Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 913917 - dev-lang/perl embeds kernel version string into installed files, affecting reproducibility.
Summary: dev-lang/perl embeds kernel version string into installed files, affecting re...
Status: UNCONFIRMED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All All
: Normal trivial (vote)
Assignee: Gentoo Perl team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks: 913920
  Show dependency tree
 
Reported: 2023-09-10 06:57 UTC by thssld
Modified: 2023-09-10 07:42 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description thssld 2023-09-10 06:57:47 UTC
Some installed files of dev-lang/perl contains the kernel version of the building host. This behavior affects bin-pkg level reproducibility.

Here is the list of affected files:

> /usr/lib64/perl5/5.36/x86_64-linux/CORE/config.h
> /usr/lib64/perl5/5.36/x86_64-linux/Config.pm
> /usr/lib64/perl5/5.36/x86_64-linux/Config_heavy.pl
> /usr/lib64/perl5/5.36/x86_64-linux/Errno.pm

It seems that following lines caused this behavior:

> config_h.SH
>   49  * Target system     : $myuname
> 1412 #define OSVERS "$osvers"                /**/

> configpm
> 1236 osvers: 982

> Configure
> 24494 # Target system     : $myuname
> 25465 osvers='$osvers'

> ext/Errno/Errno_pm.PL
> 300 "$archname-$Config{'osvers'}" or
> 301         die "Errno architecture ($archname-$Config{'osvers'}) does not match executable architecture...
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-09-10 07:17:28 UTC
Thanks for filing this & looking into this class of problem.

This has caused some other interesting problems before, too.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-09-10 07:42:55 UTC
> This has caused some other interesting problems before, too.

sorry, I pressed submit too early: in the other case, it seems/seemed to be a problem in itself in Perl, but it's still notable: https://github.com/Perl/perl5/issues/21135.