From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp1 ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms11 with LMTPS id 2BerD3GD9F8hYgAA0tVLHw (envelope-from ) for ; Tue, 05 Jan 2021 15:19:13 +0000 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp1 with LMTPS id kFdnC3GD9F+sJwAAbx9fmQ (envelope-from ) for ; Tue, 05 Jan 2021 15:19:13 +0000 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 8FF1C940481 for ; Tue, 5 Jan 2021 15:19:12 +0000 (UTC) Received: from localhost ([::1]:41314 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kwo74-00055B-J1 for larch@yhetil.org; Tue, 05 Jan 2021 10:19:10 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:52854) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kwo6w-00053X-HX for bug-guix@gnu.org; Tue, 05 Jan 2021 10:19:02 -0500 Received: from debbugs.gnu.org ([209.51.188.43]:59119) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1kwo6w-0005FM-AO for bug-guix@gnu.org; Tue, 05 Jan 2021 10:19:02 -0500 Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1kwo6w-0008PQ-5z for bug-guix@gnu.org; Tue, 05 Jan 2021 10:19:02 -0500 X-Loop: help-debbugs@gnu.org Subject: bug#45675: Zip-based archives store timestamps Resent-From: Julien Lepiller Original-Sender: "Debbugs-submit" Resent-CC: bug-guix@gnu.org Resent-Date: Tue, 05 Jan 2021 15:19:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 45675 X-GNU-PR-Package: guix X-GNU-PR-Keywords: To: Miguel =?UTF-8?Q?=C3=81ngel?= Arruga Vivas , 45675@debbugs.gnu.org Received: via spool by 45675-submit@debbugs.gnu.org id=B45675.160985989232260 (code B ref 45675); Tue, 05 Jan 2021 15:19:02 +0000 Received: (at 45675) by debbugs.gnu.org; 5 Jan 2021 15:18:12 +0000 Received: from localhost ([127.0.0.1]:42431 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kwo68-0008OG-7p for submit@debbugs.gnu.org; Tue, 05 Jan 2021 10:18:12 -0500 Received: from lepiller.eu ([89.234.186.109]:59284) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1kwo65-0008O6-W5 for 45675@debbugs.gnu.org; Tue, 05 Jan 2021 10:18:11 -0500 Received: from lepiller.eu (localhost [127.0.0.1]) by lepiller.eu (OpenSMTPD) with ESMTP id 46e393f4; Tue, 5 Jan 2021 15:18:07 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=lepiller.eu; h=date :in-reply-to:references:mime-version:content-type :content-transfer-encoding:subject:to:from:message-id; s=dkim; bh=70dzVBReiBbAg9R71sDlFQsqicjQjwU9jwiEsBJ5gt8=; b=ULF2+Bnp2xe+ KCCRKO0GnsX6yhGC5BQb34M7qMzOc/qYJEYqbZxxW2etW+36EG7r6DiuEOxXSS9u /IXq6Zqb0Id2VhxhEAkjYnzNoRPZKyWxkOB5Oi+NqMEqnpimqSr+3/bGX4AUwREO rV8Wx5GO22zlx3GOZzfvAvmuCmc7pjqRQvS70iopd4btM9x9Rrs/GqjDYprXYS5a 12Vx8ZsaHwD+2jVgif7abqNt1ErwEMKWIguRHvByxraRRSOK9xr2fn6ZIbNg3PVA jKa8/ekEw/c7JueFnTFXnRmRZW9b5p3s0s4tPIvLuUXuQuovxr02Ki+mwvp2xDJe awaOmKWeeA== Received: by lepiller.eu (OpenSMTPD) with ESMTPSA id 0cbf809d (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256:NO); Tue, 5 Jan 2021 15:18:06 +0000 (UTC) Date: Tue, 05 Jan 2021 10:17:53 -0500 User-Agent: K-9 Mail for Android In-Reply-To: <877dor34xe.fsf@gmail.com> References: <877dor34xe.fsf@gmail.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----36TF2YAIOY4UFT533E1QW292I7VPF3" Content-Transfer-Encoding: 7bit From: Julien Lepiller Message-ID: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-guix@gnu.org List-Id: Bug reports for GNU Guix List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-guix-bounces+larch=yhetil.org@gnu.org Sender: "bug-Guix" X-Migadu-Flow: FLOW_IN X-Migadu-Spam-Score: -1.24 Authentication-Results: aspmx1.migadu.com; dkim=fail (headers rsa verify failed) header.d=lepiller.eu header.s=dkim header.b=ULF2+Bnp; dmarc=fail reason="SPF not aligned (relaxed)" header.from=lepiller.eu (policy=none); spf=pass (aspmx1.migadu.com: domain of bug-guix-bounces@gnu.org designates 209.51.188.17 as permitted sender) smtp.mailfrom=bug-guix-bounces@gnu.org X-Migadu-Queue-Id: 8FF1C940481 X-Spam-Score: -1.24 X-Migadu-Scanner: scn0.migadu.com X-TUID: v4q5BuYalB1Y ------36TF2YAIOY4UFT533E1QW292I7VPF3 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable For java packages, we have a strip-jar-timestamps phase in the ant-build-sy= stem=2E Le 5 janvier 2021 08:10:37 GMT-05:00, "Miguel =C3=81ngel Arruga Vivas" a =C3=A9crit : >A procedure like reset-gzip-timestamp should be useful for >reproducibility purposes, adapted to zip based archives as Smalltalk's >STAR or Java's JAR binary formats, as some or all of their contents are >generated usually at build time=2E > >On the latest Zip specification[1], which only seem to be encumbered >regarding encryption, there is one header ID which could be used for >timestamp purposes (0x0020) but third party header IDs are allowed, >which include a "commonly used" 0x5455 timestamp=2E > >[1] https://pkware=2Ecachefly=2Enet/webdocs/APPNOTE/APPNOTE-6=2E3=2E8=2ET= XT ------36TF2YAIOY4UFT533E1QW292I7VPF3 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable For java packages, we have a strip-jar-timestamps = phase in the ant-build-system=2E

Le 5 jan= vier 2021 08:10:37 GMT-05:00, "Miguel =C3=81ngel Arruga Vivas" <rosen644= 835@gmail=2Ecom> a =C3=A9crit :
A procedure like reset-gzip-timestamp should be usef=
ul for
reproducibility purposes, adapted to zip based archives as Smallt=
alk's
STAR or Java's JAR binary formats, as some or all of their content=
s are
generated usually at build time=2E

On the latest Zip specif=
ication[1], which only seem to be encumbered
regarding encryption, there=
 is one header ID which could be used for
timestamp purposes (0x0020) bu=
t third party header IDs are allowed,
which include a "commonly used" 0x=
5455 timestamp=2E

[1] https://pkware=2Ecachefly=2Enet/webdo=
cs/APPNOTE/APPNOTE-6=2E3=2E8=2ETXT



------36TF2YAIOY4UFT533E1QW292I7VPF3--