[Bug 283214] Unable to reproduce release tarballs

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 09 Dec 2024 16:54:10 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=283214

--- Comment #4 from Pat Maddox <pat@patmaddox.com> ---
Yep, I was playing with find sort last night, and got that piece working. It
looks like this:

            find -s . > ${WORLDTMP}/package-${dist}-files; \
            ${TAR_CMD} cnvf - --exclude usr/lib/debug -T
${WORLDTMP}/package-${dist}-files | \

mtimes are another source of non-determinism.
https://download.freebsd.org/releases/amd64/14.2-RELEASE/kernel.txz has 338
unique timestamps in it.

It wasn't clear to me how to adjust those. I put a `touch -A` in the places I
thought it should go, but I didn't get that working - and don't know if that
would be desirable anyway.

What I can do for now is determine what transformations are needed to make two
tarballs equivalent. I suspect it's only the order and times - I can't think of
what else there would be. But I can confirm that and report back, and then
figure out what comes next.

-- 
You are receiving this mail because:
You are the assignee for the bug.