Hi,today I want to share with you two successes on our path to total reproducibility in openSUSE:
Through the persistence of my colleague Jan Zerebecki and the help of mls (SUSE's rpm maintainer) we made nice progress on
https://bugzilla.opensuse.org/show_bug.cgi?id=1148824 to finally normalize mtimes in official openSUSE Tumbleweed rpms. Together with a workaround for https://github.com/rpm-software-management/rpm/issues/2965this allowed me to create bit-identical rpms to the ones pulled from build.opensuse.org , processed with rpm --delsign
Now everything that was reproducible in my QA-tests is also reproducible+verifiable in practice.
The other success is that I saw 2 bit-identical java-21-openjdk rpm builds, but only when both were done on 1-core VMs, so there might only be some raciness left. [1]
javadoc output still has an issue from filesystem-readdir-order. We have a build-tool workaround for that in place [2] Ciao Bernhard M.[1] https://rb.zq1.de/compare.factory-20240331/diffs/java-21-openjdk-compare.out [2] https://github.com/bmwiedemann/openSUSE/blob/54e27e1/packages/_/_project/_config#L19-L20
OpenPGP_signature.asc
Description: OpenPGP digital signature
