You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Repeatable builds are a difficult goal. You essentially have to purge all sources of non determinism from the compiler, or mitigate them so they don't show up in the final binary. This includes timestamps, random numbers (which might show up in the order values are written into the binary from hash maps for instance) file paths that depend on the directory in which the build takes place, and a lot more.
I don't think anyone has prioritized putting in that work or that the rust project has agreed to support repeatability in future work.
On top of the difficulty, when I've seen it brought up before, I've seen pushback in the other direction that non repeatability can actually be a valuable property for making binaries more secure. I think the argument was that you can use randomness kind of like a hash salt to make it harder to craft effective attacks against programs. (Rust doesn't currently do this either).
Which is not to say it couldn't be done, but it would be a big effort. And that's just getting to repeatable builds. What you're proposing would need to be built on top of that.
https://users.rust-lang.org/t/testing-out-reproducible-builds/9758
The text was updated successfully, but these errors were encountered: