Skip to content

Fix stability of reproducible tarballs from git repos#4517

Merged
boegel merged 2 commits intoeasybuilders:5.0.xfrom
lexming:fix-repro-tar
Apr 26, 2024
Merged

Fix stability of reproducible tarballs from git repos#4517
boegel merged 2 commits intoeasybuilders:5.0.xfrom
lexming:fix-repro-tar

Conversation

@lexming
Copy link
Copy Markdown
Contributor

@lexming lexming commented Apr 26, 2024

Following some test failures with our build bots (see easybuilders/easybuild-easyconfigs#19770), I found out that the tarballs of git repos are not fully reproducible as they dependent on some local settings of the host system:

  1. resetting file modification times with touch -t depends on the local timezone
  2. some file permissions of the cloned repository depend on default directory permissions

This PR fixes both issues:

  1. reset file modification times with touch --date and using unix epoch zero
  2. always remove write permissions from group and others (follows recommendation in https://www.gnu.org/software/tar/manual/html_node/Reproducibility.html)

Copy link
Copy Markdown
Member

@boegel boegel left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@boegel boegel added this to the 5.0 milestone Apr 26, 2024
@boegel boegel merged commit 5f0ffd7 into easybuilders:5.0.x Apr 26, 2024
@lexming lexming deleted the fix-repro-tar branch April 26, 2024 16:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants