Date: Mon, 9 Dec 2024 11:35:01 -0500 From: Ed Maste <emaste@freebsd.org> To: Pat Maddox <pat@patmaddox.com> Cc: freebsd-hackers@freebsd.org Subject: Re: Reproducible builds: are release tarballs a part of it? Message-ID: <CAPyFy2DHfxfbwbe7ngv%2Br8VjZmSMRq9Azuq7yzhPcdoX5bwjYQ@mail.gmail.com> In-Reply-To: <3388409d-479d-4ef0-a8e4-38144a96d9c5@app.fastmail.com> References: <3388409d-479d-4ef0-a8e4-38144a96d9c5@app.fastmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 9 Dec 2024 at 06:08, Pat Maddox <pat@patmaddox.com> wrote: > > I am trying to reproduce https://download.freebsd.org/releases/amd64/14.2-RELEASE/MANIFEST from source. Is that possible? > > As part of this effort, I am having trouble reproducing base.txz across any two builds at all - much less the published one. Thanks for submitting PR283214. It looks like this indeed is due to directory contents being returned in an arbitrary order, and bsdtar's lack of an option to sort them. GNU sort supports --sort=name to address this issue. There's a prototype patch from 2015 to sort directory contents (without an option): https://github.com/libarchive/libarchive/issues/602 As Colin pointed out in PR283214 we can (and should) address this in the short term by using find and sort, but I still would like to see this supported directly in bsdtar.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAPyFy2DHfxfbwbe7ngv%2Br8VjZmSMRq9Azuq7yzhPcdoX5bwjYQ>