[Buildroot] [PATCH v4 1/1] package/tar: bump target version to 1.32 (host is kept at 1.31)

Arnout Vandecappelle arnout at mind.be
Tue Jan 21 21:09:37 UTC 2020



On 18/01/2020 02:26, Carlos Santos wrote:
> On Wed, Jan 15, 2020 at 9:16 PM James Hilliard
> <james.hilliard1 at gmail.com> wrote:
>>
>> From: Luc Creti <luc.creti at atos.net>
>>
>> The host tar is used to create the archives in the VCS download backends
>> (git, cvs, svn, hg...) and tar 1.30 and forward have changed the way
>> they generate the archives.
>>
>> So, all the archives that have been generated before 1.30 was released
>> are not bit-for-bit reproducible (even though the extracted content
>> would be), so the hashes we have for those archives would not match.
>>
>> Hence host-tar requires a patch to restore reproducibility.
>>
>> Since there is no tar-1.32.cpio.gz available we must keep host-tar at
>> version 1.31.
> 
> We don't actually need the cpio.gz file. We can use the installed tar,
> whatever it is, to extract the tar-1.32.tar.xz:
> 
> define HOST_TAR_EXTRACT_CMDS
>         mkdir -p $(@D)
>         cd $(@D) && \
>                 $(call suitable-extractor,$(HOST_TAR_SOURCE))
> $(TAR_DL_DIR)/$(HOST_TAR_SOURCE) \
>                 | tar --strip-components=1 -xf -

 IIRC, the original reason to have host-tar was because older tar didn't
understand --strip-components. That's why tar was downloaded as a cpio archive.

 Later on we became fixed on one single version because newer tar would create
slightly different tarballs so the hash would be different.


 Regards,
 Arnout

> endef
> 



More information about the buildroot mailing list