From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mp10.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by ms5.migadu.com with LMTPS id WMavJ8oqmGKUGwEAbAwnHQ (envelope-from ) for ; Thu, 02 Jun 2022 05:13:14 +0200 Received: from aspmx1.migadu.com ([2001:41d0:2:4a6f::]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by mp10.migadu.com with LMTPS id CIiKJsoqmGLQYAAAG6o9tA (envelope-from ) for ; Thu, 02 Jun 2022 05:13:14 +0200 Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by aspmx1.migadu.com (Postfix) with ESMTPS id 19E6DBBBD for ; Thu, 2 Jun 2022 05:13:14 +0200 (CEST) Received: from localhost ([::1]:45458 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nwbGq-000262-Sc for larch@yhetil.org; Wed, 01 Jun 2022 23:13:12 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]:39674) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1nwbGK-00025Z-7X for guix-devel@gnu.org; Wed, 01 Jun 2022 23:12:40 -0400 Received: from cascadia.aikidev.net ([173.255.214.101]:43472) by eggs.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1nwbGI-0006mw-E1 for guix-devel@gnu.org; Wed, 01 Jun 2022 23:12:39 -0400 Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:20]) (Authenticated sender: vagrant@aikidev.net) by cascadia.aikidev.net (Postfix) with ESMTPSA id C1EF61AA6B; Wed, 1 Jun 2022 20:12:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=reproducible-builds.org; s=1.vagrant; t=1654139556; bh=dpXk4cssSsZ27yesYffyhPoiqjtbirv//YOFkQLbbHE=; h=From:To:Cc:Subject:In-Reply-To:References:Date:From; b=uwCi2sDYNe3y4HF0vljtw5MZfRTFE3Z4L4GIk+zgOdFkK+coCdPackUQb9+zsY5M0 Ly+7QmiBJaXgiiF2T+dICFSgi3kW+QxnWfAM/W9tls6ASJWSVaeVoiLJHFT3AAQFyB u4aUe1Ki0Ie4snjvPkq999AOPG0elzbx5jnEQqJhVIpJ6udOa3cvaEpwdzu3r603Aa w3jQgQh5+Id0tYiyQkYjSVR7o7rhXFh7Nh+h6LLlA3xmKvqWaTiATmVx2BNSQv7dhq HkLwThC0imv1f1Qn69KomgwQnKGlj+U7TNNGIL3xeQdbLF+j38HI7HaMXpI+aqPAHa swgLE6RelXXYA== From: Vagrant Cascadian To: rb-general@lists.reproducible-builds.org Cc: guix-devel@gnu.org Subject: Re: Reproducibility of "core" packages in GNU Guix In-Reply-To: <87wnf4t6xz.fsf@contorta> References: <87wnfagvnp.fsf@contorta> <87wnf4t6xz.fsf@contorta> Date: Wed, 01 Jun 2022 20:12:32 -0700 Message-ID: <871qw7bvxb.fsf@contorta> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Received-SPF: none client-ip=173.255.214.101; envelope-from=vagrant@reproducible-builds.org; helo=cascadia.aikidev.net X-Spam_score_int: -15 X-Spam_score: -1.6 X-Spam_bar: - X-Spam_report: (-1.6 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, PDS_BTC_ID=0.471, PDS_BTC_MSGID=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=no autolearn_force=no X-Spam_action: no action X-BeenThere: guix-devel@gnu.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+larch=yhetil.org@gnu.org Sender: "Guix-devel" X-Migadu-Flow: FLOW_IN X-Migadu-To: larch@yhetil.org X-Migadu-Country: US ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=yhetil.org; s=key1; t=1654139594; h=from:from:sender:sender:reply-to:subject:subject:date:date: message-id:message-id:to:to:cc:cc:mime-version:mime-version: content-type:content-type:in-reply-to:in-reply-to: references:references:list-id:list-help:list-unsubscribe: list-subscribe:list-post:dkim-signature; bh=/vrxL+vOslPQBglst2MpAMpeSEqaT3J/mfTu5/wEmxY=; b=Vtn1PMaALKEaMWcuXAEVAdH7e8J0+1nzd4mu5qknUQ1aIYIS1bMXRbCxPILc1PaVx0lJU2 nQMkqf+tmRL7KfVOnX3smE9LQ0KcP+YySpZnZxBsSOpBmTIVn5O0Bt55AoV5dnIkq+KRDv 1RErvJsMynvBggNvWY0TugGnabb1aanBT/TNYp2NLVn2exTMKZohA5y9rLpfHCJWc3jZAa 9oXy2Wv256P4prum7sLqJzYq1CgBJO/ODtS49bAIGD2AExXa24DtJP6QsszxLNQQ67OSum MgtkgaU3ExAv4spN6HcTwu3DlqO1UROZww7/HMP+PFXdCBi63sOKJsmKHgvk/Q== ARC-Seal: i=1; s=key1; d=yhetil.org; t=1654139594; a=rsa-sha256; cv=none; b=h7dvCZCNSLeAxRpLcc8VtzGyjS1RhyLDX44peyX/znISWZKVAAtc546lmawvT2gRZayx+r D/UtV63NmPy6RFrFbfAtLpRJAG/Dsq/199+VlR0mEoC8Ys+Rlsdc5xZHAhrLniaiWeeXF9 1dyq7zSv4r5NUFA/LRqJlzsn/peuOh3LGB+33mxLDwHVJpw4S6G8X80w1/w0lHR86UjjML JBVHNL8fG8C4cvbBJrlpqOmTWuzmXk29L6bxu3YvNSnGor7L5Krb8zjhyIzuBqmEr5KLPc CnIKLljmHYv25Ujt0BYC0j/itm2MQ8+U6z00+FZh+0uORXMibaO65Zx/gPsKcw== ARC-Authentication-Results: i=1; aspmx1.migadu.com; dkim=pass header.d=reproducible-builds.org header.s=1.vagrant header.b=uwCi2sDY; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Spam-Score: -6.93 Authentication-Results: aspmx1.migadu.com; dkim=pass header.d=reproducible-builds.org header.s=1.vagrant header.b=uwCi2sDY; dmarc=none; spf=pass (aspmx1.migadu.com: domain of "guix-devel-bounces+larch=yhetil.org@gnu.org" designates 209.51.188.17 as permitted sender) smtp.mailfrom="guix-devel-bounces+larch=yhetil.org@gnu.org" X-Migadu-Queue-Id: 19E6DBBBD X-Spam-Score: -6.93 X-Migadu-Scanner: scn0.migadu.com X-TUID: nY72cpkvVnrP --=-=-= Content-Type: text/plain On 2022-05-02, Vagrant Cascadian wrote: > $ guix challenge --diff=none $(cat guix-base-set) > > /gnu/store/8gmqvwf0ccqfyimficcnhxvrykwx6y8g-linux-libre-5.17.5 contents differ: Proving more difficult than I'd hoped for, smallish diffs in the .ko files and in the bzImage and System.map, but nothing obvious leaping out at me. The corresponding files are reproducible in Debian bookworm... Working on this lead me to notice a bug in diffoscope at least: https://salsa.debian.org/reproducible-builds/diffoscope/-/issues/305 > /gnu/store/7qz2jlghm4gc87jww5j24c5mcip0whzy-keyutils-1.6.3 contents differ: Patch: https://issues.guix.gnu.org/55758 There was already a patch in debian to set the date using an environment variable. Might be worth working up a patch to support SOURCE_DATE_EPOCH and push it upstream... or nudging upstream to drop the timestamp entirely. :) > /gnu/store/ajw8nnrnd6hr183skwqdgc8c7mazg97h-isl-0.23 contents differ: Patch: https://issues.guix.gnu.org/55757 Disabling parallel building in guix fixes it for me consistently, although Debian's "isl" package is reproducible but... builds with parallelism. (well, not reproducible on i386, but who's really counting?) What about other distros? Do you do anything to make "isl" reproducible? > /gnu/store/45b6181w68a3lprx9m6riwgyinw3y145-guix-1.3.0-25.c1719a0 contents differ: > /gnu/store/1jgcbdzx2ss6xv59w55g3kr3x4935dfb-guile-3.0.8 contents differ: Both of these were not *just* due to parallelism as I'd hoped... inscrutible guile... So, 2 out of the 5 remaining packages have plausible fixes (out of 47 total)... not too bad! live well, vagrant --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYpgqoAAKCRDcUY/If5cW qvt/AP91S2d5shmvhgDZPI2fdx10PhmIgW1c15qAF3zX8PDdIQD/TWjOmgk8WMdu Y2TY0Rf/6SPPv7HSjCmgE12baFjLkg8= =sWuH -----END PGP SIGNATURE----- --=-=-=--