On 31/12/2018 21.44, Larry Finger wrote:
On 12/28/18 2:19 PM, Bernhard M. Wiedemann wrote:
virtualbox tar + random https://www.virtualbox.org/ticket/16854 .so files have random NT_GNU_BUILD_ID (unique build ID bitstring)
Bernhard,
Sorry that I missed your VB ticket. I have modified the openSUSE patches to the VB sources to implement your patches regarding the gzip content. In addition, I have removed all explicit references to __DATE__ and __TIME__, set NT_GNU_BUILD_ID to be fixed at 3, and changed a symbol in the Makefile for webservice that forced a rebuild.
Hi Larry, one little known fact is, that we do not need to care about __DATE__ and __TIME__ anymore, because since Leap 15.0 we have a patched rpm that sets SOURCE_DATE_EPOCH to the date/time of the last .changes entry and a patched gcc that uses SOURCE_DATE_EPOCH instead of the current time there.
These modified routines will be available whenever VB 6.0.2 hits Factory. I still have an unsolved build problem in 6.0.0, plus I never push a .0 version upstream. I hope they make the build be reproducible.
I tested Virtualization/virtualbox now: it still has a 16 byte random UUID in all .so files maybe from src/bldprogs/VBoxTpG.cpp via src/VBox/Runtime/generic/RTUuidCreate-generic.cpp RTUuidCreate via src/VBox/Runtime/common/rand/rand.cpp RTRandBytes and a varying UNIX epoch timestamp in /usr/share/virtualbox/extensions/VNC-5.2.22.vbox-extpack differs at offset '138' (POSIX tar archive (GNU)) --- /tmp/tmp.JkOuDl3Eu0/old.kv1 2019-01-04 11:16:09.723873531 +0000 +++ /tmp/tmp.JkOuDl3Eu0/new.EtL 2019-01-04 11:16:09.723873531 +0000 @@ -1,5 +1,5 @@ -00000080 30 30 30 30 30 30 30 00 31 33 34 31 33 36 33 37 |0000000.13413637| -00000090 35 32 35 00 30 31 30 35 31 30 00 20 35 00 00 00 |525.010510. 5...| +00000080 30 30 30 30 30 30 30 00 31 37 30 34 34 32 36 36 |0000000.17044266| +00000090 33 31 31 00 30 31 30 35 30 33 00 20 35 00 00 00 |311.010503. 5...| We could probably use tar's --mtime option to fix that. Thanks for your efforts there. What would be the best way to get patches upstream? Bugtracker seems to not work well. My trivial patch is still unmerged after 19 months. Ciao Bernhard M. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org