Curl fails to build reproducibly about curl

[charles2910]

I guess an easy way to solve would be to use the ISO date as yyyy-mm-dd instead of relying on the %B which depends on the locale

[bagder]

I suppose we should switch to gmtime when SOURCE_DATE_EPOCH is set.

Why does it need to build the same for different TZ settings? If you want to reproduce shouldn't you stick to the same TZ?

[bagder]

Sorry, I meant locale. Why does it need to build the same output when you change locale?

[charles2910]

Sorry, I meant locale. Why does it need to build the same output when you change locale?

I think it's a goal set by the reproducible builds efforts. By their description:

First, the build system needs to be made entirely deterministic: transforming a given source must always create the same result. For example, the current date and time must not be recorded and output always has to be written in the same order.

Second, the set of tools used to perform the build and more generally the build environment should either be recorded or pre-defined.

Third, users should be given a way to recreate a close enough build environment, perform the build process, and validate that the output matches the original build.

The rationale would be to allow anyone to check if the provided binary matches a "build from my machine".

[bagder]

Yeah, good thinking. I made this change as well in #13243

[bagder]

@charles2910 does #13243 fix the problems for you?

[charles2910]

Yes, it did fix the pipeline. Thanks!