[Reproducible-builds] unreproducible tarballs generated during build (was: Re: Fwd: reproducible builds)

[Andreas Beckmann]

On 2015-02-10 01:00, Mattia Rizzolo wrote:
>> * after fixing the timestamps in a kernel module source tarball, the
>> file order has changed ... I didn't see a corresponding issue in the
>> Wiki to make that deterministic (underlying filesystem is a tmpfs)
> 
> File order where?

The file order inside the tarball created by debian/rules during the 
build. Maybe you need to teach tar some more determinism :-)

After copying a lot of stuff into $(module_source), the rules now do this:

        find '$(module_source)/../../modules' -depth -newermt '$(BUILD_DATE)' -print0 | \
                xargs -0r touch --no-dereference --date='$(BUILD_DATE)'

        # Build the tarball.
        tar cfJ $(module_txz) \
            --owner=root --group=src -C $(module_source)/../.. \
            --exclude '*.in' --exclude '.svn' modules
        tar tfvJ $(module_txz)

(nvidia-graphics-drivers, SVN, trunk)

debbindiff attached.

>> * is it intentional to have --debbuildoptions -b enabled?
>  -b     Specifies a binary-only build, no source files are to be built and/or
>         distributed

Oops, dpkg-buildpackage now has way to many of these options :-)


Andreas
-------------- next part --------------
A non-text attachment was scrubbed...
Name: nvidia-graphics-drivers_340.76-1.dsc.debbindiff.html.gz
Type: application/gzip
Size: 7752 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150210/873c8ab9/attachment.bin>