1. 02 Jan, 2022 2 commits
    • Xiretza's avatar
      makepkg: use -ffile-prefix-map instead of -fdebug-prefix-map · e37f7d8b
      Xiretza authored and Allan McRae's avatar Allan McRae committed
      >From gcc(1):
      	[...] Specifying this option is equivalent to specifying all the
      	individual -f*-prefix-map options. This can be used to make reproducible
      	builds that are location independent.
      Specifically, this additionally enables -fmacro-prefix-map=, which causes
      prefix mapping to be applied to expansions of __FILE__ and similar macros.
      Without this option, if source files are compiled by passing the
      absolute file path to the compiler (as done by e.g. cmake), any
      expansions of __FILE__ (e.g. from uses of assert()) will contain
      Signed-off-by: Allan McRae's avatarAllan McRae <allan@archlinux.org>
    • Allan McRae's avatar
      Update copyright years · 90df85e9
      Allan McRae authored
      ./build-aux/update-copyright 2021 2022
      Signed-off-by: Allan McRae's avatarAllan McRae <allan@archlinux.org>
  2. 29 Dec, 2021 7 commits
  3. 24 Dec, 2021 1 commit
  4. 12 Dec, 2021 1 commit
  5. 21 Nov, 2021 1 commit
  6. 20 Nov, 2021 7 commits
  7. 04 Sep, 2021 20 commits
  8. 08 Aug, 2021 1 commit
    • Allan McRae's avatar
      libmakepkg: reproducibilty for python packages · 1c5a5688
      Allan McRae authored
      Arch Linux has been setting PYTHONHASHSEED=0 to create deterministic
      .pyc files.  After a thorough review by the Arch Security Team, setting
      this variable was determined not to generated vulnerable .pyc files, as
      when the loader loads the .pyc file and unmarshalls it, the internal
      runtime will just populate the unordered data structures and use a new
      runtime hash for them.
      Signed-off-by: Allan McRae's avatarAllan McRae <allan@archlinux.org>