Opened 3 months ago

Closed 3 months ago

Last modified 3 months ago

#29510 closed task (fixed)

Check reproducibility of the build of 8.5a8

Reported by: boklm Owned by: tbb-team
Priority: Very High Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: pospeselr Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

I did the build of 8.5a8 that we are releasing:

https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.txt
https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.txt-boklm.asc

https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.incrementals.txt
https://dist.torproject.org/torbrowser/8.5a8/sha256sums-unsigned-build.incrementals.txt-boklm.asc

In order to verify that the build of this release is reproducible, we need a second person to do a build. We usually do that before publishing a release. However we are having some delay doing it this time, and because this release includes an important security fix, we will be doing this verification after the release is published.

Child Tickets

Change History (3)

comment:1 Changed 3 months ago by gk

Resolution: fixed
Status: newclosed

Looks good. I added my sigs. (Not sure whether there needs to be something done to get the updated 8.5a8 dir on dist to archive.tpo. If so, please do the magic incantations. :) )

comment:2 Changed 3 months ago by boklm

pospeselr mentioned his build was matching, except the mar-tools-mac64.zip file.

I uploaded there the mar-tools-mac64.zip he sent me:
https://people.torproject.org/~boklm/bug_29510/mar-tools-mac64.zip

And the diff from diffoscope:
https://people.torproject.org/~boklm/bug_29510/mar-tools.diff

comment:3 in reply to:  2 Changed 3 months ago by boklm

Replying to boklm:

pospeselr mentioned his build was matching, except the mar-tools-mac64.zip file.

I uploaded there the mar-tools-mac64.zip he sent me:
https://people.torproject.org/~boklm/bug_29510/mar-tools-mac64.zip

And the diff from diffoscope:
https://people.torproject.org/~boklm/bug_29510/mar-tools.diff

GeKo mentioned on IRC that this diff is caused by #28102.

Note: See TracTickets for help on using tickets.