Fail to build reproducibly
| Task Info (Flyspray) | |
|---|---|
| Opened By | Sebastien Duthil (duthils) |
| Task ID | 76138 |
| Type | Bug Report |
| Project | Community Packages |
| Category | Packages: Multilib |
| Version | None |
| OS | All |
| Opened | 2022-10-07 18:54:05 UTC |
| Status | Assigned |
| Assignee | Felix Yan (felixonmars) |
Details
Description: The package cannot be built reproducibly: the library binary includes the date of the build.
The reproducibility patch for keyutils is working correctly: https://github.com/archlinux/svntogit-packages/blob/packages/keyutils/trunk/reproducible.patch. I guess it can be reused for lib32-keyutils.
Additional info:
- lib32-keyutils = 1.6.3-1
- The diffoscope output between two builds at different dates: https://tests.reproducible-builds.org/archlinux/multilib/lib32-keyutils/lib32-keyutils-1.6.3-1-x86_64.pkg.tar.zst.html
Steps to reproduce:
- Run makepkg
- Run tar xf lib32-keyutils-1.6.3-1-x86_64.pkg.tar.zst usr/lib32/libkeyutils.so.1.10 --to-stdout | strings --all --bytes=8 | grep 2022