[Reproducible-builds] Create tar archive with deterministic file order

[Jérémy Bobbio]

Steven Chamberlain:
> This isn't really limited to data.tar but potentially any tarball.
> Linux packaging ships an equivalent linux-source-3.16.tar.xz built
> from debian/rules.real in a probably non-reproducible way:
> 
>     cd '$(BUILD_DIR)'; tar -caf 'linux-source-$(UPSTREAMVERSION).tar.xz' 'linux-source-$(UPSTREAMVERSION)'
> 
> so I could file a bug requesting to patch that too.

It's on the latest one I've sent for linux:
https://bugs.debian.org/cgi-bin/bugreport.cgi?msg=34;filename=linux_3.16.7-ckt2-1_reproducible2.patch;att=1;bug=769844

> Plenty more packages ship tarballs though:
> 
> https://packages.debian.org/search?searchon=contents&keywords=.tgz
> https://packages.debian.org/search?searchon=contents&keywords=.tar.gz
> https://packages.debian.org/search?searchon=contents&keywords=.tar.bz2
> https://packages.debian.org/search?searchon=contents&keywords=.tar.xz
> 
> so I wonder if GNU tar itself could make this any easier.

Please ask upstream if you feel like it! :)

-- 
Lunar                                .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150215/78c124ed/attachment.sig>