再現性のあるビルド/ステータスのソースを表示

[[Category:パッケージ管理]]
[[Category:パッケージ開発]]
[[en:Reproducible builds/Status]]
[[pt:Reproducible builds (Português)/Status]]
Arch Linux は [[core]] および [[extra]] パッケージを常に再構築しており、[https://reproducible.archlinux.org ステータス ページ] があります。このページには、不良パッケージのステータスと修正が必要なものが含まれています。

== 問題 ==

=== 全般的 ===

* ファイル順序の問題と btrfs サイズのバグを解決するには、pacman 5.2 未満でビルドされたすべてのパッケージでリビルドが必要です。ファイルの順序の問題については、影響を受ける [[extra]] パッケージがミラーディレクトリで次の 1 つのライナーを実行していることがわかります。

 for i in /srv/ftp/extra/os/x86_64/*.pkg.tar.??; do
    bsdtar -tf $i | grep "^\." > pkg-order
    sort pkg-order > sort-order
    if ! diff pkg-order sort-order &>/dev/null; then
      echo $i;
    fi
    rm pkg-order sort-order
 done

==== ファイル順序再構築 FTBFS ====

 accounts-qml-module-0.7-2-x86_64.pkg.tar.xz
 archboot-2019.03-1-any.pkg.tar.xz
 cmark-0.29.0-1-x86_64.pkg.tar.xz
 gtk-sharp-2-2.12.45-2-x86_64.pkg.tar.xz
 guile1.8-1.8.8-7-x86_64.pkg.tar.xz
 java11-openjfx-11.0.3.u1-1-x86_64.pkg.tar.xz
 java11-openjfx-doc-11.0.3.u1-1-x86_64.pkg.tar.xz
 java11-openjfx-src-11.0.3.u1-1-x86_64.pkg.tar.xz
 java8-openjfx-8.u202-3-x86_64.pkg.tar.xz
 java8-openjfx-doc-8.u202-3-x86_64.pkg.tar.xz
 java8-openjfx-src-8.u202-3-x86_64.pkg.tar.xz
 java-openjfx-13.u14-1-x86_64.pkg.tar.xz
 java-openjfx-doc-13.u14-1-x86_64.pkg.tar.xz
 java-openjfx-src-13.u14-1-x86_64.pkg.tar.xz
 jdk10-openjdk-10.0.2.u13-2-x86_64.pkg.tar.xz
 jre10-openjdk-10.0.2.u13-2-x86_64.pkg.tar.xz
 jre10-openjdk-headless-10.0.2.u13-2-x86_64.pkg.tar.xz
 jsonrpc-glib-3.34.0-1-x86_64.pkg.tar.xz
 libva-vdpau-driver-0.7.4-4-x86_64.pkg.tar.xz
 liferea-1.12.7-1-x86_64.pkg.tar.xz
 linux-atm-2.5.2-6-x86_64.pkg.tar.xz
 mono-tools-4.2-2-x86_64.pkg.tar.xz
 npapi-sdk-0.27.2-2-any.pkg.tar.xz
 nss_ldap-265-7-x86_64.pkg.tar.xz
 openjdk10-doc-10.0.2.u13-2-x86_64.pkg.tar.xz
 openjdk10-src-10.0.2.u13-2-x86_64.pkg.tar.xz
 pam_ldap-186-6-x86_64.pkg.tar.xz
 portaudio-1:19.6.0-6-x86_64.pkg.tar.xz
 qtav-1.13.0-1-x86_64.pkg.tar.xz

==== JAR ファイルを含むパッケージ ====

JAR には各ファイルの変更タイムスタンプが含まれるため、再現できなくなります。ビルドシステムに応じて、これに使用できるさまざまなソリューションがあります。

===== Ant =====

現在、再現可能なビルドはサポートされていません。[https://bz.apache.org/bugzilla/show_bug.cgi?id=61269 アップストリーム機能リクエスト] を参照してください。

===== Gradle =====

再現性のあるビルドをサポートする必要があります [https://docs.gradle.org/current/userguide/working_with_files.html#sec:reproducible_archives すぐに使用できます]

===== Maven =====

固定タイムスタンプに設定できる {{ic|project.build.outputTimestamp}} プロパティをサポートします。Maven プラグインの最近のバージョンは、このプロパティを尊重して再現可能なアーティファクトを作成します。  このプロパティはプロジェクトの {{ic|pom.xml}} ファイルに設定する必要があります。アップストリームでこれがまだ行われていない場合は、{{bc|1=mvn -Dproject.build.outputTimestamp="$SOURCE_DATE_EPOCH" clean package}} プラグインを再現可能なビルドをサポートする最新バージョンに更新するには、プロジェクトの {{ic|pom.xml}} にパッチを適用する必要がある場合があります。[https://maven. 「apache.org/guides/mini/guide-reproducible-builds.html 再現性のあるビルドへの Maven ガイド] で、最低限必要なバージョンや追加の必要な構成オプションなどの詳細情報を確認できます。

パッケージの例 (Maven プラグインのバージョン更新用のパッチを含む): [https://gitlab.archlinux.org/archlinux/packaging/packages/junit-system-rules/-/blob/main/PKGBUILD#L36 junit-system-rules]

===== OpenJDK jar コマンド =====

組み込みの OpenJDK {{ic|jar}} プログラムは、{{ic|SOURCE_DATE_EPOCH}} [https://bugs.openjdk.java.net/browse/JDK-8244592 OpenJDK バージョン 15 以降] をサポートします。

===== strip-nondeterminism =====

最後の手段として、Debian の [https://salsa.debian.org/reproducible-builds/strip-nondeterminismstrip-nondeterminism] を使用すると、JAR を含むさまざまなファイルタイプからファイルタイムスタンプなどの再現不可能なメタデータを削除できます。これは万能薬ではなく (たとえば、ビルドシステムには JAR マニフェストに追加の再現不可能なメタデータが含まれる可能性があり、ストリップ非決定性によりこれらの一部が削除されますが、すべてが削除されるわけではありません)、再現可能なビルドのネイティブサポートがない場合の最後の手段としてのみ使用する必要があります。利用可能: {{bc|strip-nondeterminism --timestamp "$SOURCE_DATE_EPOCH"}}

パッケージ例: [https://gitlab.archlinux.org/archlinux/packaging/packages/pdftk/-/blob/main/PKGBUILD#L30 pdftk]

==== KDE Kdeveloper project files ====

KDE creates Package App template ''.tar.bz2'' files which tar files and userid is different when reproducing with repro which might be a bug in repro. https://gist.githubusercontent.com/jelly/570313f56ee59be7674ad4cc002232e7/raw/b85536690c48b23ce97650e8db8f0ca18c2dbf1a/gistfile1.txt

[https://invent.kde.org/frameworks/extra-cmake-modules/-/blob/master/kde-modules/KDEPackageAppTemplates.cmake The cmake file which generates the issue].

==== Doxygen documentation build with graphviz-2.44.0-2 ====

graphviz lacked a dependency on libpng, making PNG generation unavailable in dot as graphviz was installed before libpng was available and therefore not marking it as to be dlopen'd. All packages which depend on doxygen for generation documentation and with the following diff require a rebuild.

 │ │ --rw-r--r--   0 root         (0) root         (0)    20234 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser.html
 │ │ --rw-r--r--   0 root         (0) root         (0)      265 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser__inherit__graph.map
 │ │ --rw-r--r--   0 root         (0) root         (0)       32 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser__inherit__graph.md5
 │ │ --rw-r--r--   0 root         (0) root         (0)     3136 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser__inherit__graph.png
 │ │ +-rw-r--r--   0 root         (0) root         (0)    19961 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser.html
 │ │ +-rw-r--r--   0 root         (0) root         (0)      598 2020-05-16 12:32:36.000000 usr/share/doc/grantlee/classGrantlee_1_1Parser__inherit__graph.dot

=== [core] ===

{| class="wikitable sortable"
! Package
! Issue
! Solution/Patch
! Assignee
! Solved
|-
| {{Pkg|audit}} || [https://bugs.archlinux.org/task/74882 FTBFS with linux-headers 5.17+] || [https://bugs.archlinux.org/task/74882 proposed] || none || {{No}}
|-
| {{Pkg|dmraid}} || FTBFS due to {{ic|1=-Werror=format-security}} || [https://listman.redhat.com/archives/ataraid-list/ proposed upstream] on 2022-10-06 || none || {{No}}
|-
| {{Pkg|gcc-ada}} || File times within some ''.ads'' files || none || none || {{No}}
|-
| {{Pkg|ldns}} || binary containing source file name differ depending on makeflags || [https://github.com/NLnetLabs/ldns/pull/188 proposed upstream] || none || {{No}}
|-
| {{Pkg|libverto}} || missing files when building with /bin/sh = dash || [https://github.com/latchset/libverto/commit/39f2ef6317254297a8f6efa2fbadf4d913976d27 merged] but not released (latest release 0.3.2 from 2021-03) || none || {{No}}
|-
| {{Pkg|linux}} || Signed modules || none || none || {{No}}
|-
| {{Pkg|linux-docs}} || lots of issues - ordering, linking, ... || none || none || {{No}}
|-
| {{Pkg|linux-headers}} || {{ic|/usr/lib/modules/*/build/vmlinux}} [https://gist.github.com/allanmcrae/31604043163f6379139c767e7d9efefd diff]{{Dead link|2021|11|15|status=404}} || none || none || {{No}}
|-
| {{Pkg|linux-lts}} || as for {{Pkg|linux}} || none || none || {{No}}
|-
| {{Pkg|linux-lts-docs}} || as for {{Pkg|linux-docs}} || none || none || {{No}}
|-
| {{Pkg|linux-lts-headers}} || as for {{Pkg|linux-headers}} || none || none || {{No}}
|-
| {{Pkg|nss}} || Binary differences in {{ic|/usr/lib/lib{freebl3,freeblpriv3,softokn3}.chk}} from [https://bugzilla.opensuse.org/show_bug.cgi?id=1081723 shlibsign] || none || none || {{No}}
|-
| {{Pkg|perl}} || [https://pkgbuild.com/~jelle/perl.txt timestamp, uname encoded in build] || none || none || {{No}}
|-
| {{Pkg|syslinux}} || [https://bugs.archlinux.org/task/70765 FTBFS] || proposed in issue || none || {{No}}
|}

=== [extra] ===

{| class="wikitable sortable"
! Package
! Issue
! Solution/Patch
! Assignee
! Solved
|-
| {{Pkg|abiword}} || {{ic|usr/lib/python2.7/site-packages/gi/overrides/Abi.pyc}} and {{ic|.pyo}} || none || none || {{No}}
|-
| {{Pkg|accounts-qml-module}} || {{ic|.BUILDINFO}} size issue - FTBFS during rebuild || none || none || {{No}}
|-
| {{Pkg|amdvlk}} || many differences in {{ic|usr/lib/amdvlk64.so}} || none || none || {{No}}
|-
| {{Pkg|ant}} || ''.jar'' file differences || none || none || {{No}}
|-
| {{Pkg|ant-doc}} || lots of timestamps (javadoc), and ''.zip'' file difference || none || none || {{No}}
|-
| {{AUR|antlr2}} || {{ic|usr/share/java/antlr2.jar}} || none || none || {{No}}
|-
| {{Pkg|apparmor}} || Adding files to backup array needs sorting, {{ic|usr/lib/python3.8/site-packages/LibAppArmor/__pycache__/LibAppArmor.cpython-38.pyc}} || none || none || {{No}}
|-
| {{Pkg|asymptote}} || Dates in html and info. PDF document differences (dates?) || none || none || {{No}}
|-
| {{Pkg|autogen}} || Timestamp in man pages, {{ic|sr/share/autogen/libopts-42.1.17.tar.gz}} with different file ownership, and a small binary change in {{ic|usr/bin/autogen}} || need export MAN_PAGE_DATE=... and configure --enable-timeout=70 || none || {{No}}
|-
| {{Pkg|bigloo}} || uname and timestamps all over the place || none || none || {{No}}
|-
| {{Pkg|breezy}} || 3.0.2.3-3 reproducible with both repro and makechrootpkg || tooling issue? || none || {{No}}
|-
| {{Pkg|brltty}} || {{ic|usr/share/java/brlapi.jar}} || none || none || {{No}}
|-
| {{Pkg|check-docs}} || lots of texi2html timestamps || none || none || {{No}}
|-
| {{Pkg|chromaprint}} || binary difference in {{ic|usr/bin/fpcalc}} || none || none || {{No}}
|-
| {{Pkg|clisp}} || ip address; timestamps in ps docs, likely much more || none || none || {{No}}
|-
| {{Pkg|colord}} || Profile ID differs in {{ic|usr/share/color/icc/colord/{Crayons,x11-colors}.icc}} and binary differences in {{ic|usr/lib/colord}} || none || none || {{No}}
|-
| {{Pkg|conky}} || timestamp (from toluapp) and uname (at minimum) || none || none || {{No}}
|-
| {{Pkg|deluge}} || .pyc file, .egg files || none || none || {{No}}
|-
| {{Pkg|doxygen-docs}} || lots of pdfs with differences || none || none || {{No}}
|-
| {{Pkg|ecl}} || uname, timestamp, gzip, lots of other binary differences || none || none || {{No}}
|-
| {{Pkg|eclipse-ecj}} || .jar file || none || none || {{No}}
|-
| {{Pkg|efitools}} || {{ic|/usr/share/efitools/efi/LockDown.efi}} has binary differences || none || none || {{No}}
|-
| {{Pkg|efl}} || lots of binary differences || none || none || {{No}}
|-
| {{Pkg|efl-docs}} || pdf differences, including dates || none || none || {{No}}
|-
| {{Pkg|emacs}} || binary differences in {{ic|usr/bin/emacs}} || none || none || {{No}}
|-
| {{Pkg|extra-cmake-modules}} || Small ordering diff in {{ic|/usr/share/doc/ECM/ExtraCMakeModules.qch}} || none || none || {{No}}
|- 
| {{Pkg|firefox}} || It is firefox ; [https://github.com/bmwiedemann/theunreproduciblepackage/tree/master/pgo PGO?] || [https://bugzilla.mozilla.org/show_bug.cgi?id=1568145 bug] + [https://github.com/bmwiedemann/openSUSE/blob/master/packages/m/MozillaFirefox/mozilla-bmo1568145.patch patch]{{Dead link|2023|05|20|status=404}} || none || {{No}}
|-
| {{Pkg|fontconfig}} || FTBFS with repro. Timestamp inside man pages || none || none || {{No}}
|-
| {{Pkg|fontforge}} || Binary differences in fontforge and some libraries || none || none || {{No}}
|-
| {{Pkg|libakonadi}} || user/group names of files in {{ic|usr/share/kdevappwizard/templates/akonadi{resource,serializer}.tar.bz2}} || none || none || {{No}}
|-
| {{Pkg|libbluray}} || file attribute(?) differences in {{ic|usr/share/java/{libbluray{,-awt}-j2se-1.2.0.jar}} || none || none || {{No}}
|-
| {{Pkg|libgee}} || Binary differences in {{ic|usr/lib/libgee-0.8.so.2.6.1}} || none || none || {{No}}
|-
| {{Pkg|libgtop}} || uname in {{ic|/usr/bin/libgtop_server2}} || none || none || {{No}}
|-
| {{Pkg|libibus}} ||{{ic|/usr/lib/python2.7/site-packages/gi/overrides/IBus.pyc}} and {{ic|.pyo}} have differences || none || none || {{No}}
|-
| {{Pkg|libjpeg-turbo}} || FTBFS under repro.  makerepropkg - many differences everywhere... || none || none || {{No}}
|-
| {{Pkg|liblangtag}} || {{ic|/usr/share/gir-1.0/LangTag-0.6.gir}} || none || none || {{No}}
|-
| {{Pkg|libmp4v2}} || timestamp in {{ic|usr/include/mp4v2/project.h}} & {{ic|usr/lib/libmp4v2.so.2.0.0}} || none || none || {{No}}
|-
| {{Pkg|libquvi}} || timestamp in {{ic|libquvi-0.9-0.9.4.so}} || none || none || {{No}}
|-
| {{Pkg|lirc}} || timestamp in yaml files, {{ic|usr/share/lirc/lirc-0.10.1.tar.gz}} has lots of timestamp differences, repro causes poll() detection issue not found in makerepropkg || [https://github.com/bmwiedemann/openSUSE/blob/master/packages/l/lirc/reproducible.patch patch] || none || {{No}}
|-
| {{Pkg|meson}} || ''.pyc'' files, also some test ''.pyc'' files missing || none || none || {{No}}
|-
| {{Pkg|r}} || Lots of timestamps in files, gzip timestamps, randomly(?) generated paths in {{ic|/tmp/}}, binary differences... || none || none || {{No}}
|-
| {{Pkg|transmission-gtk}} || uname in {{ic|usr/bin/transmission-gtk}}, build with vendored dependencies (miniupncpc which contains {{ic|uname -r}}) || none || none || {{No}}
|-
| {{Pkg|zabbix-agent2}} || Timestamp in {{ic|/usr/bin/zabbix_agent2}} || none || none || {{No}}
|-
| {{Pkg|zeitgeist}} || [https://gist.github.com/allanmcrae/01cff033e51d593d3bc841d64221f9fe diff]{{Dead link|2021|11|15|status=404}} Weird text differences in {{ic|/usr/lib/libzeitgeist-2.0.so.0.0.0}} || none || none || {{No}}
|}

=== [multilib] ===

{| class="wikitable sortable"
! Package
! Issue
! Solution/Patch
! Assignee
! Solved
|-
| {{Pkg|lib32-keyutils}} || Binary includes build date || [https://bugs.archlinux.org/task/76138 proposed] || none || {{No}}
|}