[ https://issues.apache.org/jira/browse/COMPRESS-583?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17390837#comment-17390837 ]
Peter Lee edited comment on COMPRESS-583 at 7/31/21, 2:00 AM: -------------------------------------------------------------- I pushed a commit [d57b8e9|https://github.com/apache/commons-compress/commit/d57b8e9068bc0184b783aa488e613f4fcf2140d6] to add this in changelog. Please have a look. Now the changelog of COMPRESS-404 is : _Update the class of variable file in TarArchiveEntry from_ _java.io.File to java.nio.file.Path. Corresponding constructors_ _and methods are also modified/added._ _NOTE: The UserID and GroupID will also be read if they are_ _available. The previous default value UserID:GroupdID of was 0:0._ _This may cause a reproducibility problem._ _Github Pull Request #97._ was (Author: peterlee): I pushed a commit [7bc8679|https://github.com/apache/commons-compress/commit/7bc86793d2533ef314550efe2b79df752abdc8d4] to add this in changelog. Please have a look. Now the changelog of COMPRESS-404 is : _Update the class of variable file in TarArchiveEntry from_ _java.io.File to java.nio.file.Path. Corresponding constructors_ _and methods are also modified/added._ _NOTE: The UserID and GroupID will also be read if they are_ _available. The previous default value UserID:GroupdID of was 0:0._ _This may cause a reproducibility problem._ _Github Pull Request #97._ > 1.21 generates different output binaries compared to older versions as well > as on different OSes > ------------------------------------------------------------------------------------------------ > > Key: COMPRESS-583 > URL: https://issues.apache.org/jira/browse/COMPRESS-583 > Project: Commons Compress > Issue Type: Bug > Affects Versions: 1.21 > Reporter: Chanseok Oh > Priority: Major > > Upgrading {{commons-compress}} had always been generating the same compressed > output byte-to-byte for the same input (i.e., their SHA checksum didn't > change between versions). However, starting with 1.21, we noticed it's > generating different output than what previous versions are generating. > We also noticed that the same code generates different binaries on different > OSes. For example, 1.21 on Linux is different from 1.21 on Mac. > However, at least on the same OS, 1.21 seems to reproducibly generate the > same output. > See the context at [https://github.com/GoogleContainerTools/jib/pull/3342] > ---- > *UPDATE*: running diffoscope reveals that 1.21 is picking up the user and > group of a local environment. > (output below manually reformatted slightly for readability) > {{$ diffoscope > 6d2763b0f3940d324ea6b55386429e5b173899608abf7d1bff62e25dd2e4dcea.tar.gz > 32258c626498c13412679442e3417811bc7ab801c6928da2c2a97e0bbc380a88.tar.gz}} > {{--- > 6d2763b0f3940d324ea6b55386429e5b173899608abf7d1bff62e25dd2e4dcea.tar.gz}} > {{+++ > 32258c626498c13412679442e3417811bc7ab801c6928da2c2a97e0bbc380a88.tar.gz}} > {{│ --- 6d2763b0f3940d324ea6b55386429e5b173899608abf7d1bff62e25dd2e4dcea.tar}} > {{├── +++ > 32258c626498c13412679442e3417811bc7ab801c6928da2c2a97e0bbc380a88.tar}} > {{│ ├── file list}} > {{│ │ @@ -1,3 +1,3 @@}} > {{│ │ {color:#de350b}-drwxr-xr-x 0 0 0 0 1970-01-01 > 00:00:01.000000 app/{color}}} > {{│ │ {color:#00875a}+drwxr-xr-x 0 chanseok (252384) eng (5000) 0 1970-01-01 > 00:00:01.000000 app/{color}}} > {{│ │ -rw-r--r-- 0 0 0 0 1970-01-01 00:00:01.000000 > app/fileB.txt}} > {{│ │ -rw-r--r-- 0 0 0 0 1970-01-01 00:00:01.000000 > app/fileC.txt}} -- This message was sent by Atlassian Jira (v8.3.4#803005)