Menu

#7 Use gzip --no-name in manual compression for reproducible builds

Unstable (example)
closed-accepted
None
5
2020-02-10
2019-05-14
John Boehr
No

I'm looking into build reproducibility issues in NixOS [0] and noticed that the manual is gzipped without the --no-name argument [1]. I was wondering if you would be interested in fixing this upstream. I've attached a patch for convenience.

[0] https://r13y.com/diff/3556a880c84dffe75e31abf8f2ed8cd843ca3c2bc74a049cab0682058719436e-717c6d46e4836d2fd80c57d875dba51a6042c8e7ef5cbb25a54337176273d408.html
[1] https://wiki.debian.org/ReproducibleBuilds/TimestampsInGzipHeaders

1 Attachments

Discussion

  • Henrik Carlqvist

    Thanks for your patch! I wasn't even aware that gzip by default put a timestamp in compressed data, it seems as if bzip2 and xz does not. Your patch has been applied to the svn repo, however I do not know which year next official release will be.

     
    • Bernhard M. Wiedemann

      Indeed, bzip2 and xz never did that. And gzip-1.9 even stopped embedding timestamps for pipes, because that made tar cz output unreproducible.

       
  • Henrik Carlqvist

    • status: open --> closed-accepted
     

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.