GNU bug report logs - #62071
openjdk@9/10 sources not reproducible

Previous Next

Package: guix;

Reported by: Lars-Dominik Braun <lars <at> 6xq.net>

Date: Thu, 9 Mar 2023 09:50:02 UTC

Severity: normal

Done: Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de>

Bug is archived. No further changes may be made.

Full log


Message #11 received at 62071 <at> debbugs.gnu.org (full text, mbox):

From: Björn Höfling <bjoern.hoefling <at> bjoernhoefling.de>
To: Lars-Dominik Braun <lars <at> 6xq.net>
Cc: 62071 <at> debbugs.gnu.org
Subject: Re: bug#62071: openjdk <at> 9/10 sources not reproducible
Date: Sun, 12 Mar 2023 22:00:21 +0100
[Message part 1 (text/plain, inline)]
On Thu, 9 Mar 2023 10:48:53 +0100
Lars-Dominik Braun <lars <at> 6xq.net> wrote:

> Hi,
> 
> it looks like the (auto-generated) tarballs for openjdk <at> 9 and
> openjdk <at> 10 changed their hash, causing a hash mismatch via
> 
>     guix build -S openjdk <at> 9 --no-substitutes --no-grafts
> 
> I’m not sure why it uses these tarballs in the first place, since we
> have a hg-download.

I compared for JDK9 the two tarballs (old and new hash) and there is no
difference in the content (according to diffoscope). Also, if I
hg-clone the repository/tag (and add the .hg_archival.txt file), all
three directory trees have the same hash value according to guix hash
-rx

Thus, it seams like their artifacts are not stable, as we saw it
for autogenerated artifacts on github.

I will check the same for JDK10 and will prepare a patch within the
next two days.

Björn
[Message part 2 (application/pgp-signature, inline)]

This bug report was last modified 2 years and 48 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.