misc/54544: Release build options are not public

[gson%gson.org@localhost (Andreas Gustafsson)]

>Number:         54544
>Category:       misc
>Synopsis:       Release build options are not public
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    misc-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Fri Sep 13 15:05:00 +0000 2019
>Originator:     Andreas Gustafsson
>Release:        NetBSD-current and others
>Organization:

>Environment:
System: NetBSD
Architecture: all
Machine: all
>Description:

One might think that "build.sh release" or "make release" would
produce output identical to an official NetBSD release built from the
same sources, but in fact it does not: official releases are built
using additional, non-default make options such as MKREPRO and
MKDEBUG, which vary by architecture.  There appears to be no publicly
documented procedure for building an actual release.  The scripts used
by releng to build the actual releases are in localsrc, which is not
public.

This seems at odds with the idea of NetBSD being a fully open source
system.  It makes it hard or impossible for non-developers to
reproduce a release, it renders NetBSD's support for reproducible
builds somewhat pointless, and it means that we are spending
considerable resources on automated testing of something that is
subtly different from the actual releases.

It was recently suggested on tech-kern that the options used when
building the official releases should be documented in a wiki page.
IMO, this is not an acceptable solution.  For purposes of automated
testing, it must be possible to script release builds such that they
use the actual release options without having to manually track
changes to a wiki page.

>How-To-Repeat:

>Fix:

As a first step, the scripts used to build the official releases, or
at the very least the machine-readable list of architecture dependent
make options used by those scripts, should be moved to a public
respository.