-
-
Notifications
You must be signed in to change notification settings - Fork 29.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
adding mtime option to gzip open() #91372
Comments
|
init of class GzipFile has mtime as an optional argument, but open() function does not. When using open(), mtime will always be set to the current time and so far there was no way of fixing it to a specific timestamp. In case two people would tar.gz the same file and take its sha, the shas would be different. With an option to fix the mtime, they could have a unique sha. PR containing code change and the tests is already ready. |
Python script generate-build/generate-quirk-builtin.py uses gzip to generate the builtin.quirk.gz artifact during building. A timestamp is appended to the file, making fwupd unreproducible as can be seen by the diffoscope log here: https://reproducible.archlinux.org/api/v0/builds/534033/diffoscope Until gzip.open() supports mtime (see python/cpython#91372), I suggest using gzip.GZipFile() instead and passing mtime=0. This generates the same file without embedding a timestamp.
Python script generate-build/generate-quirk-builtin.py uses gzip to generate the builtin.quirk.gz artifact during building. A timestamp is appended to the file, making fwupd unreproducible as can be seen by the diffoscope log here: https://reproducible.archlinux.org/api/v0/builds/534033/diffoscope Until gzip.open() supports mtime (see python/cpython#91372), I suggest using gzip.GZipFile() instead and passing mtime=0. This generates the same file without embedding a timestamp.
Python script generate-build/generate-quirk-builtin.py uses gzip to generate the builtin.quirk.gz artifact during building. A timestamp is appended to the file, making fwupd unreproducible as can be seen by the diffoscope log here: https://reproducible.archlinux.org/api/v0/builds/534033/diffoscope Until gzip.open() supports mtime (see python/cpython#91372), I suggest using gzip.GZipFile() instead and passing mtime=0. This generates the same file without embedding a timestamp.
Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.
Show more details
GitHub fields:
bugs.python.org fields:
The text was updated successfully, but these errors were encountered: