Bug ID 1134568
Summary packages do not build reproducibly from zip file
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware All
OS openSUSE Factory
Status CONFIRMED
Severity Normal
Priority P5 - None
Component Development
Assignee bwiedemann@suse.com
Reporter bwiedemann@suse.com
QA Contact qa-bugs@suse.de
Blocks 1081754
Found By Development
Blocker ---

Background: https://reproducible-builds.org/

Some packages include zip files.
Zip files often suffer from 2 sources of non-determinism:

1) filesystem readdir order during recursion (bug 1041090)
2) embedded mtime/atime/ctime values (bug 1047218)


1) can be avoided by calling zip with `find -type f | sort`
Or by patching the code for zip file creation as in
  https://github.com/python/cpython/pull/2263
(7z already does sorted recursion, so is good)

2) can be avoided by calling zip with -X since
  https://build.opensuse.org/request/show/700402


Another approach to fixing both issues is to have+use alternative code pathes
that use plain files in the rpm and no zip


Example fixes:
https://build.opensuse.org/request/show/701063 fs-uae
https://github.com/Warzone2100/warzone2100/pull/98
https://github.com/sirjuddington/SLADE/pull/892
https://gitlab.com/tista500/plata-theme/merge_requests/3


You are receiving this mail because: