[From nobody Sun Sep 13 15:29:06 2026
Received: (at submit) by bugs.debian.org; 11 Sep 2026 13:39:25 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-111.2 required=4.0 tests=ALL_TRUSTED,BAYES_00,
 DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
 FROMDEVELOPER,SPF_HELO_NONE,SPF_PASS,USER_IN_DKIM_WELCOMELIST,
 XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 25; hammy, 150; neutral, 49; spammy,
 0. spammytokens:
 hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
 0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <jspricke@debian.org>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:34518)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <jspricke@debian.org>) id 1x51TR-006cTh-09
 for submit@bugs.debian.org; Fri, 11 Sep 2026 13:39:25 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; 
 s=smtpauto.stravinsky;
 h=X-Debian-User:Date:Message-ID:Subject:To:From:
 Content-Transfer-Encoding:MIME-Version:Content-Type:Reply-To:Cc:Content-ID:
 Content-Description:In-Reply-To:References;
 bh=nNVcaDbEFhjYGydCmkEUDSBA2XTsmJycHNLsr+QOIOY=; b=rsHr7aS8moZ/+Hc0/4TF81zLBq
 fqAGRwXe2lmtVz83UVjJQyDUirTHONSwgN0txhezyDi7fLiNcvEjhlQaThvuxTAfojAqTHLcpmshr
 6m58IX7FJy1L2eS8tq6HixwfuZ83pn9fX+W6sfGawf4EvlzyPdMRZ41MMXvZiA3usq26OZDKwGoQw
 KV9ZNYnFrVyI0Ge9KjsiFNXRirbK7zHnhfcIyVfGQ/UDkvQJXGuttYk9ch0AV3l8G2YhcDHcHoFtt
 HzVwArd4A5aMMTgFE24WRR8MfUf2Ocidnip2v8CWMK5lYU5zfih2ssbCsZOqhQV+AU+NHVg0GsZTz
 A+wj2ZwA==;
Received: from authenticated-user by stravinsky.debian.org with esmtpsa
 (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <jspricke@debian.org>)
 id 1x51TP-001KHQ-0d; Fri, 11 Sep 2026 13:39:23 +0000
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Jochen Sprickerhof <jspricke@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: libguestfs regressed in reproducibility
Message-ID: <178913396273.155640.12407656495500874823.reportbug@fenchel>
X-Mailer: reportbug 13.2.0+nmu1
Date: Fri, 11 Sep 2026 15:39:22 +0200
X-Debian-User: jspricke
Delivered-To: submit@bugs.debian.org

Source: libguestfs
Version: 1:1.60.1-1
Severity: normal
X-Debbugs-Cc: Hilko Bengen <bengen@debian.org>, reproducible-bugs@lists.alioth.debian.org
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness

Hi Hilko,

libguestfs in unstable can't migrate to testing because the QA
infrastructure couldn't reproduce the binary packages in unstable while
it could reproduce the version in testing [1, 2].

It looks like this is due to the tar command in supermin:

https://sources.debian.org/src/supermin/5.2.2-8/src/mode_prepare.ml?hl=74&pow_referer=https%3A%2F%2Fcodesearch.debian.net%2F#L169

See [4] for some information on how to make tar reproducible. As you
maintain both packages, I am filing only one bug for now.

Feel free to reach out if you need help with this.

Cheers Jochen


[1] https://qa.debian.org/excuses.php?package=libguestfs
[2] https://lists.debian.org/debian-devel-announce/2026/05/msg00001.html
[3] https://lists.debian.org/debian-devel/2026/05/msg00383.html
[4] https://reproducible-builds.org/docs/archives/
]