My favorites | Sign in
Project Home Issues Source
New issue   Search
for
  Advanced search   Search tips   Subscriptions
Issue 92: Gerrit tarballs for the base packages aren't deterministic
4 people starred this issue and may be notified of changes. Back to list
Status:  New
Moved from:  issue gerrit:3722
Owner:  ----


Sign in to add a comment
 
Reported by yuriv...@gmail.com, Dec 13, 2015
Downloading this URL: https://go.googlesource.com/net/+archive/d75b190.tar.gz?dummy=/golang-net-d75b190.tgz
always produces a different tar archive. Contents are the same, but tar metadata is different. This prevents using such URLs as fingerprinted distfiles in FreeBSD.

It might be that https://go.googlesource.com uses BSD tar that suffers from this bug: libarchive/libarchive#623 (in this case the fix is switching to GNU tar).

Dec 14, 2015
Project Member #1 sop@google.com
Thanks for filing this bug. Its not Gerrit, but Gitiles that generates these (and even then I think its JGit's fault). But its certainly not Gerrit. So I'm going to move this over to the Gitiles project where its more likely to get attention.
Sign in to add a comment

Powered by Google Project Hosting