Skip to content

Conversation

@TimWolla
Copy link
Member

This reduces the amount of system-dependent data within the tarball and makes it more reproducible. Instead of the information of the release manager that generates the tarball, the tarball will include the fixed 0:0 value as owner:group.


Specifically requesting a review from @ramsey, because https://phpc.social/@ramsey/109876124091468563. Feel free to request additional reviews from whomever you consider helpful.

This reduces the amount of system-dependent data within the tarball and makes
it more reproducible. Instead of the information of the release manager that
generates the tarball, the tarball will include the fixed 0:0 value as
owner:group.
@ramsey
Copy link
Member

ramsey commented Feb 17, 2023

Thanks!

@TimWolla
Copy link
Member Author

Note: There still is some "volatile" information. Most notable the dates. Instead of setting them based on the current time, they should likely be set based on the date of the tag / date of the last commit in case of branches. I can recommend the Diffoscope tool to explore the possible issues lurking in reproducibility: https://diffoscope.org/. It was built for Debian's Reproducible Builds project.

@TimWolla TimWolla merged commit 7d22978 into php:PHP-8.2 Feb 18, 2023
@TimWolla TimWolla deleted the makedist-more-reproducible branch February 18, 2023 10:17
TimWolla added a commit that referenced this pull request Feb 18, 2023
* PHP-8.2:
  makedist: Use fixed owner/group in generated tarball (#10613)
crrodriguez pushed a commit to crrodriguez/php-src that referenced this pull request Feb 21, 2023
This reduces the amount of system-dependent data within the tarball and makes
it more reproducible. Instead of the information of the release manager that
generates the tarball, the tarball will include the fixed 0:0 value as
owner:group.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants