[OTR-dev] Reproducible builds of pidgin-otr for Windows

[HW42]

Ian Goldberg:
> On Sun, Mar 20, 2016 at 05:20:08PM -0400, Ian Goldberg wrote:
>> Ah, I went ahead and made the changes.  It's actually better than I
>> thought.  We don't need to run zip under faketime if we use the -o
>> option (which sets the timestamp for the archive itself to equal the
>> oldest timestamp of a file in the archive).  We also add the -X option,
>> which removes Unix uid/gids and extended timestamps from the zip file
>> entirely.  We also use chmod -R u=rwX,go=rX to canonicalize the
>> permissions on the files.
>> 
>> I've updated the source tarball in place:
>> 
>> https://cs.uwaterloo.ca/~iang/pidgin-otr-4.0.2-repro.tar.gz
>> 
>> Unpack it, and just run INSTALL.mingw against a clean Ubuntu 14.04.  (It
>> now installs all the packages you suggested.)
>> 
>> I'm building it now myself.  Let's compare hashes in a few minutes.  ;-)
> 
> OK, built.  The above tarball, whose hash is itself:
> 
> 22c6a6c250ca277e36ffed1ff1bd6d366209664471c80c3c507f8811ba5c28da  pidgin-otr-4.0.2-repro.tar.gz
> 
> generates these files for me:
> 
> 19f315c8317105a89d5b6fde6c2caa63ffa2e150df5fb0d67ee20ac985b0b191  pidgin-otr-4.0.2.exe
> 7e9dc2175591d7aabc9f96e737817fa917f3e4441b62727bb9730e516c47822e  pidgin-otr-4.0.2.zip
> 
> How about yoU?

I can reproduce this in an Ubuntu Trusty chroot (/proc and /dev/shm need
to be mounted).

I tested (most) of the variations from [0]. I found only one problem:
In Makefile.mingw:148 it should be LC_ALL=C instead of LANG=C else the
locale settings can change the sort order of the files in the zip.

> [...]
> This means it can't find /usr/i586-mingw32msvc/share/aclocal/libgcrypt.m4.
> Aha: it's probably looking for the *native* one and failing.
> 
> But that said, we shouldn't actually have to run autoreconf (or
> bootstrap) at all.  Can you try just removing "./bootstrap" from
> INSTALL.mingw and see what happens?

Another option is to set ACLOCAL_PATH:

  export ACLOCAL_PATH=/usr/i586-mingw32msvc/share/aclocal


HW42

[0]: https://tests.reproducible-builds.org/reproducible.html#variation

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cypherpunks.ca/pipermail/otr-dev/attachments/20160321/636449f0/attachment-0001.sig>