[OTR-dev] Reproducible builds of pidgin-otr for Windows

[David Goulet]

On 20 Mar (17:25:27), Ian Goldberg wrote:
> On Sun, Mar 20, 2016 at 05:20:08PM -0400, Ian Goldberg wrote:
> > Ah, I went ahead and made the changes.  It's actually better than I
> > thought.  We don't need to run zip under faketime if we use the -o
> > option (which sets the timestamp for the archive itself to equal the
> > oldest timestamp of a file in the archive).  We also add the -X option,
> > which removes Unix uid/gids and extended timestamps from the zip file
> > entirely.  We also use chmod -R u=rwX,go=rX to canonicalize the
> > permissions on the files.
> > 
> > I've updated the source tarball in place:
> > 
> > https://cs.uwaterloo.ca/~iang/pidgin-otr-4.0.2-repro.tar.gz
> > 
> > Unpack it, and just run INSTALL.mingw against a clean Ubuntu 14.04.  (It
> > now installs all the packages you suggested.)
> > 
> > I'm building it now myself.  Let's compare hashes in a few minutes.  ;-)
> 
> OK, built.  The above tarball, whose hash is itself:
> 
> 22c6a6c250ca277e36ffed1ff1bd6d366209664471c80c3c507f8811ba5c28da  pidgin-otr-4.0.2-repro.tar.gz
> 
> generates these files for me:
> 
> 19f315c8317105a89d5b6fde6c2caa63ffa2e150df5fb0d67ee20ac985b0b191  pidgin-otr-4.0.2.exe
> 7e9dc2175591d7aabc9f96e737817fa917f3e4441b62727bb9730e516c47822e  pidgin-otr-4.0.2.zip

Success for me :)

19f315c8317105a89d5b6fde6c2caa63ffa2e150df5fb0d67ee20ac985b0b191 pidgin-otr-4.0.2.exe
7e9dc2175591d7aabc9f96e737817fa917f3e4441b62727bb9730e516c47822e pidgin-otr-4.0.2.zip

Cheers!
David

> 
> How about yoU?
> 
>    - Ian
> _______________________________________________
> OTR-dev mailing list
> OTR-dev at lists.cypherpunks.ca
> http://lists.cypherpunks.ca/mailman/listinfo/otr-dev
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 603 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-dev/attachments/20160320/d88b134a/attachment.sig>