The GitHub Actions job "Tests" on airflow.git has succeeded.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
93e4e3c831aa332d0b4ff8ee1b43533f9529d59f / Jarek Potiuk <[email protected]>
Fix reproducibility of source-tarballs prepared as part of release (#36819)

The source-tarball that was supposed to be reproducible, was
"almost" reproducible. It turned out that we forgot that group
permissions are bound to change depending on the umask that is
configured in the system (because using umask is the default git
configuration when files are checked out). This means that the
packages were reproducible only if the two people who built it
had the same umask set.

Since it is unlikely that default owner umask is different than
rwx allowed, all the tools that are bound to provide reproducibility
approach it via setting the umask to clear any permissions for group
and other - this way the files in archive have only owner permissions
set.

This is what this PR does - we set the tar.umask when running the
`git archive` command to 0077 which effectively cleans all the group
and other permissions.

In this PR we also fix FutureDeprecation warning raised in newer
versions of Python where GzipFile should take keyword parameters
rather than positional ones.

(cherry picked from commit d5c0f32a87775984d156f0a3827f457808db7afc)

Report URL: https://github.com/apache/airflow/actions/runs/7547483683

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to