• Re: (java) Builds not reproducible on armhf

    From Mechtilde Stehmann@21:1/5 to Vagrant Cascadian on Sun Aug 25 13:30:01 2024
    To: debian-arm@lists.debian.org
    Copy: rb-general@lists.reproducible-builds.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------OAbeC70yRDZo0HotSH7Wrtu6
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGVsbG8gVmFncmFudCwNCg0KaW4gdGhlIG1lYW50aW1lIEkgZGlkIGEgYnVpbGQgYXQgYW1k YWhsLmRlYmlhbi5vcmcgYW5kIGNhbid0IHJlcHJvZHVjZSANCnRoZSBwcm9ibGVtIHRvby4N Cg0KaSBkaWQgaXQgd2l0aCB0aGlzIHBhY2thZ2UgDQpodHRwczovL3Rlc3RzLnJlcHJvZHVj aWJsZS1idWlsZHMub3JnL2RlYmlhbi9yYi1wa2cvdW5zdGFibGUvYXJtaGYvY3N2amRiYy5o dG1sDQoNCkRhdGVzIGFyZSAyMDIyLTA2LTA4IGFzIGV4cGVjdGVkIGFuZCBub3QgMTk3MC0w MS0wMyBhcyBkZXNjcmliZWQgYXQgDQp0ZXN0cy5yYi5vLg0KDQpUaGVyZSBhcmUgbWFueSBv dGhlciBwYWNrYWdlcyB3aXRoIHRoaXMgcHJvYmxlbSBpbiB0aGUgamF2YS10ZWFtLg0KDQpE byB5b3UgaGF2ZSBhbiBpZGVhLCBob3cgSSBjYW4gaGVscCB0byBmaXggaXQuIENhbiBJIGhh dmUgYSAodGVtcG9yYWx5KSANCmFjY2VzcyB0byByZXByb2R1Y2UgdGhlIHByb2JsZW0gYW5k IHRoZW4gbWF5YmUgdG8gZml4IGl0Lg0KDQpLaW5kIHJlZ2FyZHMNCg0KTWVjaHRpbGRlDQoN CkFtIDIxLjA1LjI0IHVtIDE5OjIwIHNjaHJpZWIgVmFncmFudCBDYXNjYWRpYW46DQo+IE9u IDIwMjQtMDUtMjAsIE1lY2h0aWxkZSBTdGVobWFubiB3cm90ZToNCj4+IEkgd2FudCB0byBj bGVhbiB1cCBteSBKYXZhIHBhY2thZ2VzLg0KPj4NCj4+IFRoZXJlIGFyZSBzZXZlcmFsIHdp dGggRlRCUi4gSSBmb3VuZCB0aGF0IHRoZSBkYXkgb2YgdGhlICoucG9tcyBzIGEgZGF0ZQ0K Pj4gZnJvbSAxOTcwLg0KPj4NCj4+IGZvciBleGFtcGxlIHRoZXkgYXJlIHRoZSBwYWNrYWdl cw0KPj4NCj4+IHZpbm5pZQ0KPiANCj4gTG9va2luZyBhdCB0aGUgaGlzdG9yeSBmb3Igdmlu bmllOg0KPiANCj4gICAgaHR0cHM6Ly90ZXN0cy5yZXByb2R1Y2libGUtYnVpbGRzLm9yZy9k ZWJpYW4vaGlzdG9yeS9hcm1oZi92aW5uaWUuaHRtbA0KPiANCj4gSXQgaXMgb25seSB2ZXJ5 IHJlY2VudGx5IHRoYXQgdGhpcyBzdGFydGVkIGhhcHBlbmluZyAoMjAyNC0wNS0wNCkNCj4g d2l0aG91dCBzb3VyY2UgY2hhbmdlcyBpbiB2aW5uaWUgaXRzZWxmLCBzbyBJIHdvdWxkIHN1 c3BlY3Qgc29tZSBjaGFuZ2UNCj4gaW4gdGhlIHRvb2xjaGFpbiB1c2VkIHRvIHByb2R1Y2Ug dGhlIC5wb20gZmlsZXM/DQo+IA0KPiBjb21tb25zLWVtYWlsIGlzIHNpbWlsYXIsIGFsdGhv dWdoIHN0YXJ0aW5nIDIwMjQtMDQtMDQ6DQo+IA0KPiAgICBodHRwczovL3Rlc3RzLnJlcHJv ZHVjaWJsZS1idWlsZHMub3JnL2RlYmlhbi9oaXN0b3J5L2FybWhmL2NvbW1vbnMtZW1haWwu aHRtbA0KPiANCj4gZXotdmNhcmQgaXMgc2ltaWxhciB0b28sIHN0YXJ0aW5nIDIwMjQtMDQt MjA6DQo+IA0KPiAgICBodHRwczovL3Rlc3RzLnJlcHJvZHVjaWJsZS1idWlsZHMub3JnL2Rl Ymlhbi9yYi1wa2cvdHJpeGllL2FybWhmL2RpZmZvc2NvcGUtcmVzdWx0cy9lei12Y2FyZC5o dG1sDQo+IA0KPiBBbHRob3VnaCBzb21lIG9mIHRob3NlIGJ1aWxkcyBhbHNvIGhhdmUgZGlm ZmVyZW5jZXMgaW4gc29tZSB4eg0KPiBjb250ZW50cy4uLiBtaWdodCBqdXN0IGJlIHJlbGF0 ZWQgdG8gdGhlIHRpbWVzdGFtcCBkaWZmZXJlbmNlcy4NCj4gDQo+IA0KPiBXaWxkIGh1bmNo IGlzIG9uZSBidWlsZCBpcyBydW4gb24gYSA2NC1iaXQga2VybmVsICh3aXRob3V0IGEgbGlu dXgzMg0KPiBwZXJzb25hbGl0eSkgYW5kIG9uZSBidWlsZCBvbiBhIDMyLWJpdCBrZXJuZWwu Li4gdGhhdCBpcyBvbmUgb2YgdGhlIG1haW4NCj4gZGlmZmVyZW5jZXMgYmV0d2VlbiB0aGVz ZSBhcm1oZiB0ZXN0IGJ1aWxkcyBhbmQgYnVpbGRzIG9uIG90aGVyDQo+IGFyY2hpdGVjdHVy ZXMsIHdoZXJlIHRoaXMgZG9lcyBub3Qgc2VlbSB0byBoYXBwZW4uLi4NCj4gDQo+IA0KPiBs aXZlIHdlbGwsDQo+ICAgIHZhZ3JhbnQNCg0KLS0gDQpNZWNodGlsZGUgU3RlaG1hbm4NCiMj IERlYmlhbiBEZXZlbG9wZXINCiMjIFBHUCBlbmNyeXB0aW9uIHdlbGNvbWUNCiMjIEYwRTMg N0YzRCBDODdBIDQ5OTggMjg5OSAgMzlFNyBGMjg3IDdCQkEgMTQxQSBBRDdGDQo=

    --------------OAbeC70yRDZo0HotSH7Wrtu6--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE8ON/Pch6SZgomTnn8od7uhQarX8FAmbLFMsACgkQ8od7uhQa rX9xbxAAvmNNOXMTJ5vF/vgzEjI+OB8zVp0kwjgYcIkOQaf33jCPCXtzIf3aXjc5 tx65pCQ2omNq9seH4ExFxVDGxIA4eGNBTxI5jHWRIZ8MNkkydF3+Ns834izATpW8 V5lIc8E7WNNLnXqEfd5IOoiYB/VADLMB3m0gK2nHwNlASYKkzb0p6CeQBW/vYbSe qyeaJEAaTLweCxqX3zap1ngbZ2DEMPoRoZvQfVTFr908d1M638BW7Fa0gGg/b4vG 2n3Lh7FjoCM8fle2ic9KzYGtAwsORJXFgHjgzFvj5tfU4++JrVXAQc/nOZ7UZ0W/ eKuT8oMFv5a4RrzgJl3ZrHoR8J92rYqLddByy+M7IOb9JpvV3ruEMIOtWECVWEh9 T66DoAz0rOiVw0ISPAxHSdI1Tiez+mwcsgAdaHpDOGjGqZhlJwtbVgTIlqPhBWzt KJXrIIrRaTDixwPp2ypv0RHHuNHtfpbuNL82NOGSH/d+nvJhwH2tl3Y54UDv1LjV rqLvCjnmATXfxey7dwaGZCmVyKeS8PZPLJm1ZKrNfBAEnPl0Qbkcc2SUT0WS0EUd LXdvzr98jgMSWki7dS0pHBpW+1112pMqIAQnkYaO6/ACgjPtooT5lwpkQwPgy/NE nPh9LpuJyhhOROZEM1m0qox6W6BlREMEET+7xxcbOiF5gc5R+hc=
    =CHV8
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to All on Mon Aug 26 00:30:01 2024
    [..]
    Dates are 2022-06-08 as expected and not 1970-01-03 as described
    at tests.rb.o.
    [..]
    https://tests.reproducible-builds.org/debian/history/armhf/vinnie.html

    I briefly looked at vinnie. Given it is arch:all, I kinda expect it
    to produce the "same" deb regardless of the arch it is built on. libvinnie-java_2.0.2-3_all.deb in the archive was built on
    x86-grnet-03, so on amd64. It does -not- contain a 1970-x-y
    timestamp.

    I'll note that fakeroot was probably broken on armel, armhf since
    the t64 migration until mid-August.
    Is fakeroot involved in any way? If so, it might make sense to
    discard any results from that period.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Mechtilde Stehmann@21:1/5 to Chris Hofstaedtler on Mon Aug 26 06:50:01 2024
    To: debian-arm@lists.debian.org
    Copy: vagrant@reproducible-builds.org (Vagrant Cascadian)
    Copy: rb-general@lists.reproducible-builds.org
    Copy: mechtilde@debian.org (Mechtilde Stehmann)

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------3t3U17yckX2DJPwdOjvlerAL
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGVsbG8gQ2hyaXMsDQoNCkFtIDI2LjA4LjI0IHVtIDAwOjA1IHNjaHJpZWIgQ2hyaXMgSG9m c3RhZWR0bGVyOg0KPiBbLi5dDQo+PiBEYXRlcyBhcmUgMjAyMi0wNi0wOCBhcyBleHBlY3Rl ZCBhbmQgbm90IDE5NzAtMDEtMDMgYXMgZGVzY3JpYmVkDQo+PiBhdCB0ZXN0cy5yYi5vLg0K PiBbLi5dDQo+Pj4gICAgaHR0cHM6Ly90ZXN0cy5yZXByb2R1Y2libGUtYnVpbGRzLm9yZy9k ZWJpYW4vaGlzdG9yeS9hcm1oZi92aW5uaWUuaHRtbA0KPiANCj4gSSBicmllZmx5IGxvb2tl ZCBhdCB2aW5uaWUuIEdpdmVuIGl0IGlzIGFyY2g6YWxsLCBJIGtpbmRhIGV4cGVjdCBpdA0K PiB0byBwcm9kdWNlIHRoZSAic2FtZSIgZGViIHJlZ2FyZGxlc3Mgb2YgdGhlIGFyY2ggaXQg aXMgYnVpbHQgb24uDQo+IGxpYnZpbm5pZS1qYXZhXzIuMC4yLTNfYWxsLmRlYiBpbiB0aGUg YXJjaGl2ZSB3YXMgYnVpbHQgb24NCj4geDg2LWdybmV0LTAzLCBzbyBvbiBhbWQ2NC4gSXQg ZG9lcyAtbm90LSBjb250YWluIGEgMTk3MC14LXkNCj4gdGltZXN0YW1wLg0KPiANCj4gSSds bCBub3RlIHRoYXQgZmFrZXJvb3Qgd2FzIHByb2JhYmx5IGJyb2tlbiBvbiBhcm1lbCwgYXJt aGYgc2luY2UNCj4gdGhlIHQ2NCBtaWdyYXRpb24gdW50aWwgbWlkLUF1Z3VzdC4NCj4gSXMg ZmFrZXJvb3QgaW52b2x2ZWQgaW4gYW55IHdheT8gSWYgc28sIGl0IG1pZ2h0IG1ha2Ugc2Vu c2UgdG8NCj4gZGlzY2FyZCBhbnkgcmVzdWx0cyBmcm9tIHRoYXQgcGVyaW9kLg0KDQpUaGFu a3MgZm9yIHlvdXIgZXhwbGFuYXRpb25zLg0KQXJlIHRoZXJlIHBsYW5zIHRvIHJhbiB0aGUg dGVzdHMgYWdhaW4/DQoNCj4gDQo+IENocmlzDQo+IA0KDQotLSANCk1lY2h0aWxkZSBTdGVo bWFubg0KIyMgRGViaWFuIERldmVsb3Blcg0KIyMgUEdQIGVuY3J5cHRpb24gd2VsY29tZQ0K IyMgRjBFMyA3RjNEIEM4N0EgNDk5OCAyODk5ICAzOUU3IEYyODcgN0JCQSAxNDFBIEFEN0YN
    Cg==

    --------------3t3U17yckX2DJPwdOjvlerAL--

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEE8ON/Pch6SZgomTnn8od7uhQarX8FAmbMCKsACgkQ8od7uhQa rX9MCBAAipKyUZrb5PTk+aAHBaxWDcAD8e0z2xxKJ+xvJCeI5pIv2p22FSCoVzd7 zVJpz2Vy+G/0BsawwYv+GQIoJBpwkjERPXM0c3FSmQWC5J6TDtJSV2+92QfHhcSR ZCdclgpr6Qk1W5gE2MtaaTgBiNfI8OSGThC/9j2mtckKBAXfupRkjiAX29qWCSYl CnYmWeZFpPOKI1DNBVnIqmNHpKHj8dWpj1SiMLHaibfwnTBLIxqvUaWJaU7gKr0p TnJOtGV4H0IeahArPozKpgeeiVVSUiEIy8N4pQinyghIKBgoHNR2a21l1N764EbY KA25RThTJnoSHD1+pykHhAJ6j8t1tlbamYWjsC87kpFp/YoW4qQwaZd+szRK1VhJ avpzKcx8nn7apD4bztHhxsEBZY4wROIpjgbcVXn9baEEd0GcSdWKddSRqmLDxXcy gj5bLgldN3zeXaS5G+ZaaCZ3DxpVaukNT9ztF2sv2xGGnkKgu3PUk5oGsNCka/WM RqdvrUKTTh6pZweeEjF8djaoPcAPB4P21DNTP6bSkoo41lF+SY1v/zgkwISUGzfe 3Hhf1chPIQUXZsm3VU4FiHNYnA3dl2a/Ci1ZvmxC+HlvMDcQbM3YNrI1piJTM8rT l+0qi/XoqWwmKRva2+TJ+glgOI0sQ2xsad1xFn7DrdVV6iZGnrA=
    =m3V1
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Holger Levsen@21:1/5 to Mechtilde Stehmann on Mon Aug 26 09:00:01 2024
    On Mon, Aug 26, 2024 at 06:46:35AM +0200, Mechtilde Stehmann wrote:
    I'll note that fakeroot was probably broken on armel, armhf since
    the t64 migration until mid-August.
    Is fakeroot involved in any way? If so, it might make sense to
    discard any results from that period.
    Thanks for your explanations.
    Are there plans to ran the tests again?

    normally that happens automatically, but the armhf builders have been very
    sad for at least a week, but rather more like 4 weeks, and mid August ist
    like a week ago.

    https://tests.reproducible-builds.org/debian/index_performance.html shows
    zero armhf builds in the last week and 245 per day in the last 4 weeks.


    --
    cheers,
    Holger

    ⢀⣴⠾⠻⢶⣦⠀
    ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
    ⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
    ⠈⠳⣄

    These heat waves aren’t tragedies, they’re crimes. The fossil fuel industry knew decades ago that this is what their pollution was causing, so they
    spent billions to lie to the public and block climate action.

    -----BEGIN PGP SIGNATURE-----

    iQIzBAABCgAdFiEEuL9UE3sJ01zwJv6dCRq4VgaaqhwFAmbMJfAACgkQCRq4Vgaa qhymLg/+OF93bOeF0J/YyQrQQLT6phUam2cckgS7b0lVzTstvwXAMp+awLyLG9jO AnanmbfDkyIh3Yj/uwB67NzZv2HTGlo6K9jtpswGjx+JhR2FnrOiWz2hucGxDvQS ENU70xJNXhBPyXuMYxD5ODZStBwsi0xvzZZPCNzvZJnaONM1Y4NP1M0d5aGu4BUP 3UGBrw7WrPbtyBgivK1E4gNpBWBc8KFBthK0LGLtEvDH1AIFWotptH9wRExMsq2M rUdQ/uMFwdYmRbAXxPhwJmgUKpmOmgk7sMfZp2rySKKjY+lKM2MdvxHm52fDFOew 0TQIdXmpPd6d16UwxXPK0PfBQdxRyNNjHOiC98K439hsN8fwDuVvrO/LCQjk3J4T HZl5ErxCKNzDqSb7BcK3X7uKWE1PgIhC6lZ0knjYDQJjndPugYZyE2Fl5kCVazE3 Eg7mXhou6GBFH8prql8kVxY0dShGV