FS#71953 - [dd_rescue] Package is unreproducible due to timestamp in gzip header

Attached to Project: Community Packages
Opened by Z. Ren (zren) - Monday, 30 August 2021, 16:07 GMT
Last edited by Brett Cornwall (ainola) - Monday, 15 May 2023, 00:48 GMT
Task Type Bug Report
Category Reproducible Builds
Status Closed
Assigned To Felix Yan (felixonmars)
Brett Cornwall (ainola)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Hi!

While conducting a research in the spirit of the "reproducible builds" [1], we have noticed that the package "dd_rescue" could not be built reproducibly, in that the gzip command is invoked without -n.

The attached patch removes timestamps when creating the archive. Once applied, the package can be built reproducibly.


Additional info:
* dd_rescue 1.99.11-1

Steps to reproduce:
The unreproducible build result could be detected with reprotest [2].

[1]: https://wiki.debian.org/ReproducibleBuilds
[2]: https://wiki.archlinux.org/index.php/DeveloperWiki:ReproducibleBuilds
   reproducible.diff (0.8 KiB)
This task depends upon

Closed by  Brett Cornwall (ainola)
Monday, 15 May 2023, 00:48 GMT
Reason for closing:  Implemented
Additional comments about closing:  dd_rescue-1.99.13-2
Comment by Brett Cornwall (ainola) - Monday, 15 May 2023, 00:48 GMT
I've applied the patch; However, I think this might be worth going to upstream with rather than discussing with downstream maintainers.

Thanks!

Loading...