Bug#1010378: leds-alix: reproducible builds: source tarball embeds timestamps and umask

Vagrant Cascadian vagrant at reproducible-builds.org
Fri Apr 29 23:25:03 BST 2022


Source: leds-alix
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps umask
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

leds-alix-source embeds the timestamp and file permissions determined by
umask in the leds-alix source tarball:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/leds-alix.html

  /usr/src/leds-alix.tar.bz2

  -rw-r--r--···0·root·········(0)·root·········(0)·····3610·2022-04-15·23:37:31.000000·modules/leds-alix/leds-alix.c
vs.
  -rw-rw-r--···0·root·········(0)·root·········(0)·····3610·2023-05-19·06:01:18.000000·modules/leds-alix/leds-alix.c

The attached patch fixes this by passing arguments to tar in
debian/rules to ensure consistent timestamp, file permissions, sort
order, user, group, uid and gid in the generated tarball.


With this patch applied, leds-alix should become reproducible on
tests.reproducible-builds.org!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Generate-tarball-reproducibly.patch
Type: text/x-diff
Size: 1108 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20220429/f275767a/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20220429/f275767a/attachment.sig>


More information about the Reproducible-bugs mailing list