From mboxrd@z Thu Jan 1 00:00:00 1970 From: Ludovic =?UTF-8?Q?Court=C3=A8s?= Subject: bug#32942: nss-certs not deterministic Date: Mon, 10 Dec 2018 00:29:28 +0100 Message-ID: <87y38yuvmv.fsf@gnu.org> References: <3974e5005881951012bb5e55a5bfabe2@lepiller.eu> <87woooxebu.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:57428) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1gW8WY-0008RL-W5 for bug-guix@gnu.org; Sun, 09 Dec 2018 18:30:12 -0500 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1gW8WV-0005Hc-Qz for bug-guix@gnu.org; Sun, 09 Dec 2018 18:30:10 -0500 Received: from debbugs.gnu.org ([208.118.235.43]:36122) by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.71) (envelope-from ) id 1gW8WQ-0005Gh-VP for bug-guix@gnu.org; Sun, 09 Dec 2018 18:30:07 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1gW8WQ-0000u7-QV for bug-guix@gnu.org; Sun, 09 Dec 2018 18:30:02 -0500 Sender: "Debbugs-submit" Resent-To: bug-guix@gnu.org Resent-Message-ID: In-Reply-To: <87woooxebu.fsf@gnu.org> ("Ludovic \=\?utf-8\?Q\?Court\=C3\=A8s\=22'\?\= \=\?utf-8\?Q\?s\?\= message of "Wed, 05 Dec 2018 15:01:25 +0100") List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+gcggb-bug-guix=m.gmane.org@gnu.org Sender: "bug-Guix" To: Julien Lepiller Cc: 32942-done@debbugs.gnu.org Hello, ludo@gnu.org (Ludovic Court=C3=A8s) skribis: > The difference is an encoding bug: > > $ wget -O - https://berlin.guixsd.org/nar/gzip/xbj4fhad0lnz0ziflwi90gyqbl= s8ains-nss-certs-3.39 |gunzip -c |guix archive -x /tmp/nss-certs.berlin > $ wget -O - https://mirror.hydra.gnu.org/nar/gzip/xbj4fhad0lnz0ziflwi90gy= qbls8ains-nss-certs-3.39 |gunzip -c |guix archive -x /tmp/nss-certs.hydra > $ diff -ru /tmp/nss-certs.{hydra,berlin} > Only in /tmp/nss-certs.hydra/etc/ssl/certs: AC_Ra=C3=ADz_Certic=C3=A1mara= _S.A.:2.15.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem > Only in /tmp/nss-certs.berlin/etc/ssl/certs: AC_Ra?z_Certic?mara_S.A.:2.1= 5.7.126.82.147.123.224.21.227.87.240.105.140.203.236.12.pem > Only in /tmp/nss-certs.hydra/etc/ssl/certs: NetLock_Arany_=3DClass_Gold= =3D_F=C5=91tan=C3=BAs=C3=ADtv=C3=A1ny:2.6.73.65.44.228.0.16.pem > Only in /tmp/nss-certs.berlin/etc/ssl/certs: NetLock_Arany_=3DClass_Gold= =3D_F?tan?s?tv?ny:2.6.73.65.44.228.0.16.pem [...] > On closer inspection the problem is elsewhere: the > /gnu/store/xbj4fhad0lnz0ziflwi90gyqbls8ains-nss-certs-3.39 directory on > berlin has question marks in file names, so =E2=80=98guix publish=E2=80= =99 is not to > blame; instead the problem likely comes from =E2=80=98guix offload=E2=80= =99. > > Indeed =E2=80=98guix-daemon=E2=80=99 and its child processes such as =E2= =80=98guix offload=E2=80=99 run > with an empty environment, and thus in the C locale. Specifically, > =E2=80=98restore-file-set=E2=80=99 on the build farm front-end must be th= e one > substituting question marks to the non-ASCII characters. > > If this analysis is correct, the patch below should fix it. I=E2=80=99ll= try it > later. Pushed as 7e4bc215098f334bc2a11737f2665dd4992fc2da. Thanks, Ludo'.