Commit f7252175 authored by Emanuele Aina's avatar Emanuele Aina

long-term-reproducibility: Use pkglist to get to the sources

Point out that the `pkglist` files can be used to find the exact
sources stored on GitLab.
Signed-off-by: Emanuele Aina's avatarEmanuele Aina <>
parent 0cadabe1
......@@ -264,6 +264,11 @@ In particular, the `pkglist` files capture the full list of packages installed
on each artifacts along their version. The `filelist` files instead provide
basic information about the actual files in each artifact.
With the information contained in the `pkglist` files it is possible to find
the exact binary package version installed and from there find the
corresponding commit for the sources stored on GitLab by looking at the
matching git tag.
Other files capture other pieces of information that can be useful to reproduce
builds. For instance the `build-url` point to the full log of the build where
the recipe commit hash and the Docker image hash can be identified, however in
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment