Bug#858431: strip-nondeterminism does not normalize Unix ownership from zip archives

Santiago Vila sanvila at unex.es
Wed Mar 22 17:48:29 UTC 2017


On Wed, Mar 22, 2017 at 03:48:02AM -0700, Mike Swanson wrote:

> root at turanga:sn# strip-nondeterminism ?.zip
> root at turanga:sn# bsdtar -tvf 1.zip
> -rwxr-xr-x  0 0      0           0 Mar 22 03:44 root
> -rw-r--r--  0 1000   1001        0 Mar 22 03:44 user
> root at turanga:sn# bsdtar -tvf 2.zip
> -rwxr-xr-x  0 0      0           0 Mar 22 03:44 root
> -rw-r--r--  0 1001   1002        0 Mar 22 03:44 user
> 
> What I expect to see, and believe should happen, is all UIDs and GIDs in
> the zip archive become 0, owned by root.

That would be inconsistent with the current behaviour with tarballs,
which also contain UIDs and GIDs and AFAIK are kept untouched by
strip-nondeterminism.

If those zipfiles are created in the build target of debian/rules,
why not just use "fakeroot tar czvf tarball.tar.gz file1 file2" or
"fakeroot zip zipfile.zip file1 file2"?

Also: What if the zipfile or the tarball comes from the orig.tar.gz
and we don't want to alter it in any way?

Thanks.



More information about the Reproducible-builds mailing list