Bug#1010238: binutils: reproducible builds: source tarball embeds build user and group

[Vagrant Cascadian]

Source: binutils
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: username
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

binutils-source embeds the username, uid, group and gid in the binutils
source tarball:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/armhf/diffoscope-results/binutils.html

  /usr/src/binutils/binutils-2.38.tar.xz

  -rw-r--r--···0·pbuilder1··(1111)·pbuilder1··(1111)····18002·2022-01-22·12:14:07.000000·binutils-2.38/COPYING
  vs.
  -rw-r--r--···0·pbuilder2··(2222)·pbuilder2··(2222)····18002·2022-01-22·12:14:07.000000·binutils-2.38/COPYING


The attached patch fixes this by passing arguments to tar in
debian/rules to ensure consistent user, group, uid and gid in the
generated tarballs.


Unfortunately, other issues prevent binutils from building reproducibly,
but this should at least reduce the differences, making it easier to fix
remaining issues.


Thanks for maintaining binutils!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Use-consistent-user-and-group-when-gene.patch
Type: text/x-diff
Size: 905 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20220426/e861c1a0/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20220426/e861c1a0/attachment.sig>