Package: zip
Version: 3.0-16
Severity: normal
X-Debbugs-Cc: [email protected]
Dear Maintainer,
it seems that zip ignores the environment variable SOURCE_DATE_EPOCH
defined by https://reproducible-builds.org/ (see
https://reproducible-builds.org/specs/source-date-epoch/ and
https://reproducible-builds.org/docs/source-date-epoch/ for further
details).
While there are many other tools for creating reproducible zip archives,
zip is ubiquitous, available on many systems, and thus used by default
by many programs/scripts/...
It would be thus beneficial if zip, especially with the option -X, would
ignore the file timestamps and creates a reproducible archive when
SOURCE_DATE_EPOCH is defined.
This would help to make all tools that use zip internally to be a little
more reproducible!
-- System Information:
Debian Release: forky/sid
APT prefers testing
APT policy: (400, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 7.2.6+deb14-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages zip depends on:
ii libbz2-1.0 1.0.8-6+b2
ii libc6 2.43-5
Versions of packages zip recommends:
ii unzip 6.0-31
zip suggests no packages.
-- no debconf information
