Source: wily Severity: normal Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: username umask X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
The tarballs /usr/share/doc/wily/wily.tar.gz and /usr/share/doc/wily/tute.tar.gz contain the username, user id, group name, group id and umask of the build environment in which they were produced: https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/wily.html drwxr-xr-x···0·pbuilder1··(1111)·pbuilder1··(1111)········0·2019-08-21·10:11:18.000000·tute/ vs. drwxrwxr-x···0·pbuilder2··(2222)·pbuilder2··(2222)········0·2019-08-21·10:11:18.000000·tute/ The attached patch fixes this by passing arguments to tar in debian/rules to avoid embedding this metadata. Thanks for maintaining wily! live well, vagrant
From 8ee7445fb8376fec85b2f05b929a8881ce6b3d4b Mon Sep 17 00:00:00 2001 From: Vagrant Cascadian <vagr...@reproducible-builds.org> Date: Fri, 25 Dec 2020 00:01:32 +0000 Subject: [PATCH 1/8] debian/rules: Pass options to tar to generate reproducible tarballs. Pass additional options to tar to ensure sort order, user id, group id and pax headers are consistent between builds. See "Full example": https://reproducible-builds.org/docs/archives/ --- debian/rules | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/debian/rules b/debian/rules index 7d38575..f21f401 100755 --- a/debian/rules +++ b/debian/rules @@ -53,10 +53,16 @@ install-stamp: build-stamp install -m644 Doc/changes.txt debian/wily/usr/share/doc/wily/html install -m644 Doc/*.html debian/wily/usr/share/doc/wily/html install -m644 Doc/*.gif debian/wily/usr/share/doc/wily/html - cd Doc && GZIP="-9n" tar -czhf \ - ../debian/wily/usr/share/doc/wily/tute.tar.gz tute --mtime="@$(SOURCE_DATE_EPOCH)" - cd misc && GZIP="-9n" tar -czhf \ - ../debian/wily/usr/share/doc/wily/wily.tar.gz wily --mtime="@$(SOURCE_DATE_EPOCH)" + cd Doc && GZIP="-9n" tar --sort=name \ + --mtime="@${SOURCE_DATE_EPOCH}" \ + --owner=0 --group=0 --numeric-owner \ + --pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime \ + -czhf ../debian/wily/usr/share/doc/wily/tute.tar.gz tute + cd misc && GZIP="-9n" tar --sort=name \ + --mtime="@${SOURCE_DATE_EPOCH}" \ + --owner=0 --group=0 --numeric-owner \ + --pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime \ + -czhf ../debian/wily/usr/share/doc/wily/wily.tar.gz wily touch install-stamp binary-indep: build install -- 2.20.1
signature.asc
Description: PGP signature
