simplex on Nostr: It is not the same. Build reproducibility means that every time you build the app ...
It is not the same. Build reproducibility means that every time you build the app from the source code you would get exactly the same result, identical byte by byte. It would allow independent parties to validate that the apps that we distribute via different channels are built from the source code we publish.
The problem is that to achieve this quality requires that the build process is deterministic, and in general case it is not:
- some libraries may embed timestamps during compilation.
- compilers my use random numbers for some identifiers.
- etc.
We plan to solve this problem, but it is much harder than it may seem.
Published at
2024-08-31 16:31:15Event JSON
{
"id": "4b28b3d5070d5be488b50d8524026436dc6c17ba38876fab1db17e1a5f4cdc33",
"pubkey": "c998a5739f04f7fff202c54962aa5782b34ecb10d6f915bdfdd7582963bf9171",
"created_at": 1725121875,
"kind": 1,
"tags": [
[
"e",
"c86fd410e1d6f4c50be8d9cabfa4758f6d79d31f0ad7ce9fb965f388d0050e31",
"wss://relay.primal.net",
"root"
],
[
"e",
"8ea3a3aa6842e2fa9c097b794ff5d606a8c1019fc2a8ace26178259aa83ca721",
"wss://relay.primal.net",
"reply"
],
[
"p",
"c998a5739f04f7fff202c54962aa5782b34ecb10d6f915bdfdd7582963bf9171"
],
[
"p",
"c998a5739f04f7fff202c54962aa5782b34ecb10d6f915bdfdd7582963bf9171",
"",
"mention"
],
[
"p",
"870cfe16acaf55f405a4458b4ba3830f85cc08c42d22f5c4a7a6c23bb993de62"
]
],
"content": "It is not the same. Build reproducibility means that every time you build the app from the source code you would get exactly the same result, identical byte by byte. It would allow independent parties to validate that the apps that we distribute via different channels are built from the source code we publish.\n\nThe problem is that to achieve this quality requires that the build process is deterministic, and in general case it is not:\n- some libraries may embed timestamps during compilation.\n- compilers my use random numbers for some identifiers.\n- etc.\n\nWe plan to solve this problem, but it is much harder than it may seem.",
"sig": "f9985238b228b9bc25341d3ec8cdfdcca2659d46df55dcaa3f3d7302a3831182d570f826700d6e634e3a01053f69f568ad36f8d46992f6c93ec28c7b50c688b7"
}