Opened 7 years ago

Last modified 7 years ago

#16854 new defect

virtualbox does not build reproducibly

Reported by: bmwiedemann2 Owned by:
Component: other Version: VirtualBox 5.1.22
Keywords: Cc:
Guest type: other Host type: other


meaning, it creates different results on every build. See why that matters.

This comes from multiple sources:

  1. gzip needs to be called with -n (patch attached)
  1. tar does not sort file lists by default (newer version have the --sort=name option but there are other solutions as well)
  1. various .o files contain a 'VTG Object Header v1.7'

added in src/bldprogs/VBoxTpG.cpp:574 via src/VBox/Runtime/generic/RTUuidCreate-generic.cpp RTUuidCreate via src/VBox/Runtime/common/rand/rand.cpp RTRandBytes

IMHO, it would be better to replace that with some digest over source files, so that it changes whenever one of the inputs changes, but remains constant across builds.

Attachments (1)

reproducible.patch (2.5 KB ) - added by bmwiedemann2 7 years ago.
patch to not add timestamps to gz headers

Download all attachments as: .zip

Change History (3)

by bmwiedemann2, 7 years ago

Attachment: reproducible.patch added

patch to not add timestamps to gz headers

comment:1 by Frank Mehnert, 7 years ago

Makes sense, thanks for the hints.

comment:2 by bmwiedemann2, 7 years ago still did not get my trivial patch from above - anything I can help to get it merged?

Note: See TracTickets for help on using tickets.

© 2023 Oracle
ContactPrivacy policyTerms of Use