Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
cdebootstrap could not be built reproducibly.

This is the because the embedded .tar file does not sort its entries
so it inherits the (non-deterministic) filesystem ordering.

Patch attached that adds --sort=name (next to --mtime=[..]) that makes
the build reproducible for me locally.

 [0] https://reproducible-builds.org/


Regards,

Hi Bastian,

* Chris Lamb <lamby@debian.org> [2021-03-16 09:19]:


I have just tested this and it makes the package reproducible for me. Is
there anything blocking the integration of this?

Cheers Jochen