Released artifacts must not change (prereq for 0.4.0 release) about distributions

[dignifiedquire]

Are you sure checksums actually change? (except for 0.4 which is currently a moving target)

[Kubuxu]

Different go versions will for sure change the checksums because of changes in stdlibs, optimizations and so on.

Are you sure checksums actually change? (except for 0.4 which is currently a moving target)

Are you sure they don't change? :P I'm pretty certain that neither the go dists nor the js dists build reproducibly.

[whyrusleeping]

okay, how about we make the build process take a list of tags (or general git refs) as an argument, and also as another argument, the root hash of an existing distributions release page to patch into.

okay, how about we make the build process take a list of tags (or general git refs) as an argument, and also as another argument, the root hash of an existing distributions release page to patch into.

That SGTM! The root hash can also be inferred from dist.ipfs.io by default or so.

I think this was fixed in the process of releasing 0.4.0 as well