New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create more reproducible .zip files #182

Open
wants to merge 1 commit into
base: master
from

Conversation

Projects
None yet
1 participant
@bmwiedemann

bmwiedemann commented Sep 2, 2018

While working on reproducible builds for openSUSE, I found that
the fs-uae.dat in our package varied for every build.

Therefore I propose this patch to
Create more reproducible .zip files
avoid indeterministic filesystem order
and use -X to omit extended attributes from zip file
to help make fs-uae package build reproducible

See https://reproducible-builds.org/ for why this is good.

One remaining issue is with mtimes that also get embedded into the zip.

touch -d@$CONSTANT can help there (but only with GNU touch).

or touch -r $REFERENCEFILE (works with GNU touch and BSD touch)

or we post-process it in our package build process with strip-nondeterminism -t zip

Create more reproducible .zip files
avoid indeterministic filesystem order
and use -X to omit extended attributes from zip file
to help make fs-uae package build reproducible

See https://reproducible-builds.org/ for why this is good.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment