bug#79170: Please make amhello-1.0.tar.gz reproducible
Jelle van der Waa <[email protected]> Mon, 4 Aug 2025 17:15:42 +0200
| Newsgroups | gmane.comp.sysutils.automake.bugs |
|---|---|
| Message-ID | <[email protected]> |
In Arch Linux our automake package includes /usr/share/doc/automake/amhello-1.0.tar.gz. When we rebuild this package using our rebuilder to check for reproduciblity the uid/gid and timestamps are not normalized meaning they vary per rebuild making the package non-reproducible. [1] [2] The owner/guid could be set --owner=root:0 --group=root:0 and to get rid of the timestamp --mtime='@0' (Or alternatively a fixed timestamp which can be set via SOURCE_DATE_EPOCH). Alternatively the timestamp could be excluded by hardcoding the tar format to ustar which omits timestamps. [1] https://reproducible.archlinux.org [2] https://reproducible-builds.org/