GNU bug report logs - #79170
Please make amhello-1.0.tar.gz reproducible

Previous Next

Package: automake;

Reported by: Jelle van der Waa <jelle <at> vdwaa.nl>

Date: Mon, 4 Aug 2025 20:53:02 UTC

Severity: normal

Full log


Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Jelle van der Waa <jelle <at> vdwaa.nl>
To: bug-automake <at> gnu.org
Subject: Please make amhello-1.0.tar.gz reproducible
Date: Mon, 4 Aug 2025 17:15:42 +0200
In Arch Linux our automake package includes 
/usr/share/doc/automake/amhello-1.0.tar.gz. When we rebuild this package 
using our rebuilder to check for reproduciblity the uid/gid and 
timestamps are not normalized meaning they vary per rebuild making the 
package non-reproducible. [1] [2]

The owner/guid could be set --owner=root:0 --group=root:0
 and to get rid of the timestamp --mtime='@0' (Or alternatively a fixed 
timestamp which can be set via SOURCE_DATE_EPOCH).

Alternatively the timestamp could be excluded by hardcoding the tar 
format to ustar which omits timestamps.

[1] https://reproducible.archlinux.org
[2] https://reproducible-builds.org/




This bug report was last modified 9 days ago.

Previous Next


GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.