On Sun, Oct 02, 2022 at 05:50:07PM +0200, Johannes Schauer Marin Rodrigues wrote: > Quoting Colin Watson (2022-10-02 17:00:58) > > As well as more localized testing, I built a .deb with this and used > > josch's instructions from the start of this bug to build mmdebstrap > > tarballs via disorderfs, using > > "--hook-dir=/usr/share/mmdebstrap/hooks/file-mirror-automount > > --include=./man-db_2.10.3~20221002-1_amd64.deb" to inject the new .deb. > > The two resulting tarballs had somewhat differing file lists (timestamps > > etc.), but all the actual files in the tarballs were bitwise-identical. > > Did you maybe forget the "export SOURCE_DATE_EPOCH=XXX" step? Just replace XXX > with the output of `date +%s` but make sure that both mmdebstrap invocations > see the same value for SOURCE_DATE_EPOCH and then there should be zero > differences and a "cmp" should be sufficient to make sure that it works.
I thought I'd set SOURCE_DATE_EPOCH, but I'd failed to pass it through sudo. After fixing that, I indeed get cmp-identical tarballs. -- Colin Watson (he/him) [cjwat...@debian.org]