https://bugzilla.redhat.com/show_bug.cgi?id=1020292 --- Comment #45 from Warren Togami <wtogami@xxxxxxxxx> --- It took years but upstream Bitcoin is now approaching a satisfactory replacement for the reproducible build problem. https://github.com/bitcoin/bitcoin/pull/15277 This GNU GUIX based build system is a very minimal deterministic build environment that results in a reproducible binary. It is meant to replace the unverifiable, Ubuntu based Gitian build system. Once upstream is satisfied with the stability of this approach then the upstream deterministic binaries is exactly what we should ship in Fedora's RPM. Hypothetically the minimum core of the build system could be packaged for Fedora so this can be built in the Fedora build system resulting in an identical binary. This will take hopefully a few months. https://github.com/bitcoin/bitcoin/pull/12255/files A different discussion we should have among the various RPM packagers of Bitcoin is where the data directories should be. 10 days ago they changed various paths in upstream's reference .spec file. We don't want Fedora shipping a Bitcoin RPM to cause sudden surprises to people who had different paths from other packages in recent years. A few ideas to reduce risk: * We should consider naming Fedora's package "bitcoincore" for those who want exactly upstream's bit-for-bit identical distribution that also behaves in a manner matching upstream documentation. It should conflict with "bitcoin". A popular feature-fork "bitcoinknots" would have the same binary and configuration files and would thus conflict with these other names. * Also Fedora should disallow any package named "bitcoin". There are multiple reasons for this including unexpected upgrade conflicts with ways it was previously packaged and also convenient way in which to sidestep eternal political fights over what has the right to be called "bitcoin". * Another upstream concern is the risk of old bitcoin binaries in the wild when Fedora goes EOL. The simplest safeguard to this issue is to ship a final RPM update before a Fedora release's EOL that simply removes the binary. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-review@xxxxxxxxxxxxxxxxxxxxxxx
