Bug#950606: gdb-source: generated tarball includes system metadata

Vagrant Cascadian vagrant at reproducible-builds.org
Tue Feb 4 06:27:58 GMT 2020


Package: gdb-source
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps umask username
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The tarball produced in gdb-source binary package includes metadata from
the filesystem, including umask, timestamps, and potentially username,
group, and sort order of the files in the tarball.

The attached patch passes arguments to tar to ensure reproducible builds
of this package.

There are several outstanding reproducibility issues with the other
packages produced by gdb, but please consider applying this to improve
the signal to noise ratio.


Thanks for maintaining gdb!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Use-tar-arguments-to-ensure-consistant-.patch
Type: text/x-diff
Size: 943 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200203/6c6f7fd3/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200203/6c6f7fd3/attachment.sig>


More information about the Reproducible-bugs mailing list