Hide Forgot
Currently, there is only the more or less free-form SOURCERPM tag that includes the source RPM name. It would be good to have explicit data on the precise version of the source RPM, including the epoch. The SHA1HEADER hash of the SRPM would be nice to have, too. Obviously, these fields would have to be optional (but they should be included for SRPMs as well, if the SRPM isn't actually buildable from itself in a reproducible manner, which I suspect happens in some cases). But they should be populated automatically during regular package builds.
There's a basically reverse RFE of this upstream now: https://github.com/rpm-software-management/rpm/issues/642 Like noted there, if we add one I think we should add the other one too so perhaps there's hope that this will finally move forward...
(In reply to Panu Matilainen from comment #1) > There's a basically reverse RFE of this upstream now: > https://github.com/rpm-software-management/rpm/issues/642 > Like noted there, if we add one I think we should add the other one too so > perhaps there's hope that this will finally move forward... I don't think this will work for Fedora because we throw away the source RPMs for all but one architecture, and the subpackage data is inconsistent across architectures and cannot even be computed in a cross build in general.
That's no different from all the other build-specific data that is stored in the src.rpm (dependencies, architecture even). The src.rpm never was arch-independent, and trying to treat it as it were (such as Fedora is doing) just leads to problems. Witness the endless bug reports on builddep using the repository data not working on yum/dnf.
Understood. I just question the utility of storing such data in the Fedora context, when we would throw it away anyway.