On Fri, Jul 01, 2022 at 08:30:33AM -0400, Robert Marcano via devel wrote: > It removes a step so it makes it easier, but at the same time remove > the existence of a copy of the source code (SRPM) in parallel with > the binaries. We absolutely need that, but source RPMs are not the only (or best!) way to do that. > There is a reason all Fedora RPMs sources are stored on Fedora > infrastructure instead of automatic downloads from source > repositories. Imagine an entire Fedora built that way and think > about the reproducibility of that build. Maybe another process could > replace it, but going directly to source repositories is a step > backwards. If we had all of the source exploded into source repositories under our control, and built from that, we probably could get _more_ reproducibility. -- Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> Fedora Project Leader _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
