Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
https://wiki.archlinux.org/title/Bug_reporting_guidelines
Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.
REPEAT: Do NOT report bugs for outdated packages!
FS#69535 - [when] Package is unreproducible due to timestamp in gzip header
Attached to Project:
Community Packages
Opened by Z. Ren (zren) - Thursday, 04 February 2021, 16:34 GMT
Last edited by kpcyrd (kpcyrd) - Tuesday, 09 February 2021, 12:48 GMT
Opened by Z. Ren (zren) - Thursday, 04 February 2021, 16:34 GMT
Last edited by kpcyrd (kpcyrd) - Tuesday, 09 February 2021, 12:48 GMT
|
DetailsHi!
While conducting a research in the spirit of the "reproducible builds" [1], we have noticed that the package "when" could not be built reproducibly, in that the gzip command is invoked without -n. The attached patch removes timestamps when creating the archive. Once applied, the package can be built reproducibly. Additional info: * when 1.1.40-2 Steps to reproduce: The unreproducible build result could be detected with reprotest [2]. [1]: https://wiki.debian.org/ReproducibleBuilds [2]: https://wiki.archlinux.org/index.php/DeveloperWiki:ReproducibleBuilds 
reproducible.diff
(0.4 KiB)
|
This task depends upon
Closed by kpcyrd (kpcyrd)
Tuesday, 09 February 2021, 12:48 GMT
Reason for closing: Fixed
Additional comments about closing: 1.1.40-3
Tuesday, 09 February 2021, 12:48 GMT
Reason for closing: Fixed
Additional comments about closing: 1.1.40-3
We'd submit the patch upstream to get the issue addressed there too, do you want to do that yourself (since you authored the patch) or should I do that instead?
https://github.com/bcrowell/when/issues/22