|
|
|
|
|
by ensignavenger
624 days ago
|
|
"Reproducible build" is a term used to refer to getting an exact binary match out of a build. This is outside the scope of the OSD. I am not certain, but it sounds like this is what they are talking about here. Just because you run the build yourself doesn't mean you will get an exact match of what the original producer built. Something as simple as a random number generator or using a timestamp in the build will result in a mismatch. |
|
But maybe I don't understand Open Source. Is it still Open Source if I provide the source code, an Apache License, but the code is in my own custom language (for fun, let's say it reads like brainfuck) and I have no released the compiler? Maybe some people would call this Open Source, but I imagine it would ruffle a lot of feathers. Is there really a meaningful difference between that an a binary? If it does fit "the letter of the law" it most certainly does not fit "spirit of the law". It is the spirit of the law that matters, because it is the whole fucking point.