About package review and mismatching md5sums

[Aaron Faanes]

On Wed, Jun 29, 2011 at 2:29 AM, P J P <pj.pandit at yahoo.co.in> wrote:

>    Hi! :)
>
>
> One of the package review guideline says
>
> ===
> MUST: The sources used to build the package must match the
> upstream source, as provided in the spec URL. Reviewers should use
> md5sum for this task.
> ===
>
>
> Past couple of days, I've been reviewing the python grapefruit package
>
>
>   at - https://bugzilla.redhat.com/show_bug.cgi?id=716808
>
> and the thing is, the spec file provides an - $ svn export -r 31 ... -
> command to pull the sources and create a tarball using $ tar -czvf ...
>
> But as it turns out, it seems, if you create a tarball from the *very same*
> sources on two different machines, they don't match. As in the md5sum for
> the two tarball differs.
>
> Please try this simple test
>
> =====
>
> $ echo 'Hello, world' > 1
> $ tar -cjf 1.tar.bz2 1
>
> $ scp 1.tar.bz2 to a different machine.
>
> $ ssh to that same machine
> $ tar -xjf 1.tar.bz2 -C .
> $ tar -cjf 2.tar.bz2 1
>
> $ md5sum 1.tar.bz2 2.tar.bz2
> d67ea3dac09ed7eee310d9846ecdd879  1.tar.bz2
> d4b716716f3cf48139c4112719538513  2.tar.bz2
>
> =====
>
> Could someone suggest how to fix this glitch? Or the guideline above??
>

I ran your example, but I got the expected results:

$ echo 'Hello, world' > 1
$ tar -cjf 1.tar.bz2 1
$ scp 1.tar.bz2 $HOST:~
1.tar.bz2                                                           100%
130     0.1KB/s   00:00
$ ssh $HOST
Last login: Fri Jun  3 21:38:56 2011 from ...

$ tar -xjf 1.tar.bz2 -C .
$ tar -cjf 2.tar.bz2 1
$ md5sum 1.tar.bz2 2.tar.bz2
b87d0f263bfec97456a415f7103b0f35  1.tar.bz2
b87d0f263bfec97456a415f7103b0f35  2.tar.bz2

My guess is that the ssh'd host uses a different username/group or uses a
different filesystem. You could compare the two using rsync:

$ mkdir 1.dir 2.dir
$ ls
1.dir  1.tar.bz2  2.dir  2.tar.bz2
$ tar -xjf 1.tar.bz2 -C 1.dir
$ tar -xjf 2.tar.bz2 -C 2.dir
$ rsync -avznih 1.dir/ 2.dir/
sending incremental file list
.d..t...... ./

sent 62 bytes  received 15 bytes  154.00 bytes/sec
total size is 13  speedup is 0.17 (DRY RUN)

If the files differ, it should show up in rsync's itemized changes, like the
following example:

$ su -c 'chown root:root 2.dir/1'
Password:
$ rsync -avznih 1.dir/ 2.dir/
sending incremental file list
.d..t...... ./
.f.....g... 1

sent 65 bytes  received 18 bytes  166.00 bytes/sec
total size is 13  speedup is 0.16 (DRY RUN)


> Thank you.
>
> ---
> Regards
> -Prasad
> http://feedmug.com
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
>

Hope this helps!

- Aaron
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/devel/attachments/20110629/ddde59f9/attachment-0001.html