Re: Minimal Reproducible Arch Linux (4(+2) unreproducible, January 2025 status update)

[Bernhard M. Wiedemann via rb-general]

On 22/01/2025 12.50, kpcyrd wrote:

## linux

This has been discussed on this list a few times recently (there's progress on the LKML tho \o/). https://lore.kernel.org/lkml/20250120-module-hashes-v2-0- ba1184e27...@weissschuh.net/

In my https://build.opensuse.org/package/show/home:bmwiedemann:reproducible:distribution:ring1/kernel-source I added a fixed pubkey - that was enough so it does not create a random tmp keypair.

I also had to do

sed -i -e 's/^parallel=.*/parallel=1/' \

Documentation/sphinx/parallel-wrapper.sh # avoid parallelism in sphinx for deterministic results = https://github.com/sphinx-doc/sphinx/issues/6714

for kernel-docs

## pam

The package contains .pdf documentation generated by 'Apache FOP' which has some `CreationDate` embedded in the first 0x90 bytes that isn't normalized through SOURCE_DATE_EPOCH. https://web.archive.org/web/20250121190809/https:// reproducible.archlinux.org/api/v0/builds/714300/diffoscope

I solved pam with 2 two patches in
https://build.opensuse.org/projects/home:bmwiedemann:reproducible:distribution:ring0/packages/xmlgraphics-fop/files/reproducible.patch
and pretty dirty
https://build.opensuse.org/projects/home:bmwiedemann:reproducible:distribution:ring0/packages/xmlgraphics-fop/files/test2.patch


Ciao
Bernhard M.

OpenPGP_signature.asc
Description: OpenPGP digital signature