Req #69727 [NEW]: Remove timestamps from build to make it reproducible
| From: | thijs at debian dot org | Date: | Fri, 29 May 2015 08:19:28 +0000 |
| Subject: | Req #69727 [NEW]: Remove timestamps from build to make it reproducible | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-192995@lists.php.net to get a copy of this message | ||
From: thijs at debian dot org
Operating system:
PHP version: 5.6.9
Package: Unknown/Other Function
Bug Type: Feature/Change Request
Bug description:Remove timestamps from build to make it reproducible
Description:
------------
The PHP build embeds timestamps into the generated binaries at build
time. This makes the build not reproducible, as in that the same source
code will not generate the bitwise exact same binaries.
Reproducible builds are important amongst others to verify the integrity
of distributions. See: https://wiki.debian.org/ReproducibleBuilds
We believe the value of the embedded timestamps is very limited. They do
not indicate which release, commit or git branch has been built, only a
date which in itself does not really say something. Therefore it seems
safe to remove them.
Test script:
---------------
https://reproducible.debian.net/rb-pkg/unstable/amd64/php5.html
Expected result:
----------------
Building PHP two times yields bitwise identical binaries.
Actual result:
--------------
Building PHP two times yields bitwise different binaries.
--
Edit bug report at https://bugs.php.net/bug.php?id=69727&edit=1
--
Try a snapshot (PHP 5.4): https://bugs.php.net/fix.php?id=69727&r=trysnapshot54
Try a snapshot (PHP 5.5): https://bugs.php.net/fix.php?id=69727&r=trysnapshot55
Try a snapshot (trunk): https://bugs.php.net/fix.php?id=69727&r=trysnapshottrunk
Fixed in SVN: https://bugs.php.net/fix.php?id=69727&r=fixed
Fixed in release: https://bugs.php.net/fix.php?id=69727&r=alreadyfixed
Need backtrace: https://bugs.php.net/fix.php?id=69727&r=needtrace
Need Reproduce Script: https://bugs.php.net/fix.php?id=69727&r=needscript
Try newer version: https://bugs.php.net/fix.php?id=69727&r=oldversion
Not developer issue: https://bugs.php.net/fix.php?id=69727&r=support
Expected behavior: https://bugs.php.net/fix.php?id=69727&r=notwrong
Not enough info: https://bugs.php.net/fix.php?id=69727&r=notenoughinfo
Submitted twice: https://bugs.php.net/fix.php?id=69727&r=submittedtwice
register_globals: https://bugs.php.net/fix.php?id=69727&r=globals
PHP 4 support discontinued: https://bugs.php.net/fix.php?id=69727&r=php4
Daylight Savings: https://bugs.php.net/fix.php?id=69727&r=dst
IIS Stability: https://bugs.php.net/fix.php?id=69727&r=isapi
Install GNU Sed: https://bugs.php.net/fix.php?id=69727&r=gnused
Floating point limitations: https://bugs.php.net/fix.php?id=69727&r=float
No Zend Extensions: https://bugs.php.net/fix.php?id=69727&r=nozend
MySQL Configuration Error: https://bugs.php.net/fix.php?id=69727&r=mysqlcfg