nss not reproducible

  • Open
  • quality assurance status badge
Details
3 participants
  • Björn Höfling
  • Ludovic Courtès
  • Vagrant Cascadian
Owner
unassigned
Submitted by
Ludovic Courtès
Severity
normal
Merged with
L
L
Ludovic Courtès wrote on 26 Nov 2018 11:26
nss 3.39 output is not deterministic
(name . Bug Guix)(address . bug-guix@gnu.org)
87k1l09ltq.fsf@gnu.org
Hello,

The contents of .chk files differ:

Toggle snippet (144 lines)
$ wget -q -O - https://berlin.guixsd.org/nar/gzip/fx35yrin8ssdmpqzska50pinzzafa2fr-nss-3.39 | gunzip -c | guix archive -x /tmp/t
$ diffoscope --exclude-directory-metadata /tmp/t /gnu/store/fx35yrin8ssdmpqzska50pinzzafa2fr-nss-3.39
--- /tmp/t
+++ /gnu/store/fx35yrin8ssdmpqzska50pinzzafa2fr-nss-3.39
??? lib
? ??? nss
? ? ??? libfreebl3.chk
? ? ?? xxd not available in path. Falling back to Python hexlify.
? ? ? @@ -11,19 +11,19 @@
? ? ? 5c80e3430a9e943586d458a1ca22b973460bfb3e33f1d5d3b426bf50d7f20933
? ? ? 6ec0311b6d077086ca57f70b4a63f06fc88aed5060f311c744f3ce4e50422d85
? ? ? 335457038ddc664d6183171c7b0d65bc8f2c1986fce29f5d67fcd4a5f823a11a
? ? ? a2e11115843201ee88f15530e9743c1a2b54452e39b977e132af2d97e021ecf5
? ? ? 58e1c72ee0713d29a4d6e25f859c0504464189033cfab2cffad567ccec68fc83
? ? ? d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29a31baee04f728a28940c
? ? ? 1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358e15e9795454038456f02
? ? ? -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f0000010057
? ? ? -6caa3fd8ec4cb53d699cda29b807f80ce730ba4e827c253e99cb9d320ea11a85
? ? ? -1355d712105b1e6fcc2572e727d505d4426caa46848592d4cf81508721035236
? ? ? -475158597860821870fc45854b8aaf4c31dd925983b94b966c6ab43935e50ddd
? ? ? -0f9c5d8bb11a0d502ce7614de8967b405f04c2fd564da5e96dcd93858dbdd05a
? ? ? -76d704513351b68718fe8f63a07a4f6f6efe9e91577de790d2821010530ff461
? ? ? -ae06a4b14f52da5779a16c136984e8f28ef9301d18ff4c49cb67b0da12e17b7e
? ? ? -65c73c3f65059370ca0018b564d08de1dbad8a156cce805db7f7ee650440f8f3
? ? ? -642f28c939169e5783f858563f666ce8f1f87b22b83cda8038c28cb909a93300
? ? ? -0000408c414c5ad6582289aad9f891aba2c4b481a2a6a866d2b85d85ac6aadcc
? ? ? -7755ef5be789ec256097b9605eb1d14ea71f4d0f3e32b29666e0d14680e8fbe1
? ? ? -f76a89
? ? ? +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f000000ff2b
? ? ? +3653b84f33ad6dd501466317b1172d6d261f37eb09f5f6862d594663fc0fdc5c
? ? ? +51d2dc5b2925324338451cf0fab376d6ea24f33869be4693ce434827a059fc5d
? ? ? +df792b14a2276514a23c57263706b60a04d808d9f86a008832eb35b3d31a104a
? ? ? +ee2f7b1a241ff5b91a525f1e5dd879a0af580bd435bc78d4eba30be92a44ea3d
? ? ? +3294e4d11e9c267f6a94709fa4a6b908e3a2c2a05c4079ffd9d86ffe5c2945d8
? ? ? +40bf37df1da0f7b960d3042762e2bf3b1183ee01319b1f2ff5115042d15db8a0
? ? ? +6bf010f2ea396495f80e6eee3254fe4272b33260c5656b005b2657f8b87451b5
? ? ? +ade90b027de4be0a79bbdc962999669fe50c30d6f9e590a0f9c77f8b07ea0000
? ? ? +00403393cf121111977baa7cb130d3e810df1d667f975b85fddfd40bd60d789e
? ? ? +e5ba187f6561417c1cbd11639a20024becb24121da351ff9151012848a943dc5
? ? ? +f745
? ? ??? libfreeblpriv3.chk
? ? ?? xxd not available in path. Falling back to Python hexlify.
? ? ? @@ -11,19 +11,19 @@
? ? ? 5c80e3430a9e943586d458a1ca22b973460bfb3e33f1d5d3b426bf50d7f20933
? ? ? 6ec0311b6d077086ca57f70b4a63f06fc88aed5060f311c744f3ce4e50422d85
? ? ? 335457038ddc664d6183171c7b0d65bc8f2c1986fce29f5d67fcd4a5f823a11a
? ? ? a2e11115843201ee88f15530e9743c1a2b54452e39b977e132af2d97e021ecf5
? ? ? 58e1c72ee0713d29a4d6e25f859c0504464189033cfab2cffad567ccec68fc83
? ? ? d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29a31baee04f728a28940c
? ? ? 1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358e15e9795454038456f02
? ? ? -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f0000010098
? ? ? -64bc9b90209d5094b1d589bef4fa8bc6ae4486bc77d9116495345a6f9e1429bd
? ? ? -af1d2bc4ee46d765dd3a721c328a4d2b4eecb865bcc23e1ace20ea5b388a2aef
? ? ? -e185e55b5a0df65b56701f38d2457bd1ae6a49363bc6724c926479222965c909
? ? ? -49463cc1c730e7028b0e2237bdc9e5ea2c36050b541caaf58354cffc693539a2
? ? ? -02ca25101e54a4e5764287b0a3adc829a1d1b275be37818b82499426ec9cd6cb
? ? ? -8f696b5d24412ae3d70c23e143ab3bb19ff689b9a0d331589a8c7c0c782b1dd7
? ? ? -ff6bb0a9e85433c33c4f1582bdd1fc740b504a8cef03772e432eb7ffe146b255
? ? ? -1471ca0148f48da48e6a6f3cc10d12ac3078aac9ca55b15562fdd354db1bee00
? ? ? -0000408aa20ddcd0e7b630d7128bb026bf79b8ba703203d1cb482634a56ae914
? ? ? -365b38694ca9062d516b8c0ebb6135186ab142d72ab45083273572b06e1f6839
? ? ? -d542bb
? ? ? +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f0000010069
? ? ? +82a9c4efe012b14935e217617e7de432fc1ba95dc37faad3f4bfe4d217ea6a64
? ? ? +7aec507b62f5d829e50baf048bd1306942dc0540340169e210b0719d871bfe6f
? ? ? +efeb003aa3b58a7cbfed31479cfd0ecbc2416cea9602a0312ff2f4a71a9a7e2c
? ? ? +614c008ed6021bfef3b4cb17a95c74834bc1f411adcb8b711584c314a902092d
? ? ? +ba853cf39b254f780fe47c16abb4dd412c25930d30f76f48d773e3c0bff4fa9f
? ? ? +01812e1b9bc0138765ceef665da1842712d442c294e7fda414d01e37d525e3ea
? ? ? +1f8e542902d4671220e1c4c71bc55780865d56767b5e65d69d17581767ba1016
? ? ? +6ff3e46d7c1967d066e804d9790e7cd4975df17fa678851059bad50e8a439100
? ? ? +0000403757deb728e18996468318e0c59b8dd2bac37d998c1e5e0efca2443672
? ? ? +52465a76e0607a8192fe2e07e3b0dc1007624885d3ffb653a0e5dbfd41dbdc84
? ? ? +0324b6
? ? ??? libnssdbm3.chk
? ? ?? xxd not available in path. Falling back to Python hexlify.
? ? ? @@ -11,19 +11,19 @@
? ? ? 5c80e3430a9e943586d458a1ca22b973460bfb3e33f1d5d3b426bf50d7f20933
? ? ? 6ec0311b6d077086ca57f70b4a63f06fc88aed5060f311c744f3ce4e50422d85
? ? ? 335457038ddc664d6183171c7b0d65bc8f2c1986fce29f5d67fcd4a5f823a11a
? ? ? a2e11115843201ee88f15530e9743c1a2b54452e39b977e132af2d97e021ecf5
? ? ? 58e1c72ee0713d29a4d6e25f859c0504464189033cfab2cffad567ccec68fc83
? ? ? d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29a31baee04f728a28940c
? ? ? 1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358e15e9795454038456f02
? ? ? -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f00000100a1
? ? ? -f76010a538bd8d40972d41b38418cd5bbaf378e8451b78eb7dceda5ae3a3ba9d
? ? ? -6cbd2ae18687fb1bcd7b116c6832030b096c8afa8a61ddafdd663f3dd03b018f
? ? ? -1d7c159fcd5942d472432f36c323fe85ac3c2b9fbc75ad85bb131144dc918e23
? ? ? -6b09985249f345deb2d1b27e020d7036362a691e389d03a56e342ca0f7a52eca
? ? ? -34e1c8ade0c25c315c3e4a1e7e74c51f76faeb5789b5028c31fd48148dbff563
? ? ? -ec9621f010cb1cf6b4c461b2c5bdeeab1d0acb8a17e3c2f845fe6b5030fd2868
? ? ? -92c30010a3aae1a8185a247204fcedfe453a3bd958b4883f18b5c889e592d5bc
? ? ? -5dcd0b3156f7d2206fd2d17c7ff22103dbab3e4c89a1fd073cb5d9766c9c0800
? ? ? -00004010958282411b8a5b687df0217959f7b16a85e061c9f36ac624740b8b0f
? ? ? -5e68603d207f62194d71297af274515e4d331733acef78d6c7c75ab1207df16d
? ? ? -6a880d
? ? ? +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f000001005a
? ? ? +282f26e7920e7578e285224490da15406735b33c768996448cc536ff3abf2eb9
? ? ? +33a9d4466dd501cdf463757d8018641b88eea6f776edfe1f6d33b165bf06db0e
? ? ? +4aa60b595647ff21f19b05daa5823f11f9f0ce121c1b606e79a064dcd4bca84d
? ? ? +11fd8999cfa4a36ca90cc74e5ce59069150e283f4c518028fc09817c952f4b2a
? ? ? +04a7a2ab622a93cb9ad5f7621f12c2cbb4de441b4fcbf479d58f3e8fd6d8c023
? ? ? +fa47d30968faf92c2b9560956e1f17455e5a6384d9eb3647048d0bd3f5ac9177
? ? ? +25727b1a0ce2bb9e518854803b4d8666baffa2c041b1c92b331de2d316b769a6
? ? ? +1523ea2774cd7fc1a62da06b0c3bb37c696148f961747aeccb997d098b964b00
? ? ? +00004066359bed694db7445cd5063a85aa1e9f965c3bbede51bd2849597c2aaa
? ? ? +b119440b43de2fe33cee4dc2663150fdd5ffb0e508f952bda6143bd9fafa74bd
? ? ? +3656fb
? ? ??? libsoftokn3.chk
? ? ?? xxd not available in path. Falling back to Python hexlify.
? ? ? @@ -11,19 +11,19 @@
? ? ? 5c80e3430a9e943586d458a1ca22b973460bfb3e33f1d5d3b426bf50d7f20933
? ? ? 6ec0311b6d077086ca57f70b4a63f06fc88aed5060f311c744f3ce4e50422d85
? ? ? 335457038ddc664d6183171c7b0d65bc8f2c1986fce29f5d67fcd4a5f823a11a
? ? ? a2e11115843201ee88f15530e9743c1a2b54452e39b977e132af2d97e021ecf5
? ? ? 58e1c72ee0713d29a4d6e25f859c0504464189033cfab2cffad567ccec68fc83
? ? ? d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29a31baee04f728a28940c
? ? ? 1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358e15e9795454038456f02
? ? ? -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f00000100a3
? ? ? -467c6dc13a2eaac93b946d0933148d5e1b34821230ac254b51eecb06766f61bf
? ? ? -5ff6df24f103b3558b155ad94b695569516379e18a89abbb8230ee98cba2404e
? ? ? -19fef2537dc75bccce467d0eb2ab94797088442cf02c3bf495cafe5ecb01806a
? ? ? -2bf8e27c97e8f3eaf76dca86ccf456b2472f676dec92c38736a5eb72e1d20ff1
? ? ? -b8174248805cab2621733e1076ed6d72844b7e0699f01a1a3d596a7b45117efb
? ? ? -3fd7aa994f409f0f588ced2ec7ddeef18684c8605dd8cdeda5afc0a553dd16a6
? ? ? -9de1a7d7d1d6b44573c0f11ed18ddb98eda8a73f224d04725d2a2789d11352f2
? ? ? -6b56eaeb4f2dc9b8b6a544343e774f3ce1b15cb49f0e951710da1199efd01e00
? ? ? -0000403c47377f3860188231ae40c19b4d19aa55f298e3cd6e96e65a73b7eac2
? ? ? -c42f49498c504f5fe053320e49670129a0ca98bf366b9dc73e0db5a63e667851
? ? ? -765ee4
? ? ? +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be323e3c065f0000010082
? ? ? +3f81f87b51d955e580072b89f6033bdfc6174eb52b5a2047a303c3d5e951959c
? ? ? +c7be10d23a74b317294329954a6631de3ae8a029f4ba48392c25dfa166e80b20
? ? ? +5729f6557474a70755afaed999816471d0eea918b4a7cf5115e50f1e1db76fcd
? ? ? +95a7756f38bb6952e671ce196989e75dd6bbef9086ea07d86745d5a5b4a662ec
? ? ? +45f19717d72b2d43a44e3bb9e1e43dc2f3f39d873b4e5184c31c8e70df18bec3
? ? ? +0828e1cbb85f786b63f403d8881897f1ca707cc57b38c554dba674fe4e9f85da
? ? ? +e5065e8849ef5871fc28735fd6acaddbc394ef0c49f06215a8ebc1a6f6d2847d
? ? ? +2ed42a5ee3bb034d73813fbf18aa45816be15e791e2bbd6de8039c0c3e238f00
? ? ? +00004018b7b71451883e6cc23ecac6255b49c0aca8f4ab3ae7cd13735cf5baeb
? ? ? +16bf10026d2d4f693051519bd0402d5c52f383f3a45f93a5e3d8805d9d426f5d
? ? ? +6f2018

Ludo’.
B
B
Björn Höfling wrote on 31 Mar 2020 11:21
merge nss bugs
(address . request@debbugs.gnu.org)
20200331112158.663ecc89@alma-ubu
merge 40316 33507 30108
-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQQiGUP0np8nb5SZM4K/KGy2WT5f/QUCXoMLtgAKCRC/KGy2WT5f
/eHuAJ9Ee/3Cy/8A+tNax7JvGuFmMS+XCQCePXVaJktqzKzbL1JO+o95PPoSKso=
=EwHg
-----END PGP SIGNATURE-----


V
V
Vagrant Cascadian wrote on 7 Mar 23:16 +0100
Re: bug#40316: core-updates nss not reproducible
(address . 40316@debbugs.gnu.org)(address . control@debbugs.gnu.org)
87zfv9n0vy.fsf@wireframe
retitle 40316 nss not reproducible
thanks

Still an issue on master as of d29e5a83e887cd2f4f459a12cbbfc40c77e55ce2:

guix challenge --verbose --diff=simple nss
guix challenge: warning: could not determine current substitute URLs; using defaults
/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1 contents differ:
no local build for '/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1'
https://ci.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1:18xvq9cb7y2hajixnkk24bh969px0h5289hgby484iyg3x73sagp
differing files:
/lib/nss/libfreebl3.chk
/lib/nss/libfreeblpriv3.chk
/lib/nss/libnssdbm3.chk
/lib/nss/libsoftokn3.chk

1 store items were analyzed:
- 0 (0.0%) were identical
- 1 (100.0%) differed
- 0 (0.0%) were inconclusive

According to the notes in Debian, this is due to cryptographic
signatures performed at build time:



live well,
vagrant
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZeo8wQAKCRDcUY/If5cW
qpPOAQD3X++W8pz9obrPqz7Lu6lBT7irx7v7bPgKZylMqrwddgEAnZVMhE9BN2R5
5la3TTgaeQLzJ3OFykNGfOIeGuAy4QQ=
=H8rd
-----END PGP SIGNATURE-----

?