http://bugzilla.opensuse.org/show_bug.cgi?id=1134568 Bug ID: 1134568 Summary: packages do not build reproducibly from zip file Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: All OS: openSUSE Factory Status: CONFIRMED Severity: Normal Priority: P5 - None Component: Development Assignee: bwiedemann@suse.com Reporter: bwiedemann@suse.com QA Contact: qa-bugs@suse.de Blocks: 1081754 Found By: Development Blocker: --- Background: https://reproducible-builds.org/ Some packages include zip files. Zip files often suffer from 2 sources of non-determinism: 1) filesystem readdir order during recursion (bug 1041090) 2) embedded mtime/atime/ctime values (bug 1047218) 1) can be avoided by calling zip with `find -type f | sort` Or by patching the code for zip file creation as in https://github.com/python/cpython/pull/2263 (7z already does sorted recursion, so is good) 2) can be avoided by calling zip with -X since https://build.opensuse.org/request/show/700402 Another approach to fixing both issues is to have+use alternative code pathes that use plain files in the rpm and no zip Example fixes: https://build.opensuse.org/request/show/701063 fs-uae https://github.com/Warzone2100/warzone2100/pull/98 https://github.com/sirjuddington/SLADE/pull/892 https://gitlab.com/tista500/plata-theme/merge_requests/3 -- You are receiving this mail because: You are on the CC list for the bug.