Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:122822 X-Original-To: internals@lists.php.net Delivered-To: internals@lists.php.net Received: from php-smtp4.php.net (php-smtp4.php.net [45.112.84.5]) by qa.php.net (Postfix) with ESMTPS id 07A591A009C for ; Sat, 30 Mar 2024 13:20:37 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=php.net; s=mail; t=1711804863; bh=MxJ/rE3U81jCYNb10ZNHxDnzojyoIBXsPG/5hdsZtbM=; h=Date:Subject:To:References:From:In-Reply-To:From; b=Qrf82+LT9juakllohGHugLxtwyr5vefBwwzG4K+xF5zc47q1Ua683d3jjOBoPFEWg bPo+73AcBYUr24CjsQE/ktPoyWiMgVBHqdsUL3GnyfmiQSwJpz2wnhz69RO1SbD0OM J4uH3WFw358o4OM9L3YObug+d3mTQaewuvpq8GneeE/7zbVT1InY0cAuYjxTJWQck8 gwYRUvtLiL0nAMMQHhqa56BRzl5y6LkXRjmW5FqH9ZvzcfkywUnleORi0Errc2CY60 SWRtvvH0BubULNRr9RS5flbR+e6btp0dglqXAcVdeygepOQNJcq/OqpHYHafFUZe8N S1q+qNtpQbxMA== Received: from php-smtp4.php.net (localhost [127.0.0.1]) by php-smtp4.php.net (Postfix) with ESMTP id 8233018006E for ; Sat, 30 Mar 2024 13:20:59 +0000 (UTC) X-Spam-Checker-Version: SpamAssassin 4.0.0 (2022-12-13) on php-smtp4.php.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=BAYES_50,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,DMARC_PASS,FREEMAIL_FROM, RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=no autolearn_force=no version=4.0.0 X-Spam-Virus: No X-Envelope-From: Received: from mail-yw1-f173.google.com (mail-yw1-f173.google.com [209.85.128.173]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by php-smtp4.php.net (Postfix) with ESMTPS for ; Sat, 30 Mar 2024 13:20:59 +0000 (UTC) Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-6146858b3f1so8472047b3.0 for ; Sat, 30 Mar 2024 06:20:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1711804831; x=1712409631; darn=lists.php.net; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc:subject:date:message-id:reply-to; bh=xlS0/bnExBJi8hOmx2wcFRVl3h3B2vZ/P7F+EgCZb1o=; b=jezCnWmNfmXs7Mb8u0lwarznPMZv6n6ghGbmnEUAZ1D7eR+p+Wmazx/t+QQxmxRSIA wePS5rdPY76yQMcvVoOq0lYxDa55xw52jwvhIw7oqjebc5eI79ZuFzuj1ILpTlBUNrA8 WQ1CXhpJfUcqr1gffNWJkjNaSuD1SVtVWAyPPlHVVb9OMFvYxWBgbgVXVrn2cY5vO54X 9yBnUZrQn4PEl3rePU7UhIWBl7PXXJQXOOhuqaQhyYqP6EKjCY9AZqaBRErSHT35QdBk l3ctJYzrB4u+PJxmzg4Y6mnqbcLso2l74PV61D+ig4k6aQ/X6HWudcG8Gnekk6mAE4/M PeaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1711804831; x=1712409631; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=xlS0/bnExBJi8hOmx2wcFRVl3h3B2vZ/P7F+EgCZb1o=; b=g/5PRgH3ZZok1gr5HCuN76yXeXi2zIk6+LI1/rLqesGJAW0fXo7PvA/TRMb35mS0Rz x3hxjfJKyuHoY9zXUHwTJO2UBm9s7kSK8p2jbw/4fgdKQwFMm/HzDekYDsxLbwKrUUxD L5nwEHN+gIxKvabCh0f21Nf8swA2rR1z2+atqcbXbNaxzXk2/0nv9b4AsfV7N93abI6F gBE6kuBcnScPLd8u7h6fX/zeyPgb0WVl/7ASeWOfVKBusJAU+MZfOqI9kZK1FBWL+YNQ 4jr+uSRkBOwDmhtvSGXQHEBAb9H+vjMExF3XcyQMzQAYfWBb8V1H+0vw139UKSvTffm0 Equw== X-Forwarded-Encrypted: i=1; AJvYcCWS39TGf+SCBIUS5HNBPxzOO+EHIpSB3WRJ9MuF3gx9VixREgIEHgl7+2bIVM+CZ0zxd4/eX0zNYqFknFmiKtGwvVyNwZHjUw== X-Gm-Message-State: AOJu0Yw+ZeUAJPpjSzyTsRIuIBry7feTAxiy5uy8zR27vTu1LbFCc8h2 RrVaeTh9r46W9imRECq5hQOnqix4LmG0pRvpvlc4Cmvig/qPnSgD6YeAQxWpKA== X-Google-Smtp-Source: AGHT+IFhLzdi+MVplGhhOCxFZRhyUqTL0PpWFpAkPFip1wf9nXL5NiIqni+ICttD1roJSXBnAwobCQ== X-Received: by 2002:a81:718a:0:b0:60a:689d:e145 with SMTP id m132-20020a81718a000000b0060a689de145mr4181726ywc.31.1711804831295; Sat, 30 Mar 2024 06:20:31 -0700 (PDT) Received: from [172.20.13.253] ([8.9.43.162]) by smtp.gmail.com with ESMTPSA id n126-20020a0de484000000b0061184113183sm1278869ywe.138.2024.03.30.06.20.30 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Sat, 30 Mar 2024 06:20:30 -0700 (PDT) Message-ID: <586c3320-b38b-47bb-9c06-6762f1eb242b@gmail.com> Date: Sat, 30 Mar 2024 07:20:29 -0600 Precedence: bulk list-help: list-post: List-Id: internals.lists.php.net MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [PHP-DEV] Consider removing autogenerated files from tarballs Content-Language: en-US To: Sebastian Bergmann , PHP Internals References: <9008050F-4EE1-4E19-B513-654602E118A7@benramsey.com> <3d90e236-49d8-4f80-a6dd-3584267a83e3@php.net> In-Reply-To: <3d90e236-49d8-4f80-a6dd-3584267a83e3@php.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit From: smalyshev@gmail.com (Stanislav Malyshev) Hi! On 3/30/24 1:27 AM, Sebastian Bergmann wrote: > Am 30.03.2024 um 05:17 schrieb Ben Ramsey: >> This is also why our release managers sign the tarballs with their own >> GPG keys, after generating the artifacts. This verifies the release >> manager was the one who generated the files. > > But does the release manager generate the files (and the tarball) in a > reproducible way? I understand that's what ./scripts/dev/makedist and ./scripts/dev/genfiles do, but I suspect exact bits in resulting configure and lexers may depend on the exact version of tools & utils used. For upstream packagers like distros I'd likely recommend using these tools directly anyway, and not rely on what's in the package. -- Stas Malyshev smalyshev@gmail.com