Should we stop distributing source tarballs?

[Heiko Becker]

On Thursday, 4 April 2024 13:26:57 CEST, Sune Vuorela wrote:
> On 2024-04-04, Ben Cooksley <bcooksley at kde.org> wrote:
>>> I do also think it is nice if we get someone else to verify that the
>>> tarball we ship actually matches the tag. I think some people in
>>> distributions have already started looking into verifying that.
>>> 
>> 
>> Hopefully they'll be gentle with tooling that does this?
>
> I have only seen 'starting to look into it', not actually yet figuring
> out what to do with it.
>
> But as an approximation, I would expect
>
> 'does the tarball content match the tag?'
> 'can we easily and automatically explain the difference?'
> 'does it use autotools?'
> 'can autogenerated docs and stuff be moved to build time instead?'
>
> and other such things that might flag it differently and probably for
> manual inspections.
>
> I think we have stopped injecting translations at tarball creation time
> and our tarballs should actually match the git tags?

Yes, that would be my expectation as well, tarballs should be identical to 
a checked out tag (minus the .git dir).