Packaging Guidelines - creating tarball from VCS with script

Thomas Moschny thomas.moschny at
Mon May 14 20:46:27 UTC 2012

2012/5/14 Toshio Kuratomi <a.badger at>:
> Automating of the package's checksum won't work for many VCS's .  git, for
> instance, does not preserve timestamps.  So the tarball created from a git
> snapshot will have a different checksum for each checkout.

While files' modification times in a checkout may be different,
archives created with 'git archive' are stable, because git uses the
datetime of the commit for each file in the archive.

So instead of cloning the repository and creating the archive locally,
the preferred method would imho be to use a download link (if present)
of the used git hosting service for directly preparing an archive, and
to file bugs for the respective hosting service if they do not
properly use this git functionality.

- Thomas

More information about the devel mailing list