On Thu, Mar 07, 2019 at 06:49:12PM +0000, Michael Zhang wrote: > Recently, someone advised me that I have to build the binaries from the > source code in the %install phase. That is to say that I have to make it > transparent how the binaries (ex. jar) are built. As I understand it, in Debian, developers can build packages on their own systems and upload them. In Fedora, it doesn't work like that -- we have dist-git (https://src.fedoraproject.org/) which holds spec files and patches and references to source code in the look-aside cache. Those source files should be "pure" -- they shouldn't have pre-built binaries. > So after tinkering around, I can incorporate the building of the > openliberty.zip into the Travis CI build but I cannot directly add it > into the %install phase of the rpm spec file. Would that be fine? So, no. :) Travis CI is completely outside of our control, and we don't have a way to verify that the thing built there came from the provided source. And, someone without access to Travis CI wouldn't be able to replicate your build. -- Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> Fedora Project Leader _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx