Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 913917

Summary: dev-lang/perl embeds kernel version string into installed files, affecting reproducibility.
Product: Gentoo Linux Reporter: thssld
Component: Current packagesAssignee: Gentoo Perl team <perl>
Status: UNCONFIRMED ---    
Severity: trivial    
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: All   
See Also: https://github.com/Perl/perl5/issues/21135
Whiteboard:
Package list:
Runtime testing required: ---
Bug Depends on:    
Bug Blocks: 913920    

Description thssld 2023-09-10 06:57:47 UTC
Some installed files of dev-lang/perl contains the kernel version of the building host. This behavior affects bin-pkg level reproducibility.

Here is the list of affected files:

> /usr/lib64/perl5/5.36/x86_64-linux/CORE/config.h
> /usr/lib64/perl5/5.36/x86_64-linux/Config.pm
> /usr/lib64/perl5/5.36/x86_64-linux/Config_heavy.pl
> /usr/lib64/perl5/5.36/x86_64-linux/Errno.pm

It seems that following lines caused this behavior:

> config_h.SH
>   49  * Target system     : $myuname
> 1412 #define OSVERS "$osvers"                /**/

> configpm
> 1236 osvers: 982

> Configure
> 24494 # Target system     : $myuname
> 25465 osvers='$osvers'

> ext/Errno/Errno_pm.PL
> 300 "$archname-$Config{'osvers'}" or
> 301         die "Errno architecture ($archname-$Config{'osvers'}) does not match executable architecture...
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-09-10 07:17:28 UTC
Thanks for filing this & looking into this class of problem.

This has caused some other interesting problems before, too.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2023-09-10 07:42:55 UTC
> This has caused some other interesting problems before, too.

sorry, I pressed submit too early: in the other case, it seems/seemed to be a problem in itself in Perl, but it's still notable: https://github.com/Perl/perl5/issues/21135.