Reproducible Builds with Bazel
summary
Shows how to get bit‑identical outputs by using Python 3.8.3 built from source under Bazel with sha256‑pinned http_archive dependencies, pip_install mapped from requirements.txt, pytest targets, a simple Flask binary and md5 comparisons to verify two builds match. Bazel sandboxing enforces hermetic inputs and caching speeds repeated builds ~50×, but the build still varies if the host gcc and system libs differ, so solutions are Docker with pinned gcc, checked‑in interpreter, or nix.
AI-written summary · about
chapters (9)
- 0:00Reproducible builds intro
- 2:20Non-determinism sources
- 4:29Bazel for reproducibility
- 6:36Setting up a reproducible Python environment
- 10:08Python version tests
- 13:43Flask app with Bazel
- 15:27MD5 hash verification
- 15:47Reproducibility limits
- 16:52Key takeaways
