Info: Build reproduced for v1.0.0, v2.0.0

[kristovatlas]

I verified using make build that the sha256 sum of atomoned-v1.0.0-darwin-arm64 matches the one in SHA256SUMS-v1.0.0.txt: 1f412ab27ca74de7ead3e0f27389b5e1ed5369fab43dbb381abdc021c76d5e21

[kristovatlas]

Also verified 434c10a2007a01734fc353acc1b4082099b1f6c99b81371ddf4df3bf5f2f27d6 atomoned-v1.0.0-linux-arm64

[kristovatlas]

generating atomoned with make build on linux i686: 6775ec68a81892cb741d360fbe047952759edc2ebc8bd36a803def31a76315af

[kristovatlas]

I was able to reproduce all of the file hashes using goreleaser:

Steps

% go version
go version go1.21.13 darwin/arm64

% ~/go/bin/goreleaser -v
  ____       ____      _
 / ___| ___ |  _ \ ___| | ___  __ _ ___  ___ _ __
| |  _ / _ \| |_) / _ \ |/ _ \/ _` / __|/ _ \ '__|
| |_| | (_) |  _ <  __/ |  __/ (_| \__ \  __/ |
 \____|\___/|_| \_\___|_|\___|\__,_|___/\___|_|
goreleaser: Deliver Go Binaries as fast and easily as possible
https://goreleaser.com

GitVersion:    v1.24.0
GitCommit:     unknown
GitTreeState:  unknown
BuildDate:     unknown
BuiltBy:       unknown
GoVersion:     go1.21.13
Compiler:      gc
ModuleSum:     h1:jsoS5T2CvPKOyECPATAo8hCvUaX8ok4iAq9m5Zyl1L0=
Platform:      darwin/arm64

% git checkout tags/v1.0.0

% GOROOT=$(go1.21.13 env GOROOT) PATH=$GOROOT/bin:$PATH TM_VERSION=v0.37.5 ~/go/bin/goreleaser build --clean 

% find dist -type f -exec openssl dgst -sha256 {} \;
SHA2-256(dist/metadata.json)= ed91ac7859f1585dfab3c0048831cac1cefd94e01edadbd618a4b545166be8d9
SHA2-256(dist/config.yaml)= 7cd0ecd40a2759280b4ad867a703d406a48a9a28951bdfaa53857c534d4fdeac
SHA2-256(dist/atomoned_darwin_amd64_v1/atomoned)= 9e9ba6fda17e9791d5ea38e93807cd6dbd2af3a1a3e1dc97bfae26b9cb2fb201
SHA2-256(dist/atomoned_windows_amd64_v1/atomoned.exe)= 4ee28cfca97590d156f59249acf4c2ae21974728a3e0f55a1382abab8e8e3436
SHA2-256(dist/atomoned_darwin_arm64/atomoned)= 1f412ab27ca74de7ead3e0f27389b5e1ed5369fab43dbb381abdc021c76d5e21
SHA2-256(dist/atomoned_windows_arm64/atomoned.exe)= e29e5bc3aff354caf100fcaad35a9e0173276dd6a5f162a8939dee5f30c9b69e
SHA2-256(dist/atomoned_linux_amd64_v1/atomoned)= 78fcb6bcda906fc5b959cca985afab5a8486c17b63e1835faec0c0e57364582d
SHA2-256(dist/artifacts.json)= 7885c22d2baf77260c2f15a0a56d1bcc2a9f180d5ada4be2dd36cd007422b4d3
SHA2-256(dist/atomoned_linux_arm64/atomoned)= 434c10a2007a01734fc353acc1b4082099b1f6c99b81371ddf4df3bf5f2f27d6

[kristovatlas]

I was able to reproduce all of the file hashes for v2.0.0:

atomone % git checkout tags/v2.0.0

% go version
go version go1.22.10 darwin/arm64

% goreleaser --version
  ____       ____      _
 / ___| ___ |  _ \ ___| | ___  __ _ ___  ___ _ __
| |  _ / _ \| |_) / _ \ |/ _ \/ _` / __|/ _ \ '__|
| |_| | (_) |  _ <  __/ |  __/ (_| \__ \  __/ |
 \____|\___/|_| \_\___|_|\___|\__,_|___/\___|_|
goreleaser: Deliver Go Binaries as fast and easily as possible
https://goreleaser.com

GitVersion:    v1.24.0
GitCommit:     unknown
GitTreeState:  unknown
BuildDate:     unknown
BuiltBy:       unknown
GoVersion:     go1.21.13
Compiler:      gc
ModuleSum:     h1:jsoS5T2CvPKOyECPATAo8hCvUaX8ok4iAq9m5Zyl1L0=
Platform:      darwin/arm64

% TM_VERSION=v0.37.15 goreleaser build --clean
  • starting build...
  • loading                                          path=.goreleaser.yml
  • loading environment variables
  • getting and validating git state
    • git state                                      commit=90526ee07358a4f34b579e6a1d4573acb830d17b branch=HEAD current_tag=v2.0.0 previous_tag=v2.0.0-rc2 dirty=false
  • parsing tag
  • setting defaults
  • checking distribution directory
    • cleaning dist
  • loading go mod information
  • build prerequisites
  • writing effective config file
    • writing                                        config=dist/config.yaml
  • building binaries
    • building                                       binary=dist/atomoned_windows_arm64/atomoned.exe
    • building                                       binary=dist/atomoned_darwin_arm64/atomoned
    • building                                       binary=dist/atomoned_linux_amd64_v1/atomoned
    • building                                       binary=dist/atomoned_darwin_amd64_v1/atomoned
    • building                                       binary=dist/atomoned_linux_arm64/atomoned
    • building                                       binary=dist/atomoned_windows_amd64_v1/atomoned.exe
    • took: 1m28s
  • storing release metadata
    • writing                                        file=dist/artifacts.json
    • writing                                        file=dist/metadata.json
  • build succeeded after 1m28s
  • thanks for using goreleaser!

% find dist -type f -exec openssl dgst -sha256 {} \;
SHA2-256(dist/metadata.json)= bdee14ffcb5e2fba1295807a0f7217f58e433d3456f2e0acdb68dba1a9a96d72
SHA2-256(dist/config.yaml)= 1c065d34aca9890b993ab925d5bb007dcf619224ff8e88b7408484b15baa77d3
SHA2-256(dist/atomoned_darwin_amd64_v1/atomoned)= ad6e45ceaa21f692035c20278819133503aba3b60ed5db2c3181e7bbbb7ddec8
SHA2-256(dist/atomoned_windows_amd64_v1/atomoned.exe)= d4c99897ad6bb74a008b02d107851ff411e3ccc275cea4cb73d5af0a97dc611e
SHA2-256(dist/atomoned_darwin_arm64/atomoned)= 772213409900ec90c1f10c1894d877199f281af232c252fc481b0508a6766419
SHA2-256(dist/atomoned_windows_arm64/atomoned.exe)= 2f064d375e13dd3b2c16d6d13ceab3979ff4fddc8ef227474a769da7dfe23e82
SHA2-256(dist/atomoned_linux_amd64_v1/atomoned)= 94e02241f13f914c82bdf5ec35ea674ebc2553fee4a121aed55dd45f4fd0616a
SHA2-256(dist/artifacts.json)= 41e48016c3a1baaa4bc49f9f403efb56545d432ca9b696c623737aa93aeb4f61
SHA2-256(dist/atomoned_linux_arm64/atomoned)= 8822938103279098cb87c0e9a93e477035fc797ca57853d0d730dcac58fedc8e