Cmake TAR command non reproducible builds - Please revise for reproducible builds.
Hi!
While working on making extra-cmake-modules and other affected projects reproducible we ran into Cmake's internal tar command being the source of the issue.
Please see: Debian Reproducible builds
In particular: File order User and Groups
Here is our work around in ECM: https://invent.kde.org/frameworks/extra-cmake-modules/-/commit/d3595a98cc1828fbeee1a5dcb1b1ffe2d44318ff
However, this only works for UNIX like platforms and not all. What would be nice is if CMake tar could do this by default.
Thanks for your consideration. Scarlett