From unknown Sun Jun 15 08:19:55 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#75090 <75090@debbugs.gnu.org> To: bug#75090 <75090@debbugs.gnu.org> Subject: Status: Make 'guix pack -f docker' tarballs reproducible? Reply-To: bug#75090 <75090@debbugs.gnu.org> Date: Sun, 15 Jun 2025 15:19:55 +0000 retitle 75090 Make 'guix pack -f docker' tarballs reproducible? reassign 75090 guix submitter 75090 Simon Josefsson severity 75090 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Wed Dec 25 12:12:25 2024 Received: (at submit) by debbugs.gnu.org; 25 Dec 2024 17:12:25 +0000 Received: from localhost ([127.0.0.1]:38676 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tQUvp-0006cP-AK for submit@debbugs.gnu.org; Wed, 25 Dec 2024 12:12:25 -0500 Received: from lists.gnu.org ([209.51.188.17]:35924) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tQUvm-0006cH-St for submit@debbugs.gnu.org; Wed, 25 Dec 2024 12:12:23 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tQUtg-0006JK-4L for bug-guix@gnu.org; Wed, 25 Dec 2024 12:10:12 -0500 Received: from uggla.sjd.se ([2001:9b1:8633::107]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tQUtd-0007Kt-3w for bug-guix@gnu.org; Wed, 25 Dec 2024 12:10:11 -0500 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description; bh=XIWbmLgyHz+rtnrDspz5FBAwWlhymDmex7FgM4n/aRg=; t=1735146599; x=1736356199; b=EjxHJbS9h0ZNbAgOFy7EbFhPxGLXaTDGxwpilTlIZgUfRRg CXTwuRX0VSuBs3Luhq32aPy7rlAbQr66o/zthBg==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID:Date: Subject:To:From:Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID: Content-Description; bh=XIWbmLgyHz+rtnrDspz5FBAwWlhymDmex7FgM4n/aRg=; t=1735146599; x=1736356199; b=VwP30Da0shMvh3fKzab6i1DJ+aAf/Gp7El3ZwRjxY1RPg0e wPbhQmQ7w5y/JRQCf5lywDtDMhDq0C+58Ksmlk94CGXGrguaigmL6y1LTvXIFxxtKo5guGQTUCK4Z ONKZ5drzNF0TclNXDRalyOhfVpsNLUzD8k2irOTqaAigLdLEj45JNYy8FPXiUXSiFcsRJZOtJiQAX eN+fWwbHSM82xbIIQQxtQOQKvjt+TcILG5tlTiScA7+iTCRUEkhPxnN9318rtgjKLGy/2if/QZwL3 2qN91CMdubNev7BbnSA/WuRKHcIVBB+GcUDzukprNFFPFmkVquWyqThrwCxTNlSC1mNekCSjKHrXD M4DdOC3H8vPh3tnA2XoJAt8PRBc0lG4NrRT3ROR8TWQ9et5L4A94GggpA4+9E+got1LG9OaBPTlLp cPhVSQ7NEv8Mn+KWVoyEpyS1; Received: from h-178-174-130-130.a498.priv.bahnhof.se ([178.174.130.130]:46134 helo=kaka) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1tQUtR-007X99-O8 for bug-guix@gnu.org; Wed, 25 Dec 2024 17:09:57 +0000 X-Hashcash: 1:23:241225:bug-guix@gnu.org::LygcWLijrr5QqAa/:uY1n From: Simon Josefsson To: bug-guix@gnu.org Subject: Make 'guix pack -f docker' tarballs reproducible? OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt Date: Wed, 25 Dec 2024 18:10:14 +0100 Message-ID: <87msgjofih.fsf@kaka.sjd.se> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/27.1 (gnu/linux) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" Received-SPF: pass client-ip=2001:9b1:8633::107; envelope-from=simon@josefsson.org; helo=uggla.sjd.se X-Spam_score_int: -43 X-Spam_score: -4.4 X-Spam_bar: ---- X-Spam_report: (-4.4 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_MED=-2.3, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Hi I am creating docker archives using: guix pack guix bash-minimal coreutils-minimal net-base --save-provenance -S= /bin=3Dbin -S /share=3Dshare -f docker --image-tag=3Dguix --max-layers=3D8= --verbosity=3D2 To my surprise the output was not reproducible between re-runs. The reason is because of the timestamp and ownership information in the outer tarball. The internals are identical and reproducible. See diffoscope output below. I tried to work around it by wrapping either the 'guix pack' or 'guix-daemon' commands with this environment variable, which I suggest for inspiration as additional parameters to tar: TAR_OPTIONS=3D"--owner=3D0 --group=3D0 --numeric-owner --sort=3Dname --mode= =3Dgo+u,go-w --mtime=3D@0" I would prefer 'guix pack' produced reproducible archives by default. Alternatively, provide a way to allow me as user to specify some parameters for 'guix pack' to make that happen. /Simon jas@kaka:~/src/guix-container$ diffoscope stage1-docker-pack.tar.gz-1 stage= 1-docker-pack.tar.gz-2=20 =2D-- stage1-docker-pack.tar.gz-1 +++ stage1-docker-pack.tar.gz-2 =E2=94=82 --- stage1-docker-pack.tar.gz-1-content =E2=94=9C=E2=94=80=E2=94=80 +++ stage1-docker-pack.tar.gz-2-content =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 file list =E2=94=82 =E2=94=82 @@ -1,10 +1,10 @@ =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 42145= 7920 2024-12-25 16:31:15.000000 sha256:e69812bf459ea0fba42d1d6fd518410a4e58= 8ddd4e4c007ddb4dd48c9c04293a/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 56330= 240 2024-12-25 16:31:16.000000 sha256:45e67bf9fcad2f255f20dc614224b9e4260da= 1b63f2a361c2479e1ed64a9210a/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 37632= 000 2024-12-25 16:31:16.000000 sha256:a8d1b46be57ba5a41051dedcf2d8d7bb2f13a= 9d58078729a962d04f5178274ba/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 41523= 200 2024-12-25 16:31:16.000000 sha256:0756f500c123ba4f34cda21e5232932799fd3= 6c15243f7fcb1ef38ff6ec7533d/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 37806= 080 2024-12-25 16:31:17.000000 sha256:bf18d11d88b81af3f6fb49b7d4b092d479b79= 67ac8dc4980cc381170997c6ccf/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 17582= 080 2024-12-25 16:31:17.000000 sha256:9263a9904763737f9e8bdf08ca52cede34c2f= a9e99abe7f9ef273111752cb2ca/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 14776= 3200 2024-12-25 16:31:20.000000 sha256:3d9a70bc298db46d9fdd95badacd3ec5586f= 3965110bb85b748be6bcfc57b171/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) 10= 240 2024-12-25 16:31:14.000000 sha256:3fb6718bc797283e8283fe1b843596ace2e62= db47d5b38d228a64a6bbb7c3564/layer.tar =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) = 736 2024-12-25 16:31:21.000000 manifest.json =E2=94=82 =E2=94=82 --rw-r--r-- 0 nixbld (997) nixbld (999) = 842 2024-12-25 16:31:21.000000 config.json =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 42145= 7920 2024-12-25 16:41:20.000000 sha256:e69812bf459ea0fba42d1d6fd518410a4e58= 8ddd4e4c007ddb4dd48c9c04293a/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 56330= 240 2024-12-25 16:41:21.000000 sha256:45e67bf9fcad2f255f20dc614224b9e4260da= 1b63f2a361c2479e1ed64a9210a/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 37632= 000 2024-12-25 16:41:22.000000 sha256:a8d1b46be57ba5a41051dedcf2d8d7bb2f13a= 9d58078729a962d04f5178274ba/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 41523= 200 2024-12-25 16:41:22.000000 sha256:0756f500c123ba4f34cda21e5232932799fd3= 6c15243f7fcb1ef38ff6ec7533d/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 37806= 080 2024-12-25 16:41:22.000000 sha256:bf18d11d88b81af3f6fb49b7d4b092d479b79= 67ac8dc4980cc381170997c6ccf/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 17582= 080 2024-12-25 16:41:23.000000 sha256:9263a9904763737f9e8bdf08ca52cede34c2f= a9e99abe7f9ef273111752cb2ca/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 14776= 3200 2024-12-25 16:41:25.000000 sha256:3d9a70bc298db46d9fdd95badacd3ec5586f= 3965110bb85b748be6bcfc57b171/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) 10= 240 2024-12-25 16:41:19.000000 sha256:3fb6718bc797283e8283fe1b843596ace2e62= db47d5b38d228a64a6bbb7c3564/layer.tar =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) = 736 2024-12-25 16:41:26.000000 manifest.json =E2=94=82 =E2=94=82 +-rw-r--r-- 0 nixbld (997) nixbld (999) = 842 2024-12-25 16:41:26.000000 config.json jas@kaka:~/src/guix-container$=20 --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCZ2w8dhQcc2ltb25Aam9z ZWZzc29uLm9yZwAKCRBRcisI/kdFolS9AP9SiacOwwv/Ljjy5xRtSr7oLC/qTI4N bU55c/QBqV2EcAD/V4CFBFN63O7OFRDIQ100CYhotoRUnF7IQ+Pme7XPnQU= =mjf4 -----END PGP SIGNATURE----- --=-=-=-- From debbugs-submit-bounces@debbugs.gnu.org Tue Jan 07 17:58:15 2025 Received: (at 75090) by debbugs.gnu.org; 7 Jan 2025 22:58:15 +0000 Received: from localhost ([127.0.0.1]:45088 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tVIWd-000465-9q for submit@debbugs.gnu.org; Tue, 07 Jan 2025 17:58:15 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:52970) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tVIWb-00045k-S8 for 75090@debbugs.gnu.org; Tue, 07 Jan 2025 17:58:14 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tVIWT-0007dg-Fv; Tue, 07 Jan 2025 17:58:07 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=cj9g9yZzyQu7cJmxcOtNeHihSCwYN+8sU1YygcTxB7U=; b=UnUFuNfSkF3dvcAjP34T OWe+42KQ5plF2Cjnz9gTxyUu/8IcwAYPEK2s/olWoAlIYR/Sswnn9J9kml2Gg2sv2JMZC6/mLS0Za LQjESpHKyk3BB80YmxrGZvmuRaE0f5jRdSCM5uIjH0ZWWJTycNSjKE1Na71v6xyjaFcQ0/yCXv6Hh KoyJyMAa9sa7TYF+2aAYLrP9N0XzyisNH+mzuQqDXbXM0PhbWTq9vdzsQTamrQKyvTUIaXc6gQQi/ URBbZJun3VFIV4Vhvkp7RDJjkf2BY1/21u2mn8ItroW7VJFECUYvjDJVi3NR7AHwvY2HQKAnZbxjD CKOMk0JacAbHTA==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Simon Josefsson Subject: Re: bug#75090: Make 'guix pack -f docker' tarballs reproducible? In-Reply-To: <87msgjofih.fsf@kaka.sjd.se> (Simon Josefsson's message of "Wed, 25 Dec 2024 18:10:14 +0100") References: <87msgjofih.fsf@kaka.sjd.se> Date: Tue, 07 Jan 2025 23:57:41 +0100 Message-ID: <87jzb6xme2.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090 Cc: 75090@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Simon, Simon Josefsson skribis: > I am creating docker archives using: > > guix pack guix bash-minimal coreutils-minimal net-base --save-provenance = -S /bin=3Dbin -S /share=3Dshare -f docker --image-tag=3Dguix --max-layers= =3D8 --verbosity=3D2 > > To my surprise the output was not reproducible between re-runs. > > The reason is because of the timestamp and ownership information in the > outer tarball. The internals are identical and reproducible. See > diffoscope output below. > > I tried to work around it by wrapping either the 'guix pack' or > 'guix-daemon' commands with this environment variable, which I suggest > for inspiration as additional parameters to tar: > > TAR_OPTIONS=3D"--owner=3D0 --group=3D0 --numeric-owner --sort=3Dname --mo= de=3Dgo+u,go-w --mtime=3D@0" > > I would prefer 'guix pack' produced reproducible archives by default. Indeed. I sent a fix based on your suggestion: . Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Fri Jan 24 18:07:25 2025 Received: (at 75090-done) by debbugs.gnu.org; 24 Jan 2025 23:07:25 +0000 Received: from localhost ([127.0.0.1]:47437 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tbSlp-0000mq-HI for submit@debbugs.gnu.org; Fri, 24 Jan 2025 18:07:25 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:39926) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tbSln-0000mY-Q9; Fri, 24 Jan 2025 18:07:24 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tbSlh-0007SO-5F; Fri, 24 Jan 2025 18:07:17 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=jEP95HRCFTBdwJyzZrsgv3dH5DByfJrQfcj/Bbca9uw=; b=BI/64vu7h23LBFQKC0yZ C8KYKThQTtfr0CHQAU+OO8J1+64AdDuXfacCeFSoDMfAThejCyBt/eTNHbfHnDHnUo+a7XoYNvvVF pf2PKIvXw66DwoiJOAjeDywzxuSQ5Pw3quClSIjRf2LGAmOmBo6HKFi0PdUIgXqbfV6Hev1nhmeUU HoC1koqLX4/MHUuahgFTETRC6idZf629CR0tWgkY3fJTo0GTRESEMBxHUsjgdj08jmJ0+pd1fgtaG MwViEJhYLnuNmsaBQgVQmQdfXAl03y53Se78mw4IIie9arRspB89giPe8fP9WKfUg4ftOREFx+eoI DfIId6MXa6IfgA==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: 75426-done@debbugs.gnu.org, 75090-done@debbugs.gnu.org Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. In-Reply-To: ("Ludovic =?utf-8?Q?Court=C3=A8s=22's?= message of "Tue, 7 Jan 2025 23:55:33 +0100") References: Date: Sat, 25 Jan 2025 00:07:13 +0100 Message-ID: <87wmejbyla.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090-done Cc: Simon Josefsson , Josselin Poiret , Simon Tournier , Mathieu Othacehe , Tobias Geerinckx-Rice , Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Ludovic Court=C3=A8s skribis: > Fixes . > > * guix/docker.scm (tar): New procedure. > (create-empty-tar, build-docker-image): Use it instead of calling > =E2=80=98invoke=E2=80=99 directly. > > Reported-by: Simon Josefsson > Change-Id: Ia899c43ed6a3809ff845de0953e3d38cccf24609 Pushed as 646202bf73f90de4f9b7cc66248b8f8e6e381014. Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Wed Jan 29 14:02:20 2025 Received: (at 75090) by debbugs.gnu.org; 29 Jan 2025 19:02:20 +0000 Received: from localhost ([127.0.0.1]:43064 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tdDKO-0005I9-1C for submit@debbugs.gnu.org; Wed, 29 Jan 2025 14:02:20 -0500 Received: from uggla.sjd.se ([2001:9b1:8633::107]:52956) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tdDKJ-0005Ho-AM; Wed, 29 Jan 2025 14:02:17 -0500 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=MIME-Version:Content-Type:References:In-Reply-To :Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To:Content-Transfer-Encoding :Content-ID:Content-Description; bh=TQkh6f53b4QYsjKn0I6wUY+tAXwu2SARcbmQ483hzZs=; t=1738177335; x=1739386935; b=dizaJWmrAR84GMZz61MiRw4zn76gN/7fmFMBOtMDzL8PHcumRbxydA2iBJ5PKHu8e97QwNOsmUi UrEpP2OJjAA==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=MIME-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=TQkh6f53b4QYsjKn0I6wUY+tAXwu2SARcbmQ483hzZs=; t=1738177335; x=1739386935; b=OJzEq9E7WqnW/7tdUNjfpCM3WFwcHKo6m9LGl+WvR/wuIcseu7L0kx014IE9QWoIQoIaycToNRA y1G81MwlmvO9hagwQ2I7ApultSeYjDfzxwaXHTx3j4ROHADM9b3Qij+/v9mBqGaHz/fxv+9g8qVfK YNlg2jmZZ7wcg7GukqnF/14lYJsvOrTietynh98GPCSS1uOJlzRqYlkjfOC0FuqoA32M+c/ELsz+f /WZd+HCbKKxj9klmpPy8HI4yyJkrvWWCg4I4mQisDtJzP+LIgreE3b57Wo64WS+msHSzHrgAB72GR XabulGkGya7qPMAQGci0JrdNPNdT4knV7THBM0uVDMrV6MQpOJ0/dOe6B8JmXWMfekCORK6FJ5U/V Fmf/Sf4iKm2H5q+q2rG31pCobJ81DpW8fqn8HgEg1Ekz+h5mc4s5mTsUyXklSFD8/+z45SwoN; Received: from h-178-174-130-130.a498.priv.bahnhof.se ([178.174.130.130]:59436 helo=kaka.lan) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1tdDKG-0004F2-GP; Wed, 29 Jan 2025 19:02:12 +0000 Message-ID: <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. From: Simon Josefsson To: Ludovic =?ISO-8859-1?Q?Court=E8s?= , 75426@debbugs.gnu.org, 75090@debbugs.gnu.org Date: Wed, 29 Jan 2025 20:02:08 +0100 In-Reply-To: <87wmejbyla.fsf@gnu.org> References: <87wmejbyla.fsf@gnu.org> Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-NOp2ufHIJpR2+0TQJANV" User-Agent: Evolution 3.44.4-0ubuntu2 MIME-Version: 1.0 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090 Cc: Tobias Geerinckx-Rice , Christopher Baines , Josselin Poiret , Simon Tournier , Mathieu Othacehe X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-NOp2ufHIJpR2+0TQJANV Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Hi! I suspect something went wrong with this patch, now 'guix pack' fail and give the error below. Maybe the 'cf' has to come first? https://gitlab.com/debdistutils/guix/container/-/jobs/8988707317 /Simon tar: You must specify one of the '-Acdtrux', '--delete' or '--test- label' options Try 'tar --help' or 'tar --usage' for more information. Backtrace: 7 (primitive-load "/gnu/store/hyx3flr5r251fc3x0z0l6r36159?") In guix/docker.scm: 387:6 6 (build-docker-image "/gnu/store/vwia06dwxrsmf152spa6n2?" ?) In ice-9/ports.scm: 433:17 5 (call-with-output-file _ _ #:binary _ #:encoding _) 476:4 4 (_ _) In guix/docker.scm: 277:15 3 (_) In srfi/srfi-1.scm: 586:17 2 (map1 ("/gnu/store/dn7ya77a3za7jqrihdql0hcxc0i32mmf-?" ?)) In guix/docker.scm: 279:18 1 (_ "/gnu/store/dn7ya77a3za7jqrihdql0hcxc0i32mmf-guix-1.?") In guix/build/utils.scm: 822:6 0 (invoke "tar" "--mtime=3D@1" "--owner=3D0" "--group=3D0" "--?" ?) guix/build/utils.scm:822:6: In procedure invoke: ERROR: 1. &invoke-error: program: "tar" arguments: ("--mtime=3D@1" "--owner=3D0" "--group=3D0" "--numeric- owner" "--sort=3Dname" "--mode=3Dgo+u,go-w" "cf" "layer.tar" "/gnu/store/dn7ya77a3za7jqrihdql0hcxc0i32mmf-guix-1.4.0-31.121e96d") exit-status: 2 term-signal: #f stop-signal: #f l=C3=B6r 2025-01-25 klockan 00:07 +0100 skrev Ludovic Court=C3=A8s: > Ludovic Court=C3=A8s skribis: >=20 > > Fixes . > >=20 > > * guix/docker.scm (tar): New procedure. > > (create-empty-tar, build-docker-image): Use it instead of calling > > =E2=80=98invoke=E2=80=99 directly. > >=20 > > Reported-by: Simon Josefsson > > Change-Id: Ia899c43ed6a3809ff845de0953e3d38cccf24609 >=20 > Pushed as 646202bf73f90de4f9b7cc66248b8f8e6e381014. >=20 > Ludo=E2=80=99. --=-NOp2ufHIJpR2+0TQJANV Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iQNTBAAWCAL7FiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmeaezDCHCYAmDMEXJLO tBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9fV+QlTmXxo2naObDuGtw58YaxlOu0 JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9zZWZzc29uLm9yZz6IlgQTFggAPgIb AwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc89jjFPAa+ BQJl/YgIBQkLehFUAAoJENc89jjFPAa+CboA+wUa06RD5e5VTCxvSWtPS75Wq2qB eYGZnf0jvUMxa2n4AP4xkUeAPPnNuMsTm2fsFCDIGaEM2Yn6Vb2huzzT1Fw/BLgz BFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAxI2hIX4HK9bQTpNVei708oNr1Klm8 qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0+MTXPPY4xTwGvgUCZf2IKwUJC3oQ qgCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9RcisI/kdFogUCXJLPgQAKCRBRcisI /kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE8GZHYNuFHmM9FEQS6AD6A4x5aYvo Y6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4JENc89jjFPAa+GcYA/26YQY05bLtn XiIjTiAzrGQrRXxTHPA8Av7TDFHvIetWAP9sHSoU8OfTwmTiEnGwLlsV7QJclZg3 YNz/Ypcp9TqQBrg4BFySz2oSCisGAQQBl1UBBQEBB0AxlRumDW6nZY7A+VCfek9V pEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggAJgIbDBYhBLHSvRN1vst4TPT4xNc8 9jjFPAa+BQJl/YgwBQkLehDGAAoJENc89jjFPAa+phoA/jrDqIrl/55vUMBhIQv+ TP635d2iCTEnyFmbUcP9+gh6APoDsXalVd2cOGxQtSC+TF8PkZMn1TLkJKAjVxr+ xx40AgAKCRBRcisI/kdFon8rAQDjyuNawr7l9rVVvvJF1/v9Ys8YEAguZBykLjXr AlsSSQEAtr4WUwktnqhpoYgQ5/7RE9jq/sIOWEo1C42H9HzUtAE= =Bo2J -----END PGP SIGNATURE----- --=-NOp2ufHIJpR2+0TQJANV-- From debbugs-submit-bounces@debbugs.gnu.org Fri Jan 31 11:13:01 2025 Received: (at 75090) by debbugs.gnu.org; 31 Jan 2025 16:13:01 +0000 Received: from localhost ([127.0.0.1]:53950 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tdtdc-00082a-Uz for submit@debbugs.gnu.org; Fri, 31 Jan 2025 11:13:01 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:58012) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tdtda-00082I-EB; Fri, 31 Jan 2025 11:12:59 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tdtdT-00082H-Vx; Fri, 31 Jan 2025 11:12:52 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=jU4RNiuTXFtC9LmeXzklMp255mVhYOvozbmH129z4z0=; b=DqZAp8NpPoGcypk43UMp xvQ9z0Xc9YxRMTwLo2HJ6X/NYJ7495+QpaX5Wqy/QmgDLsMaTtSgtE67jqt14yDQfQCnyiQis29XC sCUzDsXHsTizievutYEbwd4lu+QWmzPTEUXzQAaJH3GP8IzjA0YIvRa2vD+jtm7f6S1QqKXhyOLEQ HJlIE59s6p6dDnh/4ickUpgOUcPG2PavD17Oyw73SIqqTC0UOx98AgRmjG/3XAVImSriMHe8vzSwb MIhkiA8l6ZG3dTwwXn/rvSEDuMmkfQmXrgNr7D+KwnEE78ZD+QltGYVWQnKDF3I8HfuFpFpbyOPWd 2x4eGrJTPNnlpA==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Simon Josefsson Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. In-Reply-To: <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> (Simon Josefsson's message of "Wed, 29 Jan 2025 20:02:08 +0100") References: <87wmejbyla.fsf@gnu.org> <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> X-URL: http://www.fdn.fr/~lcourtes/ X-Revolutionary-Date: Duodi 12 =?utf-8?Q?Pluvi=C3=B4se?= an 233 de la =?utf-8?Q?R=C3=A9volution=2C?= jour du Brocoli X-PGP-Key-ID: 0x090B11993D9AEBB5 X-PGP-Key: http://www.fdn.fr/~lcourtes/ludovic.asc X-PGP-Fingerprint: 3CE4 6455 8A84 FDC6 9DB4 0CFB 090B 1199 3D9A EBB5 X-OS: x86_64-pc-linux-gnu Date: Fri, 31 Jan 2025 17:12:47 +0100 Message-ID: <87ed0jc680.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090 Cc: Josselin Poiret , Simon Tournier , Mathieu Othacehe , Tobias Geerinckx-Rice , 75090@debbugs.gnu.org, 75426@debbugs.gnu.org, Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi, Simon Josefsson skribis: > Hi! I suspect something went wrong with this patch, now 'guix pack' > fail and give the error below. Maybe the 'cf' has to come first? > > https://gitlab.com/debdistutils/guix/container/-/jobs/8988707317 > tar: You must specify one of the '-Acdtrux', '--delete' or '--test-label'= options > Try 'tar --help' or 'tar --usage' for more information. Hmm I don=E2=80=99t see this message in the GitLab log above, and I cannot reproduce the problem: --8<---------------cut here---------------start------------->8--- $ ./pre-inst-env guix pack -f docker sed /gnu/store/h2hdp469v3014b82qsvz5fkw00sfxdgh-sed-docker-pack.tar.gz $ git log |head -3 commit 97fb1887ad10000c067168176c504274e29e4430 Author: Ashish SHUKLA Date: Mon Jan 20 21:46:10 2025 +0000 --8<---------------cut here---------------end--------------->8--- Could you try to come up with a command and commit that reproduces it? Thanks, Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Fri Jan 31 17:44:46 2025 Received: (at 75090) by debbugs.gnu.org; 31 Jan 2025 22:44:46 +0000 Received: from localhost ([127.0.0.1]:55314 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tdzkj-0001KZ-Hi for submit@debbugs.gnu.org; Fri, 31 Jan 2025 17:44:46 -0500 Received: from uggla.sjd.se ([2001:9b1:8633::107]:54282) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tdzkX-0001K5-Hy; Fri, 31 Jan 2025 17:44:35 -0500 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=MIME-Version:Content-Type:References:In-Reply-To :Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To:Content-Transfer-Encoding :Content-ID:Content-Description; bh=TGFLJl4n7SPy/dNViWAbBzTHK5e3hd3R5Pg9VvCG488=; t=1738363472; x=1739573072; b=W5g6OvUBZwKEzGG0MfmNSRNMWysnkgdHoUM6V2JE9cEjrrR5oThWr1656GGxtcdhNnJTDTz4dSG 6Kf/CWrl1Dw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=MIME-Version:Content-Type:References: In-Reply-To:Date:Cc:To:From:Subject:Message-ID:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=TGFLJl4n7SPy/dNViWAbBzTHK5e3hd3R5Pg9VvCG488=; t=1738363472; x=1739573072; b=uH8hEdJ+/zsIqOcBHVcxo/hYw/Z/73B2Ujv6ifLZ9eAANHY3gwCkD2mNyRJsbQqf9GMLUzdyaex C/otE+KkQrlLu0eeXD+33lzBqEq+wpYOWXeIfP0AZDQD7QoRiKrObKdVzang9sj/1/W2GNtqPbhgl 7vwMeXioS2jpF7JVKHCTg79i5l2wnhu/wDaNzzuJ7h1a2189RJUhL7/P84mihciEkWwB1xL3ef9l/ ViuF0q3oEqEXbIMigua2ZOj8QUa1ZreMFaHnax5EeCArc6A30PafJTfwyasjCnaAvXEq4kqeYzmEk WBkiMHAyUaKNgel/MLNhBOHiDfFhEfknTbaX9oJWNqw2hu/xoU2LxlmvcO84EFPiBO9z2QTMGdS3R LzFbrztH1NEcDrherPCZ+b24wKgmVj5jvaxt3qluUPIDnaiXB42507m5B/3S789y2L7V62pnt; Received: from [94.107.214.68] (port=59598 helo=[172.16.227.183]) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1tdzkQ-000x8W-RQ; Fri, 31 Jan 2025 22:44:26 +0000 Message-ID: <8c6aa44b639b28a35ecb6c9d1bc393b734e17f55.camel@josefsson.org> Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. From: Simon Josefsson To: Ludovic =?ISO-8859-1?Q?Court=E8s?= Date: Fri, 31 Jan 2025 23:44:18 +0100 In-Reply-To: <87ed0jc680.fsf@gnu.org> References: <87wmejbyla.fsf@gnu.org> <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> <87ed0jc680.fsf@gnu.org> Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="=-gJ90Tkrcfc92v0GxL1uI" User-Agent: Evolution 3.44.4-0ubuntu2 MIME-Version: 1.0 X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090 Cc: Josselin Poiret , Simon Tournier , Mathieu Othacehe , Tobias Geerinckx-Rice , 75090@debbugs.gnu.org, 75426@debbugs.gnu.org, Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) --=-gJ90Tkrcfc92v0GxL1uI Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable fre 2025-01-31 klockan 17:12 +0100 skrev Ludovic Court=C3=A8s: > Hi, >=20 > Simon Josefsson skribis: >=20 > > Hi!=C2=A0 I suspect something went wrong with this patch, now 'guix > > pack' > > fail and give the error below.=C2=A0 Maybe the 'cf' has to come first? > >=20 > > https://gitlab.com/debdistutils/guix/container/-/jobs/8988707317 >=20 > > tar: You must specify one of the '-Acdtrux', '--delete' or '--test- > > label' options > > Try 'tar --help' or 'tar --usage' for more information. >=20 > Hmm I don=E2=80=99t see this message in the GitLab log above, and I canno= t > reproduce the problem: >=20 > --8<---------------cut here---------------start------------->8--- > $ ./pre-inst-env guix pack -f docker sed > /gnu/store/h2hdp469v3014b82qsvz5fkw00sfxdgh-sed-docker-pack.tar.gz > $ git log |head -3 > commit 97fb1887ad10000c067168176c504274e29e4430 > Author: Ashish SHUKLA > Date:=C2=A0=C2=A0 Mon Jan 20 21:46:10 2025 +0000 > --8<---------------cut here---------------end--------------->8--- >=20 > Could you try to come up with a command and commit that reproduces > it? Running the commands in the log like below on my local trisquel machine with guix triggers the same problem. Any ideas? (FWIW, the message is hidden inside the log, but the error and filename of the log is printed in the gitlab log above, same as below; it is possible to click on 'Job artifacts' to find the log files.) /Simon jas@kaka:~$ guix describe Generation 26 31 jan 2025 23:37:27 (aktuell) guix d48da2d repository URL: https://git.savannah.gnu.org/git/guix.git branch: master commit: d48da2d21610f9cf5f76cd846703b12beedb1fd5 jas@kaka:~$ guix pack coreutils --save-provenance -S /bin=3Dbin -S /share=3Dshare -f docker --image-tag=3Dguix --max-layers=3D8 --verbosity=3D= 2 net-base The following derivation will be built: /gnu/store/qkz6wc1qq23ah1xk387givjvk9qlgwcn-coreutils-net-base- docker-pack.tar.gz.drv bygger /gnu/store/qkz6wc1qq23ah1xk387givjvk9qlgwcn-coreutils-net-base- docker-pack.tar.gz.drv=E2=80=A6 |builder for `/gnu/store/qkz6wc1qq23ah1xk387givjvk9qlgwcn-coreutils- net-base-docker-pack.tar.gz.drv' failed with exit code 1 bygge av /gnu/store/qkz6wc1qq23ah1xk387givjvk9qlgwcn-coreutils-net- base-docker-pack.tar.gz.drv misslyckades Granska bygglogg vid =E2=80=9D/var/log/guix/drvs/qk/z6wc1qq23ah1xk387givjvk9qlgwcn-coreutils-net= - base-docker-pack.tar.gz.drv.bz2=E2=80=9D. guix pack: fel: build of `/gnu/store/qkz6wc1qq23ah1xk387givjvk9qlgwcn- coreutils-net-base-docker-pack.tar.gz.drv' failed jas@kaka:~$ bzcat /var/log/guix/drvs/qk/z6wc1qq23ah1xk387givjvk9qlgwcn- coreutils-net-base-docker-pack.tar.gz.drv.bz2 | tail -30 tar: You must specify one of the '-Acdtrux', '--delete' or '--test- label' options Try 'tar --help' or 'tar --usage' for more information. Backtrace: 7 (primitive-load "/gnu/store/5z5322v39y5mwninj36m877zgsx?") In guix/docker.scm: 387:6 6 (build-docker-image "/gnu/store/8ac4lljjiqp3a7zydh6l9v?" ?) In ice-9/ports.scm: 433:17 5 (call-with-output-file _ _ #:binary _ #:encoding _) 476:4 4 (_ _) In guix/docker.scm: 277:15 3 (_) In srfi/srfi-1.scm: 586:17 2 (map1 ("/gnu/store/hw6g2kjayxnqi8rwpnmpraalxi0djkxc-?" ?)) In guix/docker.scm: 279:18 1 (_ "/gnu/store/hw6g2kjayxnqi8rwpnmpraalxi0djkxc-glibc-2?") In guix/build/utils.scm: 822:6 0 (invoke "tar" "--mtime=3D@1" "--owner=3D0" "--group=3D0" "--?" ?) guix/build/utils.scm:822:6: In procedure invoke: ERROR: 1. &invoke-error: program: "tar" arguments: ("--mtime=3D@1" "--owner=3D0" "--group=3D0" "--numeric- owner" "--sort=3Dname" "--mode=3Dgo+u,go-w" "cf" "layer.tar" "/gnu/store/hw6g2kjayxnqi8rwpnmpraalxi0djkxc-glibc-2.39") exit-status: 2 term-signal: #f stop-signal: #f jas@kaka:~$=20 --=-gJ90Tkrcfc92v0GxL1uI Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part -----BEGIN PGP SIGNATURE----- iQNTBAAWCAL7FiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmedUkLCHCYAmDMEXJLO tBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9fV+QlTmXxo2naObDuGtw58YaxlOu0 JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9zZWZzc29uLm9yZz6IlgQTFggAPgIb AwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYhBLHSvRN1vst4TPT4xNc89jjFPAa+ BQJl/YgIBQkLehFUAAoJENc89jjFPAa+CboA+wUa06RD5e5VTCxvSWtPS75Wq2qB eYGZnf0jvUMxa2n4AP4xkUeAPPnNuMsTm2fsFCDIGaEM2Yn6Vb2huzzT1Fw/BLgz BFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAxI2hIX4HK9bQTpNVei708oNr1Klm8 qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0+MTXPPY4xTwGvgUCZf2IKwUJC3oQ qgCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9RcisI/kdFogUCXJLPgQAKCRBRcisI /kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE8GZHYNuFHmM9FEQS6AD6A4x5aYvo Y6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4JENc89jjFPAa+GcYA/26YQY05bLtn XiIjTiAzrGQrRXxTHPA8Av7TDFHvIetWAP9sHSoU8OfTwmTiEnGwLlsV7QJclZg3 YNz/Ypcp9TqQBrg4BFySz2oSCisGAQQBl1UBBQEBB0AxlRumDW6nZY7A+VCfek9V pEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggAJgIbDBYhBLHSvRN1vst4TPT4xNc8 9jjFPAa+BQJl/YgwBQkLehDGAAoJENc89jjFPAa+phoA/jrDqIrl/55vUMBhIQv+ TP635d2iCTEnyFmbUcP9+gh6APoDsXalVd2cOGxQtSC+TF8PkZMn1TLkJKAjVxr+ xx40AgAKCRBRcisI/kdFomMNAP9iFnOeQBF/dBlP58EgXcWDcpLc2GUBHLcLoT/a NkRfmwD/XXlq+0hZKEAMSq7DmD1A47vi2xyEJRL9Ha5upWAcpw4= =lQ1C -----END PGP SIGNATURE----- --=-gJ90Tkrcfc92v0GxL1uI-- From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 04 11:23:19 2025 Received: (at 75090) by debbugs.gnu.org; 4 Feb 2025 16:23:19 +0000 Received: from localhost ([127.0.0.1]:46385 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tfLhn-0000nA-5A for submit@debbugs.gnu.org; Tue, 04 Feb 2025 11:23:19 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:40906) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tfLhi-0000mi-Ll; Tue, 04 Feb 2025 11:23:15 -0500 Received: from fencepost.gnu.org ([2001:470:142:3::e]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tfLhc-0001cf-6d; Tue, 04 Feb 2025 11:23:08 -0500 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org; s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To: From; bh=Qd1Op0aBrLejLpf/dbyCjKoUQGSSZlZ5HdfYYA5W/pM=; b=G2Z/YHrD0/2Pv0W/C8Fr m71CGUQJNYTRSUbesG42Ykn++QR968x4+2EvdigWUPe/Y8TA5u3r5w3AEg3IZ0lSBrDRZz5whduju DAkOy07in/saoqhFS+QRErPfVCJ4Q4QcEMMpva/MlL19Olb7BfE0BoEqxxgCYaXTQHnnT2yBiFAsT HoGLcNjINIp/A52Xijq/MJD3HQWzFQBBlQFG/2K+HL/Q5+rY8tYO6mEVzJQaauWsY0zV0mpBP1tnF U8UWXunGzy73JYN/SLWB/iN67d2r6YgMjY30HuJVVbwHW6KXiInGC1UoJt5Z51kPPWIurx5tEuFeN vsl5AQeHixgL8A==; From: =?utf-8?Q?Ludovic_Court=C3=A8s?= To: Simon Josefsson Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. In-Reply-To: <8c6aa44b639b28a35ecb6c9d1bc393b734e17f55.camel@josefsson.org> (Simon Josefsson's message of "Fri, 31 Jan 2025 23:44:18 +0100") References: <87wmejbyla.fsf@gnu.org> <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> <87ed0jc680.fsf@gnu.org> <8c6aa44b639b28a35ecb6c9d1bc393b734e17f55.camel@josefsson.org> Date: Tue, 04 Feb 2025 17:23:03 +0100 Message-ID: <8734gty908.fsf@gnu.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 75090 Cc: Josselin Poiret , Simon Tournier , Mathieu Othacehe , Tobias Geerinckx-Rice , 75090@debbugs.gnu.org, 75426@debbugs.gnu.org, Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hello Simon, Simon Josefsson skribis: > jas@kaka:~$ guix pack coreutils --save-provenance -S /bin=3Dbin -S > /share=3Dshare -f docker --image-tag=3Dguix --max-layers=3D8 --verbosity= =3D2 > net-base [...] > guix/build/utils.scm:822:6: In procedure invoke: > ERROR: > 1. &invoke-error: > program: "tar" > arguments: ("--mtime=3D@1" "--owner=3D0" "--group=3D0" "--numeric- > owner" "--sort=3Dname" "--mode=3Dgo+u,go-w" "cf" "layer.tar" > "/gnu/store/hw6g2kjayxnqi8rwpnmpraalxi0djkxc-glibc-2.39") Fixed in 285a1cb449f60798dc83f7f1016700b4ab2374a8. Ludo=E2=80=99. From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 04 16:56:40 2025 Received: (at 75090) by debbugs.gnu.org; 4 Feb 2025 21:56:40 +0000 Received: from localhost ([127.0.0.1]:47017 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tfQuO-0004XC-7N for submit@debbugs.gnu.org; Tue, 04 Feb 2025 16:56:40 -0500 Received: from uggla.sjd.se ([2001:9b1:8633::107]:40792) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tfQuJ-0004Wo-QJ; Tue, 04 Feb 2025 16:56:37 -0500 DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=ed2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=pb3rn1O+WqKj3ZP3d7bymEBcAtL+eH1AUmR7v1mIAOg=; t=1738706193; x=1739915793; b=ALJKMzFSn0XDM1x51jIVmkRwbYpV2OTiLxFtGP7KzSd4zkuS99v0+avCDq9ruwQ5z8OUATBzfWw 2nSY9YTd6Aw==; DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=josefsson.org; s=rsa2303; h=Content-Type:MIME-Version:Message-ID:Date: References:In-Reply-To:Subject:Cc:To:From:Sender:Reply-To: Content-Transfer-Encoding:Content-ID:Content-Description; bh=pb3rn1O+WqKj3ZP3d7bymEBcAtL+eH1AUmR7v1mIAOg=; t=1738706193; x=1739915793; b=EVzkNac2a5EtQJbKSpR41nJGA2QuRTXVnA9H5P9cFsLcI6dXQyHVo5Bn/7IToMtYV5qBBl7idlj YiPMFxkQgL9ncEtK1YuLc6mncoDm0x4BVxbcGxMZ1PKhU0vWm6Po2hE/u6VSD9yS2lSQBzUWhFQsC KF8xlpoYgr7sYCffLW3DWF81ZKVCUi7U5RLW6xlLkXOs3v8O9kBGCCmvy6dUTIZgz+a5GIMclOWLQ oAk/5y1UB4WadWW5qXxflNLaAc0ZJJQ95IDWdNctCoEiClqCyhnxfIzII+4etCqvFJ4bS18iA+gut oYH324mIaTjVQSnx8uwi+tzGLh4BReAUGUjmoAZ2y5vU3mKG/qWJIM2xvOhKNrWjnINmn98hGYtX/ oWw966PLCYfAySpkiLTgL3z3/UoXp4KdyhL3+VzVN5MWfEYHJtpRIPciDhfjHf5Z40j78V2Ma; Received: from h-178-174-130-130.a498.priv.bahnhof.se ([178.174.130.130]:35258 helo=kaka) by uggla.sjd.se with esmtpsa (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1tfQuD-007xor-14; Tue, 04 Feb 2025 21:56:29 +0000 From: Simon Josefsson To: Ludovic =?iso-8859-1?Q?Court=E8s?= Subject: Re: [bug#75426] [PATCH] docker: Build tarballs reproducibly. In-Reply-To: <8734gty908.fsf@gnu.org> ("Ludovic =?iso-8859-1?Q?Court=E8s?= =?iso-8859-1?Q?=22's?= message of "Tue, 04 Feb 2025 17:23:03 +0100") References: <87wmejbyla.fsf@gnu.org> <7d999f7dfcfe6c2321e2456f60d43d30715b25f1.camel@josefsson.org> <87ed0jc680.fsf@gnu.org> <8c6aa44b639b28a35ecb6c9d1bc393b734e17f55.camel@josefsson.org> <8734gty908.fsf@gnu.org> OpenPGP: id=B1D2BD1375BECB784CF4F8C4D73CF638C53C06BE; url=https://josefsson.org/key-20190320.txt X-Hashcash: 1:23:250204:zimon.toutoune@gmail.com::gEu1r+uxFxBzIv+g:1U5/ X-Hashcash: 1:23:250204:75426@debbugs.gnu.org::lYf6kDFtyZmwKxFO:5Zy8 X-Hashcash: 1:23:250204:ludo@gnu.org::p1EM57fzB7+cNXQP:PgRM X-Hashcash: 1:23:250204:othacehe@gnu.org::Let19t2zgwpoiVHx:ITgt X-Hashcash: 1:23:250204:me@tobias.gr::38oEdNDYPMEl9SvE:n5cy X-Hashcash: 1:23:250204:75090@debbugs.gnu.org::kM40mVB+ADDCR+hG:RQ9I X-Hashcash: 1:23:250204:guix@cbaines.net::E0p/VM6sb0Sc96WS:op3J X-Hashcash: 1:23:250204:dev@jpoiret.xyz::Ul2FL8gAoSIYhdzQ:0N1Xq Date: Tue, 04 Feb 2025 22:56:25 +0100 Message-ID: <87v7tpnzli.fsf@josefsson.org> User-Agent: Gnus/5.13 (Gnus v5.13) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha256; protocol="application/pgp-signature" X-Spam-Score: -2.2 (--) X-Debbugs-Envelope-To: 75090 Cc: Josselin Poiret , Simon Tournier , Mathieu Othacehe , Tobias Geerinckx-Rice , 75090@debbugs.gnu.org, 75426@debbugs.gnu.org, Christopher Baines X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.2 (---) --=-=-= Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Ludovic Court=E8s writes: > Fixed in 285a1cb449f60798dc83f7f1016700b4ab2374a8. Hi! Wonderful, confirmed working. These two pipelines produce bit-by-bit identical docker pack images for stage1 of my guix gitlab container images now: https://gitlab.com/debdistutils/guix/container/-/jobs/9042454862 https://gitlab.com/debdistutils/guix/container/-/jobs/9042230873 58b98623ac2b75de521c8db6a904e60f4faad17dc08c2ccc6eab445a9f77cfdd /Simon --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmeijQkUHHNpbW9uQGpv c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh BLHSvRN1vst4TPT4xNc89jjFPAa+BQJl/YgIBQkLehFUAAoJENc89jjFPAa+CboA +wUa06RD5e5VTCxvSWtPS75Wq2qBeYGZnf0jvUMxa2n4AP4xkUeAPPnNuMsTm2fs FCDIGaEM2Yn6Vb2huzzT1Fw/BLgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0 +MTXPPY4xTwGvgUCZf2IKwUJC3oQqgCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE 8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J ENc89jjFPAa+GcYA/26YQY05bLtnXiIjTiAzrGQrRXxTHPA8Av7TDFHvIetWAP9s HSoU8OfTwmTiEnGwLlsV7QJclZg3YNz/Ypcp9TqQBrg4BFySz2oSCisGAQQBl1UB BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJl/YgwBQkLehDGAAoJENc89jjF PAa+phoA/jrDqIrl/55vUMBhIQv+TP635d2iCTEnyFmbUcP9+gh6APoDsXalVd2c OGxQtSC+TF8PkZMn1TLkJKAjVxr+xx40AgAKCRBRcisI/kdFotiNAQC/DcKWVMyL b1VZiQCM2LeR5Xkkg6MYSC4hogrDgnP27AEAy0kbR3h8vCU8dpoIAxK9Tyh6V9Uj MjjY4o0UrxZTcAE= =eOUW -----END PGP SIGNATURE----- --=-=-=-- From unknown Sun Jun 15 08:19:55 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 05 Mar 2025 12:24:18 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator