Source: binutils Severity: normal Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: username X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
binutils-source embeds the username, uid, group and gid in the binutils source tarball: https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/armhf/diffoscope-results/binutils.html /usr/src/binutils/binutils-2.38.tar.xz -rw-r--r--···0·pbuilder1··(1111)·pbuilder1··(1111)····18002·2022-01-22·12:14:07.000000·binutils-2.38/COPYING vs. -rw-r--r--···0·pbuilder2··(2222)·pbuilder2··(2222)····18002·2022-01-22·12:14:07.000000·binutils-2.38/COPYING The attached patch fixes this by passing arguments to tar in debian/rules to ensure consistent user, group, uid and gid in the generated tarballs. Unfortunately, other issues prevent binutils from building reproducibly, but this should at least reduce the differences, making it easier to fix remaining issues. Thanks for maintaining binutils! live well, vagrant
From 30c8ddb48925121e20e53039ca60968764f6b874 Mon Sep 17 00:00:00 2001 From: Vagrant Cascadian <vagr...@reproducible-builds.org> Date: Tue, 26 Apr 2022 20:25:08 +0000 Subject: [PATCH] debian/rules: Use consistent user and group when generating source tarball. https://reproducible-builds.org/docs/archives/ --- debian/rules | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/rules b/debian/rules index 7e856a63..c795d87b 100755 --- a/debian/rules +++ b/debian/rules @@ -1406,6 +1406,7 @@ endif # ifndef BACKPORT xargs -0r touch --no-dereference --date='$(BUILD_DATE)' && \ find $(source_files) -type f -print0 | LC_ALL=C sort -z | \ tar --null -T - -c --xz --exclude=CVS --mode=go=rX,u+rw,a-s \ + --owner=0 --group=0 --numeric-owner \ --xform='s=^[^/]*\/=binutils-$(VERSION)/=' \ -f $(pwd)/$(d_src)/$(PF)/src/binutils/binutils-$(VERSION).tar.xz \ $(source_files) -- 2.30.2
signature.asc
Description: PGP signature
