On Fri, Jul 01, 2022 at 08:30:33AM -0400, Robert Marcano via devel wrote:
It removes a step so it makes it easier, but at the same time remove
the existence of a copy of the source code (SRPM) in parallel with
the binaries.
We absolutely need that, but source RPMs are not the only (or best!) way to
do that.
There is a reason all Fedora RPMs sources are stored on Fedora
infrastructure instead of automatic downloads from source
repositories. Imagine an entire Fedora built that way and think
about the reproducibility of that build. Maybe another process could
replace it, but going directly to source repositories is a step
backwards.
If we had all of the source exploded into source repositories under our
control, and built from that, we probably could get _more_ reproducibility.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader