Wojtek Porczyk

On Mon, Aug 16, 2021 at 05:19:56AM -0700, Dmitrii Kuvaiskii wrote: > Ok, fair enough. Sounds like overloading `graphene-manifest` with several > unrelated features, but there won't be many divergences,...

@ying2liu I've read https://01.org/sites/default/files/documentation/intel_sgx_sdk_developer_reference_for_linux_os_pdf.pdf pages 14-20. I understand that we already generate correct structure, and this proposal already states that we should expose a Python function `grapenelibos.sgx_sign.get_tbssigstruct` to generate that....

> Please note, two-step signing script includes: 1. The first-step creates the signing material (the users could decide how to send the material to the signing facility and use whatever...

`PYTHONPATH` is a LD_LIBRARY_PATH-level hack and I don't think it should be needed, if you didn't override `--prefix` in `meson setup` (and I presume you didn't, because it's `/usr/local`, right?)....

Most distros override this file to include LSB/FHS-style `/usr/local` directories while configuring with `--prefix=/usr`. If arch doesn't then I'd say it's a distro-related problem, and on Arch we should suggest...

> That's some strong language there. Yes, you're right, that language has been uncalled for. I'm sorry. > The Debian patches to support this are fairly invasive and break pip...

No, it's OK, thank you. I try not to create unnecessary barriers between us as an upstream and our users and distros, both technical and language-wise. I might have failed...

What is important in reproducible builds is definition of expected build environment (with supported variability) and thorough testing thereof. No-one is working on this at the moment. The best thing...

> @woju What do you mean by `sed shebang`? When change the shebangs, we'll need some mechanism of controlling them when packaging for different distros. Most likely in packaging (not...

> @woju I see your point. Is it something that we want to do in the future, or > do you want to see this change now? This isn't either...