Reproducible sdist builds

[zpah]

• I have searched the issues of this repo and believe that this is not a duplicate.
• I have searched the documentation and believe that my question is not covered.

Feature Request

Poetry (v0.12.15) makes different sdist archives by each build command invoke. It`s poor.

Would be great if poetry generated reproducible sdists for concrete SCM commits (with identical checksums!).
In my setup.py-based projects i achieve this behaviour by setuptools.command.sdist substitution, where:

• use bz2 archiver (gzip store current timestamp in archive)
• sort archive items by path
• assign owner/group of tar items to root:root
• assign archive items timestamps from SCM (Mercurial, Git) commit metadata

[drunkwcodes]

Can it be done with gzip and without root?

[zpah]

Can it be done with gzip and without root?

1. Poetry use gzip.GzipFile in command sdist: https://github.com/sdispater/poetry/blob/cb6491415f59742f06f0ca322ec546b88aa412ef/poetry/masonry/builders/sdist.py#L56
   Option mtime, for example, can be involed:
   gzip.GzipFile("test.txt.gz", mode="wb", mtime=stable_timestamp_from_scm).
   It will provide stable archive checksum.
2. Without root ?! I mean any stable predictable uid/gid for all sdist tar-archive items!
   Poetry already does it. It add sdist items with uid/gid assigned to 0/0.
   User and group 'root:root' (uid=0, gid=0) in this case was good neutral candidat. For this purpose the privileges of the superuser are not required during archive creation.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.

[stale]

Closing this issue automatically because it has not had any activity since it has been marked as stale. If you think it is still relevant and should be addressed, feel free to open a new one.

[Natureshadow]

Will poetry be changed to create reproducible sdist builds any time soon?

[abn]

@Natureshadow The linked PR should resolve this.

[zpah]

Not will. Python became rotted. Migrate to Rust.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.