-
Notifications
You must be signed in to change notification settings - Fork 10
Open
Description
Reproducible builds would be useful for a number of different reasons:
- Binary releases of Rust applications which can be independently verified for reproducibility
- Binary crates
- A community build system / global build cache
I believe the main issue for reproducible Rust builds in general is:
Right now it seems like some people are able to successfully use the following tool to test for reproducibility of Rust builds in CI:
https://pypi.org/project/reprotest/
I'm curious if it would make sense to build a Rust-specific tool for this purpose, particularly one that integrated with cargo workflows and can both drive reproducible builds and check them, either in CI or as part of an auditing service. Something like cargo repro
, maybe with a cargo repro build
and cargo repro check
?
naftulikay, rugk, rivy, snf, burdges and 15 morecyplo, andrii-kl and N9199
Metadata
Metadata
Assignees
Labels
No labels