nss not reproducible

  • Open
  • quality assurance status badge
Details
5 participants
  • Björn Höfling
  • Gábor Boskovits
  • Bruno Victal
  • Ricardo Wurmus
  • Vagrant Cascadian
Owner
unassigned
Submitted by
Gábor Boskovits
Severity
normal
Merged with
G
R
R
Ricardo Wurmus wrote on 14 Jan 2018 17:44
(name . Gábor Boskovits)(address . boskovits@gmail.com)(address . 30108@debbugs.gnu.org)
87fu78xuea.fsf@elephly.net
Gábor Boskovits <boskovits@gmail.com> writes:

Toggle quote (7 lines)
> Nss is not reproducible on core-updates.
>
> notes database link:
> https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/nss.html
>
> Diffoscope output attached.

Only the following three files differ:

- libfreeblpriv3.chk
- libnssdbm3.chk
- libsoftokn3.chk

How are they generated?

--
Ricardo

GPG: BCA6 89B6 3655 3801 C3C6 2150 197A 5888 235F ACAC
B
B
Björn Höfling wrote on 31 Mar 2020 11:21
merge nss bugs
(address . request@debbugs.gnu.org)
20200331112158.663ecc89@alma-ubu
merge 40316 33507 30108
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQQiGUP0np8nb5SZM4K/KGy2WT5f/QUCXoMLtgAKCRC/KGy2WT5f
/eHuAJ9Ee/3Cy/8A+tNax7JvGuFmMS+XCQCePXVaJktqzKzbL1JO+o95PPoSKso=
=EwHg
-----END PGP SIGNATURE-----


B
B
Bruno Victal wrote on 20 Sep 2023 20:20
Re: bug#30108: [core-updates] nss 3.34.1 not reproducible
(name . Ricardo Wurmus)(address . rekado@elephly.net)
87jzskzoxw.fsf@makinata.eu
Ricardo Wurmus <rekado@elephly.net> writes:
Toggle quote (8 lines)
> Only the following three files differ:
>
> - libfreeblpriv3.chk
> - libnssdbm3.chk
> - libsoftokn3.chk
>
> How are they generated?


--
Thanks,
Bruno.
V
V
Vagrant Cascadian wrote on 7 Mar 23:16 +0100
Re: bug#40316: core-updates nss not reproducible
(address . 40316@debbugs.gnu.org)(address . control@debbugs.gnu.org)
87zfv9n0vy.fsf@wireframe
retitle 40316 nss not reproducible
thanks

Still an issue on master as of d29e5a83e887cd2f4f459a12cbbfc40c77e55ce2:

guix challenge --verbose --diff=simple nss
guix challenge: warning: could not determine current substitute URLs; using defaults
/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1 contents differ:
no local build for '/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1'
https://ci.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1:18xvq9cb7y2hajixnkk24bh969px0h5289hgby484iyg3x73sagp
differing files:
/lib/nss/libfreebl3.chk
/lib/nss/libfreeblpriv3.chk
/lib/nss/libnssdbm3.chk
/lib/nss/libsoftokn3.chk

1 store items were analyzed:
- 0 (0.0%) were identical
- 1 (100.0%) differed
- 0 (0.0%) were inconclusive

According to the notes in Debian, this is due to cryptographic
signatures performed at build time:



live well,
vagrant
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZeo8wQAKCRDcUY/If5cW
qpPOAQD3X++W8pz9obrPqz7Lu6lBT7irx7v7bPgKZylMqrwddgEAnZVMhE9BN2R5
5la3TTgaeQLzJ3OFykNGfOIeGuAy4QQ=
=H8rd
-----END PGP SIGNATURE-----

?