Skip to content

makedist: Use fixed owner/group in generated tarball #10613

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Feb 18, 2023

Conversation

TimWolla
Copy link
Member

This reduces the amount of system-dependent data within the tarball and makes it more reproducible. Instead of the information of the release manager that generates the tarball, the tarball will include the fixed 0:0 value as owner:group.


Specifically requesting a review from @ramsey, because https://phpc.social/@ramsey/109876124091468563. Feel free to request additional reviews from whomever you consider helpful.

Verified

This commit was signed with the committer’s verified signature.
TimWolla Tim Düsterhus
This reduces the amount of system-dependent data within the tarball and makes
it more reproducible. Instead of the information of the release manager that
generates the tarball, the tarball will include the fixed 0:0 value as
owner:group.
@ramsey
Copy link
Member

ramsey commented Feb 17, 2023

Thanks!

@TimWolla
Copy link
Member Author

Note: There still is some "volatile" information. Most notable the dates. Instead of setting them based on the current time, they should likely be set based on the date of the tag / date of the last commit in case of branches. I can recommend the Diffoscope tool to explore the possible issues lurking in reproducibility: https://diffoscope.org/. It was built for Debian's Reproducible Builds project.

@TimWolla TimWolla merged commit 7d22978 into php:PHP-8.2 Feb 18, 2023
@TimWolla TimWolla deleted the makedist-more-reproducible branch February 18, 2023 10:17
TimWolla added a commit that referenced this pull request Feb 18, 2023

Verified

This commit was signed with the committer’s verified signature.
TimWolla Tim Düsterhus
* PHP-8.2:
  makedist: Use fixed owner/group in generated tarball (#10613)
crrodriguez pushed a commit to crrodriguez/php-src that referenced this pull request Feb 21, 2023
This reduces the amount of system-dependent data within the tarball and makes
it more reproducible. Instead of the information of the release manager that
generates the tarball, the tarball will include the fixed 0:0 value as
owner:group.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants