#31264: tar.gz output files contain nonreproducible timestamps ------------------------------+----------------------- Reporter: JeremyRand | Owner: boklm Type: defect | Status: new Priority: Medium | Milestone: Component: Applications/rbm | Version: Severity: Normal | Resolution: Keywords: | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: ------------------------------+-----------------------
Comment (by boklm): > Given that .xz has much better compression than .gz and (AFAIK) is usually readily available on GNU/Linux and macOS systems just like .gz The reason to use gzip to compress source tarballs is that xz is a lot slower than gzip. So switching to xz would save some space on disk, but would probably slow down the build. Especially for components like firefox where we might spend several minutes just to compress it with xz. However it looks like we could easily fix the gzip reproducibility issue by using the `-n` or `--no-name` option: https://wiki.debian.org/ReproducibleBuilds/TimestampsInGzipHeaders -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31264#comment:2> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs