From unknown Fri Aug 15 14:15:31 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#79170 <79170@debbugs.gnu.org> To: bug#79170 <79170@debbugs.gnu.org> Subject: Status: Please make amhello-1.0.tar.gz reproducible Reply-To: bug#79170 <79170@debbugs.gnu.org> Date: Fri, 15 Aug 2025 21:15:31 +0000 retitle 79170 Please make amhello-1.0.tar.gz reproducible reassign 79170 automake submitter 79170 Jelle van der Waa severity 79170 normal thanks From debbugs-submit-bounces@debbugs.gnu.org Mon Aug 04 16:52:15 2025 Received: (at submit) by debbugs.gnu.org; 4 Aug 2025 20:52:15 +0000 Received: from localhost ([127.0.0.1]:52811 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1uj2AH-0002n6-4P for submit@debbugs.gnu.org; Mon, 04 Aug 2025 16:52:15 -0400 Received: from lists.gnu.org ([2001:470:142::17]:60256) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1uiwux-0003CU-EP for submit@debbugs.gnu.org; Mon, 04 Aug 2025 11:16:07 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uiwun-0000gJ-OQ for bug-automake@gnu.org; Mon, 04 Aug 2025 11:15:55 -0400 Received: from fout-b7-smtp.messagingengine.com ([202.12.124.150]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1uiwul-0000XF-Fw for bug-automake@gnu.org; Mon, 04 Aug 2025 11:15:53 -0400 Received: from phl-compute-09.internal (phl-compute-09.phl.internal [10.202.2.49]) by mailfout.stl.internal (Postfix) with ESMTP id 2ACCA1D00151 for ; Mon, 4 Aug 2025 11:15:45 -0400 (EDT) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-09.internal (MEProxy); Mon, 04 Aug 2025 11:15:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=vdwaa.nl; h=cc :content-transfer-encoding:content-type:content-type:date:date :from:from:in-reply-to:message-id:mime-version:reply-to:subject :subject:to:to; s=fm1; t=1754320545; x=1754406945; bh=XlQvuubExM HyRxjwjzc55ZIcOkHeeuX1gODTwKyXQyw=; b=IDGdOtQWrWG14ZqkwAREUQSAvi 46h3ACn5p3iFrq2kdjj1jtsVCMXtDi+ekMf0AfMCJWa2bm9g1pPuY2lh7e0gsp7i JunBI1PhZecvbJcQDT8WosmkTz7rN3dHlAyZ1TDl8LnFZ3FRRwu2r5HqqZqfUG+4 ByjrSOfQ1VrLiK+gUHCHxMNnXc9SHH0TKLzKs3mRfU1ZTIks5s+CLSb+2TH0DyyS qu/FVXVo6IRxeW6BQYcG9VeU/eIFFNMDtlQmSwcUrpOWzqu/9lZf4y43XL86KiPD N1gMCAvDgkKwF/Cf3ntWczuGtxXCi5TC3AmFXjCE8RLxGW6gPS4vBaXUFCOQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :content-type:date:date:feedback-id:feedback-id:from:from :in-reply-to:message-id:mime-version:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1754320545; x=1754406945; bh=XlQvuubExMHyRxjwjzc55ZIcOkHeeuX1gOD TwKyXQyw=; b=GaxQjoB+q6pJXiLwLt3tPwiGQyWD2psUTkL+n0K0S8yy5aJ//Aw paavCSq+T/t8b8tIofbBd9ON9SxkCcRPP8f/UYGa6kpconIUQ65zlbZ5ndyMhEa5 gmbVoaqIm3wtHpMcAo9c4tm6IN1UQAWn86ORr2E40UIDGwoR9ff1PbLHnz9UzNHj h8UJy/mhRYkY1v+5fV1MMU686rVTWGzj4R3fyrEn/UDoUfoD1KxVTHU/0TSBmi2e RBZvTTLuSl3O4QV+U5v8e39kR46Nyj3fAirKVTyEqgJTtDe3N5XPV5uQhSEZQWqT T8GuOTz+MTQJ9yEjEAy+M04AKRNrmX0Do/g== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeeffedrtdefgdduuddviedvucetufdoteggodetrf dotffvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfurfetoffkrfgpnffqhgenuceu rghilhhouhhtmecufedttdenucenucfjughrpefkffggfgfvhffutgfgsehtjeertddtvd ejnecuhfhrohhmpeflvghllhgvuchvrghnucguvghrucghrggruceojhgvlhhlvgesvhgu figrrgdrnhhlqeenucggtffrrghtthgvrhhnpeeliefhteetveelvdeigffhffdvleelvd eivdegtddvtdfhvefgleevleevfefggeenucffohhmrghinheprghrtghhlhhinhhugidr ohhrghdprhgvphhrohguuhgtihgslhgvqdgsuhhilhgushdrohhrghenucevlhhushhtvg hrufhiiigvpedtnecurfgrrhgrmhepmhgrihhlfhhrohhmpehjvghllhgvsehvugifrggr rdhnlhdpnhgspghrtghpthhtohepuddpmhhouggvpehsmhhtphhouhhtpdhrtghpthhtoh epsghughdqrghuthhomhgrkhgvsehgnhhurdhorhhg X-ME-Proxy: Feedback-ID: i2d0446dd:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA for ; Mon, 4 Aug 2025 11:15:44 -0400 (EDT) Message-ID: Date: Mon, 4 Aug 2025 17:15:42 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: bug-automake@gnu.org Content-Language: en-US From: Jelle van der Waa Subject: Please make amhello-1.0.tar.gz reproducible Autocrypt: addr=jelle@vdwaa.nl; keydata= xsBNBE6QLAIBCAC3O6LmF+GKvOh7IV00TG+EKAQHAwjESnHGJOW58lKK7eAYn62ZM1uy0+6h yCMu5PD7+ND6U1gcgTTHYwNK8AaJt7yY4FRssgdcJk59uJBwROZtllotClJ893CuB6Wgr68b 07gIRbENYrB8rEoGfpUG//8/ep7sY8PS03jnFb4ll6mPlUE2oQVdYOlXgF4f9qkkIi4SQeE2 MTuERaOrDuUNDlroJ7Yfx3J/rL5Qjn578/TKCAxg0pns6VIA/P9spRGmLhT4zP+OxZXeSZme IxcwFdJJXHr4oGaZvqe1yHlMmKR98rrIfPWhkw2Ls/XIZIxf6prT0XyczbzBnC2y1JyNABEB AAHNIkplbGxlIHZhbiBkZXIgV2FhIDxqZWxsZUB2ZHdhYS5ubD7CwHsEEwECACUCGwMGCwkI BwMCBhUIAgkKCwQWAgMBAh4BAheABQJUX8WhAhkBAAoJEMBghjN8UHc+mFwH/jjN+Qob4O36 YiieajRwVLGuYdUDt9Z655oQYU8V4qbWf2tjUtqTYXrxLnaY6xQoYouRz9yFbh9dIKZb67ir 7AeVgCOtWVesGxAlGH6EY5JBZcsN0v0ScsivqQAv/Mv+4HK+XM57YlyRagD8tkprYskioWHg OwQfXAO6nlm4BJHWO9bHJUMgiGs7I190IKQG7iLBnJuGjsOFuy5KTLpnv+w7twmz0H+pkUPe jVHfJlJWdN4v1PigpgpjOR6ZepSIggMk7dHsa6GNLUOzi61yYVFe60+EGXhwyJIqSt56a4oR jMUcXaOugGr+JwC8Eq7Pg2+aFk+8fbe0oUzZJucHGnDOwE0ETpAsAgEIAK4Usb7B00WRxCZG HtM973F7V4OhOKv4kZKduxtu71bVUZsTuzn4h+m8guJ51uY/I2icUrN9gJG5aEzRqPuQi2L7 KmZUjs3pscZWgUgiT8UZFDR6RuQ4k3CcWobsRCjYZdSblSZ8ccrLJE7xSbwKMXjAh2PEiaQT lS6wQbn6mHv4y3H9QVHs7+jXbmfHCxnVcwLqRmpuegSmezDaL5TlSc102voiXinhrWEZUvAB KDh6VuJ/60Y6zelCXVsEjRaApz90iXY1nifLhkHM8B2wG7Pum3V3X0Y0QTVD+z3EL1iq5mFu epKp//IOeeJN5iwHcRSJGy2s1oOzjRDyPv6v1AUAEQEAAcLAXwQYAQIACQUCTpAsAgIbDAAK CRDAYIYzfFB3PvDuB/0dI13hSYHW27c2Rq8BaGbIhXYYETtPD5B25/P1JJ5OQZkPmVq+vSHw uzUaDZHy3ZcwE+xFXzlkwXGdWos07JUGo74zV3HfeZxVEPv0HB9ACqQVU/JKjLZNj2SfhgzL 4F+O4Zgdsf0YaZG09F5PbMvbhoCZLfAaKWz/4fLEfhrDJLhrphUyPDXosn0UxPkDv0iiixn4 V+bEZ5/wd8dRWi58R/iND+gRGsBREm5SpzdhnsarwoX6YdsQ449379enDNUN7jV4C3Gkon2s VwI2ZZbS10cY8rFSAV/CJA2E9daRoz40DI0tgXgLBAVhy7y5HWZJsDZexU0HFKJfkDi7RUPj Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Received-SPF: pass client-ip=202.12.124.150; envelope-from=jelle@vdwaa.nl; helo=fout-b7-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.7 (/) X-Debbugs-Envelope-To: submit X-Mailman-Approved-At: Mon, 04 Aug 2025 16:52:12 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.3 (/) In Arch Linux our automake package includes /usr/share/doc/automake/amhello-1.0.tar.gz. When we rebuild this package using our rebuilder to check for reproduciblity the uid/gid and timestamps are not normalized meaning they vary per rebuild making the package non-reproducible. [1] [2] The owner/guid could be set --owner=root:0 --group=root:0 and to get rid of the timestamp --mtime='@0' (Or alternatively a fixed timestamp which can be set via SOURCE_DATE_EPOCH). Alternatively the timestamp could be excluded by hardcoding the tar format to ustar which omits timestamps. [1] https://reproducible.archlinux.org [2] https://reproducible-builds.org/ From debbugs-submit-bounces@debbugs.gnu.org Tue Aug 05 18:14:28 2025 Received: (at 79170) by debbugs.gnu.org; 5 Aug 2025 22:14:28 +0000 Received: from localhost ([127.0.0.1]:57182 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1ujPvQ-0000vt-9v for submit@debbugs.gnu.org; Tue, 05 Aug 2025 18:14:28 -0400 Received: from frenzy.freefriends.org ([198.99.81.75]:43788 helo=freefriends.org) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1ujPvO-0000vg-0O for 79170@debbugs.gnu.org; Tue, 05 Aug 2025 18:14:27 -0400 X-Envelope-From: karl@freefriends.org Received: from freefriends.org (localhost [127.0.0.1]) by freefriends.org (8.16.1/8.16.1) with ESMTPS id 575MEOqG059867 (version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384 bits=256 verify=NOT); Tue, 5 Aug 2025 16:14:24 -0600 Received: (from apache@localhost) by freefriends.org (8.16.1/8.14.7/Submit) id 575MEN6F059860; Tue, 5 Aug 2025 16:14:23 -0600 Date: Tue, 5 Aug 2025 16:14:23 -0600 Message-Id: <202508052214.575MEN6F059860@freefriends.org> From: Karl Berry To: jelle@vdwaa.nl Subject: Re: bug#79170: Please make amhello-1.0.tar.gz reproducible In-Reply-To: X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: 79170 Cc: 79170@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Hi Jelle - thanks for the report. The owner/guid could be set --owner=root:0 --group=root:0 OK. and to get rid of the timestamp --mtime='@0' (Or alternatively a fixed timestamp which can be set via SOURCE_DATE_EPOCH). Do you have a specific suggestion for how to use SOURCE_DATE_EPOCH here? I don't want to fake the time when all the files were created to 1970 or anything else. Having real mtimes seems useful. Alternatively the timestamp could be excluded by hardcoding the tar format to ustar which omits timestamps. 1) What timestamp does ustar omit? AFAIK, every tar format stores mtimes (and it's a good thing that they do). 2) In the latest automake release, I believe amhello already is ustar, because we changed automake's default to be that in 1.18. $ zcat /.../latest/.../gnu/share/doc/automake/amhello-1.0.tar.gz | file - /dev/stdin: POSIX tar archive Thanks, Karl