Bug#978044: wily: reproducible builds: Embeds user, group and umask in tarballs

Vagrant Cascadian vagrant at reproducible-builds.org
Fri Dec 25 01:49:47 GMT 2020


Source: wily
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: username umask
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The tarballs /usr/share/doc/wily/wily.tar.gz and
/usr/share/doc/wily/tute.tar.gz contain the username, user id, group
name, group id and umask of the build environment in which they were
produced:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/wily.html

  drwxr-xr-x···0·pbuilder1··(1111)·pbuilder1··(1111)········0·2019-08-21·10:11:18.000000·tute/
  vs.
  drwxrwxr-x···0·pbuilder2··(2222)·pbuilder2··(2222)········0·2019-08-21·10:11:18.000000·tute/


The attached patch fixes this by passing arguments to tar in
debian/rules to avoid embedding this metadata.


Thanks for maintaining wily!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Pass-options-to-tar-to-generate-reprodu.patch
Type: text/x-diff
Size: 1700 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20201224/c5135cb0/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20201224/c5135cb0/attachment.sig>


More information about the Reproducible-bugs mailing list