Bug ID | 1134568 |
---|---|
Summary | packages do not build reproducibly from zip file |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | All |
OS | openSUSE Factory |
Status | CONFIRMED |
Severity | Normal |
Priority | P5 - None |
Component | Development |
Assignee | bwiedemann@suse.com |
Reporter | bwiedemann@suse.com |
QA Contact | qa-bugs@suse.de |
Blocks | 1081754 |
Found By | Development |
Blocker | --- |
Background: https://reproducible-builds.org/ Some packages include zip files. Zip files often suffer from 2 sources of non-determinism: 1) filesystem readdir order during recursion (bug 1041090) 2) embedded mtime/atime/ctime values (bug 1047218) 1) can be avoided by calling zip with `find -type f | sort` Or by patching the code for zip file creation as in https://github.com/python/cpython/pull/2263 (7z already does sorted recursion, so is good) 2) can be avoided by calling zip with -X since https://build.opensuse.org/request/show/700402 Another approach to fixing both issues is to have+use alternative code pathes that use plain files in the rpm and no zip Example fixes: https://build.opensuse.org/request/show/701063 fs-uae https://github.com/Warzone2100/warzone2100/pull/98 https://github.com/sirjuddington/SLADE/pull/892 https://gitlab.com/tista500/plata-theme/merge_requests/3