V Thu, Mar 07, 2024 at 12:39:37PM +0000, Zbigniew Jędrzejewski-Szmek napsal(a):
The effort to make package builds in Fedora reproducible has picked up steam again. We now have a new website: https://docs.fedoraproject.org/en-US/reproducible-builds and an issue tracker: https://pagure.io/fedora-reproducible-builds/project and a matrix room: https://matrix.to/#/#reproducible-builds:fedora.im
We've done a mini rebuild using [1] for the package list [2] and results are at [3]. (The result is a json dump of rpmdiff output by package. Generally, "" means the rebuild was identical except for variable metadata, and non-empty output else means that the rebuild was different.)
[1] https://github.com/keszybz/fedora-repro-build [2] https://fedorapeople.org/~zbyszek/builds-2024-02-fc41-filtered.txt [3] https://fedorapeople.org/~zbyszek/builds-2024-02-fc41-filtered.results.txt
Is this mini rebuild a one-shot thing, or are are you going to rebuild the packages repeatedly or use the results for something significant? I ask because I spotted some discrepancies in those text files:
(1) Some packages are listed twice, with different NEVRAs. E.g. perl-Alien-pkgconf or perl-RDF-RDFa-Generator.
(2) Both perl-Alien-pkgconf NEVRAs reports a differing /usr/lib64/perl5/vendor_perl/auto/share/dist/Alien-pkgconf/status.json content. That content looks likes this:
{"libs":"-lpkgconf","version":"2.1.0","install_type":"system","cflags":"-I/usr/include/pkgconf","dll":"/lib64/libpkgconf.so.4.0.0"}
That means you had to perform rebuilds of the same NEVRA with different libpkgconf-devel packages in the build roots. That looks like a bug in your mini rebuild scheduler.
(3) Some packages listed in builds-2024-02-fc41-filtered.txt are missing from builds-2024-02-fc41-filtered.results.txt. E.g. perl-CPAN-Plugin-Sysdeps-0.73-1.fc41 is listed as COMPLETE, yet results are missing.
(4) dnf5-5.1.13-1.fc41.src reports changes in Requires (e.g. "removed REQUIRES createrepo_c"). That again looks like you built the same NEVRA in different build roots (for some reason "%bcond_without tests" flipped).
All that means you might hunting ghosts instead of real bugs.
-- Petr