search

aqqaluk / gitiles

Automatically exported from code.google.com/p/gitiles
0 stars 0 forks source link

Gerrit tarballs for the base packages aren't deterministic #92

Open GoogleCodeExporter opened 8 years ago

GoogleCodeExporter commented 8 years ago 
Downloading this URL: 
https://go.googlesource.com/net/+archive/d75b190.tar.gz?dummy=/golang-net-d75b19
0.tgz
always produces a different tar archive. Contents are the same, but tar 
metadata is different. This prevents using such URLs as fingerprinted distfiles 
in FreeBSD.

It might be that https://go.googlesource.com uses BSD tar that suffers from 
this bug: libarchive/libarchive#623 (in this case the fix is switching to GNU 
tar).

Original issue reported on code.google.com by yuriv...@gmail.com on 14 Dec 2015 at 12:27

GoogleCodeExporter commented 8 years ago 
Thanks for filing this bug. Its not Gerrit, but Gitiles that generates these 
(and even then I think its JGit's fault). But its certainly not Gerrit. So I'm 
going to move this over to the Gitiles project where its more likely to get 
attention.

Original comment by sop@google.com on 14 Dec 2015 at 3:03