From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms0.migadu.com with LMTPS id kM2aGzXpBWFeVQAAgWs5BA (envelope-from ) for ; Sun, 01 Aug 2021 02:22:13 +0200 Received: from aspmx1.migadu.com ([2001:41d0:8:6d80::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id CKMkFzXpBWGJagAAbx9fmQ (envelope-from ) for ; Sun, 01 Aug 2021 00:22:13 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 84D918B74 for ; Sun, 1 Aug 2021 02:22:12 +0200 (CEST) Received: from localhost ([::1]:36710 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1m9zF4-00044Y-SV for larch@yhetil.org; Sat, 31 Jul 2021 20:22:10 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52414) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m9zEw-00044N-Gf for bug-guix@gnu.org; Sat, 31 Jul 2021 20:22:02 -0400 Received: from debbugs.gnu.org ([209.51.188.43]:51867) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1m9zEw-0003bP-8w for bug-guix@gnu.org; Sat, 31 Jul 2021 20:22:02 -0400 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1m9zEw-00084o-2M for bug-guix@gnu.org; Sat, 31 Jul 2021 20:22:02 -0400 X-Loop: help-debbugs@gnu.org Subject: bug#49801: Guix time machine provenance/manifest reproducibility issue? Resent-From: Denis 'GNUtoo' Carikli Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Sun, 01 Aug 2021 00:22:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 49801 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: 49801@debbugs.gnu.org X-Debbugs-Original-To: bug-guix@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.162777728030995 (code B ref -1); Sun, 01 Aug 2021 00:22:01 +0000 Received: (at submit) by debbugs.gnu.org; 1 Aug 2021 00:21:20 +0000 Received: from localhost ([127.0.0.1]:35180 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m9zEG-00083r-0E for submit@debbugs.gnu.org; Sat, 31 Jul 2021 20:21:20 -0400 Received: from lists.gnu.org ([209.51.188.17]:52426) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m9zED-00083j-Vo for submit@debbugs.gnu.org; Sat, 31 Jul 2021 20:21:19 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:52306) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1m9zED-00041r-Na for bug-guix@gnu.org; Sat, 31 Jul 2021 20:21:17 -0400 Received: from cyberdimension.org ([80.67.179.20]:60726 helo=gnutoo.cyberdimension.org) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_CHACHA20_POLY1305:256) (Exim 4.90_1) (envelope-from ) id 1m9zEB-0002sy-0E for bug-guix@gnu.org; Sat, 31 Jul 2021 20:21:17 -0400 Received: from gnutoo.cyberdimension.org (localhost [127.0.0.1]) by cyberdimension.org (OpenSMTPD) with ESMTP id 95098ca9 for ; Sun, 1 Aug 2021 00:15:05 +0000 (UTC) Received: from primarylaptop.localdomain (localhost.localdomain [::1]) by gnutoo.cyberdimension.org (OpenSMTPD) with ESMTP id 03c7cbbc for ; Sun, 1 Aug 2021 00:15:05 +0000 (UTC) Date: Sun, 1 Aug 2021 02:21:42 +0200 From: Denis 'GNUtoo' Carikli Message-ID: <20210801022142.2117e06e@primarylaptop.localdomain> X-Mailer: Claws Mail 4.0.0 (GTK+ 3.24.29; i686-pc-linux-gnu) MIME-Version: 1.0 Content-Type: multipart/signed; boundary="Sig_/gE7tLVvzRu9gzfBCYEJsg9g"; protocol="application/pgp-signature"; micalg=pgp-sha256 Received-SPF: pass client-ip=80.67.179.20; envelope-from=GNUtoo@cyberdimension.org; helo=gnutoo.cyberdimension.org X-Spam_score_int: -18 X-Spam_score: -1.9 X-Spam_bar: - X-Spam_report: (-1.9 / 5.0 requ) BAYES_00=-1.9, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1627777332; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:mime-version:mime-version: content-type:content-type:resent-cc:resent-from:resent-sender: resent-message-id:list-id:list-help:list-unsubscribe:list-subscribe: list-post; bh=ekQdRVTHntQ3gWr/EPpQfxaJkm9ZIkKkCsvFmCqtvWk=; b=uweA7RBYnJgBKvna6B1ZwXkXxOlZ6f7d3rdeWbda6UOqW1sRjRd1mgH2PUfVTslba6u+7F pzbfh0A8UXqNX9daR1qXM5kn0oUwIgp4hA9nhXcMd/egG1RSS6cU0D+WTz1EQcDTDswqHo AwiT4hu61Vl7kOJIx9U0EXU54y0ttGD9xtPu1OC7fzAszgnbkSfILT7bfGpH4IoTiadrgM KkWIan9dvbdodr1VZJ7FHp4uPOD9XI7OI2cZmzpNB5375oftDAxptYaoB/gg6SA2nBxkNb zelFs1iJ4dBqxim5lCoeINBV6TQU5VLJ8oFvkO6E7mGKzOR8WlmMEm00Z/3C8w== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1627777332; a=rsa-sha256; cv=none; b=Bf+sLO1ENbznbcEKIyuax4b9Qb/BAS8TqxTdd/yXIeysX81hf9wbnAShCxVAXtD9jAOLYb eq+aCEDrrS4pzEgxcnZzyNwDsdEUFz47Yln8OWjhIvqmzFYTLyblyrybbu77jWp5wXGIp7 ThSPhfRYrLR8HbgjEtSIBHzky9MhAQxX2OU7rY4jaLEXhY1YhOfy4qzVU/CV6qbaai9jrV 3ki6wGoFjww+3p0a49T198ANcq3YuVCVFV1xISbJE4LSVVZTuHJGU/KuEVNdPZH4QfHavB RxbkRgQoewvo4AV3wfw6OfW07XHVoOc5T7FVHZFGvzxUu3CxCP7aNVylsjcTVQ== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Spam-Score: -3.52 Authentication-Results: aspmx1.migadu.com; dkim=none; dmarc=none; spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 84D918B74 X-Spam-Score: -3.52 X-Migadu-Scanner: scn1.migadu.com X-TUID: i92pciUbXdKP --Sig_/gE7tLVvzRu9gzfBCYEJsg9g Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Hi, I've been trying to reproduce a tarball (sz1lkq3ryr5iv6amy6f3d2pziks27g28-tarball-pack.tar.xz) that I generated with guix pack on guix master the 28 January 2021. To build it, in January, I used the following commands: > guix pull > guix pack \ > --compression=3Dxz \ > --save-provenance \ > -RR \ > --symlink=3D/usr/local/bin/repo=3Dbin/repo \ > --symlink=3D/usr/local/bin/repo-env.sh=3Detc/profile \ > git-repo le-certs nss-certs git python-certifi That tarball is publicly available in the Replicant ftp server[1]. The extracted provenance file (named manifest) has the following content: > ;; This file was automatically generated and is for internal use only. > ;; It cannot be passed to the '--manifest' option. >=20 > (manifest > (version 3) > (packages > (("git-repo" > "2.4.1" > "out" > "/gnu/store/d4frkcdq15a7gyfjdggwg44ryi46fa2d-git-repo-2.4.1R" > (propagated-inputs ()) > (search-paths ()) > (properties > (provenance > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > (branch "master") > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > (introduction > (channel-introduction > (version 0) > (commit > "9edb3f66fd807b096b48283debdcddccfea34bad") > (signer > "BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A > 54FA"))))))) ("le-certs" > "0" > "out" > "/gnu/store/x004p4hnyy0ickg2f5msvrpszhy9hzpl-le-certs-0R" > (propagated-inputs ()) > (search-paths ()) > (properties > (provenance > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > (branch "master") > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > (introduction > (channel-introduction > (version 0) > (commit > "9edb3f66fd807b096b48283debdcddccfea34bad") > (signer > "BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A > 54FA"))))))) ("nss-certs" > "3.57" > "out" > "/gnu/store/shc8qpw1y2k7q668rx4gl6aff0wp1n6v-nss-certs-3.57R" > (propagated-inputs ()) > (search-paths ()) > (properties > (provenance > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > (branch "master") > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > (introduction > (channel-introduction > (version 0) > (commit > "9edb3f66fd807b096b48283debdcddccfea34bad") > (signer > "BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A > 54FA"))))))) ("git" > "2.30.0" > "out" > "/gnu/store/378nlw54nxy991jcilnnbrxasnfvv9wl-git-2.30.0R" > (propagated-inputs ()) > (search-paths > (("GIT_SSL_CAINFO" > ("etc/ssl/certs/ca-certificates.crt") > #f > regular > #f) > ("GIT_EXEC_PATH" > ("libexec/git-core") > #f > directory > #f))) > (properties > (provenance > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > (branch "master") > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > (introduction > (channel-introduction > (version 0) > (commit > "9edb3f66fd807b096b48283debdcddccfea34bad") > (signer > "BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A > 54FA"))))))) ("python-certifi" > "2020.11.8" > "out" > "/gnu/store/hmp6ab9kw1z3hjns9h1fm3afsq4g6j7x-python-certifi-2020.11= .8R" > (propagated-inputs ()) > (search-paths ()) > (properties > (provenance > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > (branch "master") > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > (introduction > (channel-introduction > (version 0) > (commit > "9edb3f66fd807b096b48283debdcddccfea34bad") > (signer > "BBB0 2DDF 2CEA F6A8 0D1D E643 A2A0 6DF2 A33A > 54FA")))))))))) So I tried to reproduce it with the following command: > guix time-machine \ > --commit=3Df9bd4621dd92a9415276706b476b9bd2973411fa -- \ > pack \ > --compression=3Dxz \ > --save-provenance \ > -RR \ > --symlink=3D/usr/local/bin/repo=3Dbin/repo \ > --symlink=3D/usr/local/bin/repo-env.sh=3Detc/profile \ > git-repo le-certs nss-certs git python-certifi But the new tarball filename was different. vivien in #guix helped me a lot by trying to build that tarball too and me and viven have the same filename with guix-time-machine: bfxvk59q0m034iyq5zkk841zkisayyjl-tarball-pack.tar.xz We then managed to get to the root cause of the difference. All the binaries were the sames. All the differences comes from the fact that the provenance file (named 'manifest') is different. That difference then produces a different profile name and also affects /usr/bin as that references the profile. Diffing the two provenance files gives that: > +++ > bfxvk59q0m034iyq5zkk841zkisayyjl-tarball-pack/gnu/store/216jiimdyw7zyx8s9= b3fz67aw69ydkvw-profile/manifest > 1970-01-01 01:00:01.000000000 +0100 @@ -15,9 +15,10 @@ (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > - (branch "master") > + (branch #f) > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > + (name guix) > (introduction > (channel-introduction > (version 0) > @@ -36,9 +37,10 @@ > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > - (branch "master") > + (branch #f) > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > + (name guix) > (introduction > (channel-introduction > (version 0) > @@ -57,9 +59,10 @@ > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > - (branch "master") > + (branch #f) > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > + (name guix) > (introduction > (channel-introduction > (version 0) > @@ -88,9 +91,10 @@ > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > - (branch "master") > + (branch #f) > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > + (name guix) > (introduction > (channel-introduction > (version 0) > @@ -109,9 +113,10 @@ > (repository > (version 0) > (url "https://git.savannah.gnu.org/git/guix.git") > - (branch "master") > + (branch #f) > (commit > "f9bd4621dd92a9415276706b476b9bd2973411fa") > + (name guix) > (introduction > (channel-introduction I've tried to add --branch=3Dmaster to guix time-machine and used guix gc -D to remove the older tarball as it didn't rebuild it even with --rounds=3D2, and at the end I still got the exact same bfxvk59q0m034iyq5zkk841zkisayyjl-tarball-pack.tar.xz tarball (I've compared both with cmp). Am I doing something wrong, or is there an issue that needs to be fixed somehow? References: ----------- [1]https://ftp.osuosl.org/pub/replicant/build-tools/repo/28-01-2021/ Denis. --Sig_/gE7tLVvzRu9gzfBCYEJsg9g Content-Type: application/pgp-signature Content-Description: OpenPGP digital signature -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEeC+d2+Nrp/PU3kkGX138wUF34mMFAmEF6RYACgkQX138wUF3 4mM2EQ/9E8rYCDFZX04cSyV7wAhdUk3vQZoOpxDfP9vgfmOnP+UjrGH5lOmMRp34 t8gHMxrdnE5r5K9PNc7fL5ovcxz0CJqXbHEAzMYvtfdmiETbRIckv3dDtmyXpEyd r3QtDyrzjT8zYXYiNlqrKij2x3aq4mxPaUX3m9sO4QYxJDZ7J4LkMsYUSrgyiQsa i6qzT6Ly1k/bDFQm0SjXuJydqcbYNsRJQ3XFYxap98bqf3e9iIZmAwBtfV/NYZSk QJ2yniEifkMWzBqJScrOgI3fQKV8ZOIgUKKL7PdyTvzKgNxWe5gFi7rCSg/Yr+M4 fSoGQCTxSjSWdPfhhxBM34rjnJQppItH3sVK+SlGDxLxhrv2gN+lhIJ5gklAMWr4 Ho5+gVh2b891I7ZebsZLn+JQw6lGT00q/vFvD0dQ4YHjG2fJ5mXJ2taigaknxFDO TDcwu7s6CxWl/eeEh98Bzf/AbqQXWVhik+wlP4XI1QJcR5bDsEU7TdFbtCyYfRTV V/fcfPYk7UGYiYYkUgUEwUD7CGXd0PdP6CowPM62Pi0UKKN3uDpRnKE8L1alBuJ5 LcnS0due1PMsnd+3oOZUTvI37nY0H/HqMeJ6kt8gx1U+DL8TVSaarxTHbDumOqTf s9besxFsjinFEGfHCIfMgOaJBnUNcvY4uuZMAw7zUCWW19ByISw= =cJWB -----END PGP SIGNATURE----- --Sig_/gE7tLVvzRu9gzfBCYEJsg9g--