Daemon icon indicating copy to clipboard operation
Daemon copied to clipboard

reproducible engine binary build

Open bmorel opened this issue 3 years ago • 1 comments

Currently, generated binary files contains the absolute path from where they where built. This is unnecessary, break reproducible builds and can leak informations about modder's systems.

I think this should be fixed. This also applies to unvanquished.

bmorel avatar Dec 29 '21 21:12 bmorel

For the record, the NixOS package (that builds the engine) is reproducible. Likely because the build happens in a fixed directory.

$ nix-build '<nixpkgs>' -A unvanquished --check --keep-failed
/nix/store/vn4y8yiijl37qvmr2zvgpgdywhw235w8-unvanquished-0.52.1
(exit 0)

necessarily-equal avatar Jan 03 '22 15:01 necessarily-equal