pyrox.dev
Merge pull request #192724 from raboof/add-unreproducible-package-issue-template
Add issue template for unreproducible packages
authored by Arnout Engelen and committed by GitHub c6cdcfc1 e786e55e
+31
.github/ISSUE_TEMPLATE/unreproducible_package.md
+31
.github/ISSUE_TEMPLATE/unreproducible_package.md
···
1
+
---
2
+
name: Unreproducible package
3
+
about: A package that does not produce a bit-by-bit reproducible result each time it is built
4
+
title: ''
5
+
labels: '0.kind: enhancement', '6.topic: reproducible builds'
6
+
assignees: ''
7
+
8
+
---
9
+
10
+
Building this package twice does not produce the bit-by-bit identical result each time, making it harder to detect CI breaches. You can read more about this at https://reproducible-builds.org/ .
11
+
12
+
Fixing bit-by-bit reproducibility also has additional advantages, such as avoiding hard-to-reproduce bugs, making content-addressed storage more effective and reducing rebuilds in such systems.
13
+
14
+
### Steps To Reproduce
15
+
16
+
```
17
+
nix-build '<nixpkgs>' -A ... --check --keep-failed
18
+
```
19
+
20
+
You can use `diffoscope` to analyze the differences in the output of the two builds.
21
+
22
+
To view the build log of the build that produced the artifact in the binary cache:
23
+
24
+
```
25
+
nix-store --read-log $(nix-instantiate '<nixpkgs>' -A ...)
26
+
```
27
+
28
+
### Additional context
29
+
30
+
(please share the relevant fragment of the diffoscope output here,
31
+
and any additional analysis you may have done)