Building this package twice does not produce the bit-by-bit identical result each time, making it harder to detect CI breaches. You can read more about this at https://reproducible-builds.org/ .
Fixing bit-by-bit reproducibility also has additional advantages, such as avoiding hard-to-reproduce bugs, making content-addressed storage more effective and reducing rebuilds in such systems.
Steps To Reproduce
nix-build '<nixpkgs>' -A glibcLocales --check --keep-failed
You can use diffoscope to analyze the differences in the output of the two builds.
To view the build log of the build that produced the artifact in the binary cache:
nix-store --read-log $(nix-instantiate '<nixpkgs>' -A glibcLocales)
Additional context
https://reproducible.nixos.org/nixos-iso-minimal-r13y/diff/a5b3d7c7fa7c4b466f81cc390b0c87c59fc78a650e277a7e8f5339f84a54dff2-038a1fe81e3a2e2fe8bc7e3ff517c0cf41494c88116a14d502a6589dbae6af39.html
according to this manpage, "A locale archive is a memory-mapped file which contains all the system-provided locales" - oh great
Building this package twice does not produce the bit-by-bit identical result each time, making it harder to detect CI breaches. You can read more about this at https://reproducible-builds.org/ .
Fixing bit-by-bit reproducibility also has additional advantages, such as avoiding hard-to-reproduce bugs, making content-addressed storage more effective and reducing rebuilds in such systems.
Steps To Reproduce
You can use
diffoscopeto analyze the differences in the output of the two builds.To view the build log of the build that produced the artifact in the binary cache:
Additional context
https://reproducible.nixos.org/nixos-iso-minimal-r13y/diff/a5b3d7c7fa7c4b466f81cc390b0c87c59fc78a650e277a7e8f5339f84a54dff2-038a1fe81e3a2e2fe8bc7e3ff517c0cf41494c88116a14d502a6589dbae6af39.html
according to this manpage, "A locale archive is a memory-mapped file which contains all the system-provided locales" - oh great