@idrassi i was going through the VeraCrypt build docs and noticed the claim that both the generated .deb and .rpm packages are reproducible, including on older rpm builds like CentOS/RHEL 7 that lack the SOURCE_DATE_EPOCH and buildhost macros.
Question, how are you achieving reproducibility on those older rpm toolchains without native SOURCE_DATE_EPOCH support?
Is that handled with a wrapper script that normalizes timestamps before packaging, or something else at the spec file level?
The owner is a bagworker and pls let’s support her for a good cause this is a bondoor and we all know that
CL5kPxArLhBSTsgptt76LRFtjGVBz2e5ju52ZaxKpump