o4y/jCl74k6UNqy4JT9oEYWQpP1Xa/Kadqo8YKEhNWd e0qA== X-Gm-Message-State: AOJu0Yz7IzoTSXgmnM8dj0m+aK5HqOljLx7qmsO/Y/KDVCz5mLSO9O7H yOm/EGdzbXAQVR+cloc2mU8HY+BxeynyUl2Q9xk= X-Google-Smtp-Source: AGHT+IFYV88V73SUF/OzqxVjjYhOBtriChzmjWp0s8KDF3iuUCn+HuThXxtbKlcAVua+/tBPeZjFHyd7JRDLuJNfu6Q= X-Received: by 2002:a05:6a20:da86:b0:18c:57a7:ea29 with SMTP id iy6-20020a056a20da8600b0018c57a7ea29mr11485942pzb.45.1701219274897; Tue, 28 Nov 2023 16:54:34 -0800 (PST) MIME-Version: 1.0 References: <62C2C517-B14F-445E-AD3B-7915544B17B2@php.net> In-Reply-To: Date: Wed, 29 Nov 2023 01:54:22 +0100 Message-ID: To: "Matthew Weier O'Phinney" Cc: Derick Rethans , PHP Developers Mailing List Content-Type: multipart/alternative; boundary="00000000000090bf6a060b3ffafd" Subject: Re: [PHP-DEV] Reproducible Builds From: ocramius@gmail.com (Marco Pivetta) --00000000000090bf6a060b3ffafd Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Wed, 29 Nov 2023 at 01:48, Matthew Weier O'Phinney < mweierophinney@gmail.com> wrote: > On Tue, Nov 28, 2023, 5:28=E2=80=AFPM Derick Rethans wro= te: > > > On 28 November 2023 17:28:18 GMT, Sebastian Bergmann > > wrote: > > > > >While we could probably replace __DATE__ and __TIME__ with > > SOURCE_DATE_EPOCH [3] [4], I cannot help but wonder whether having the > date > > and time when the executable was built in the executable is actually > > useful. How attached are we to having the date and time of the build in > the > > output of phpinfo(), "php -i", etc.? > > > > It is really useful for the development versions of PHP. Knowing whethe= r > > your are running a PHP-dev from last week or last month is important. > > > Would Marco's suggestion of using a git hash solve that? You'd then get > both a reproducible build AND know when/what it was generated from. > Also, refs have a timestamp :-) Marco Pivetta https://mastodon.social/@ocramius https://ocramius.github.io/ --00000000000090bf6a060b3ffafd--