[tor-bugs] #20426 [Applications/Tor Browser]: Getting rbm-based Tor Browser builds reproductible for all platforms

[Tor Bug Tracker & Wiki]

#20426: Getting rbm-based Tor Browser builds reproductible for all platforms
--------------------------------------+--------------------------
 Reporter:  boklm                     |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-gitian                |  Actual Points:
Parent ID:  #17379                    |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by boklm):

 When building twice on the same host (I did not try building on different
 hosts yet), the Linux and OSX builds are now reproducible.

 For the Windows build, we still have one file in the bundle that is not
 matching: `Browser/TorBrowser/Tor/tor.exe`, with the following diff:
 {{{
 --- tmp/1/Browser/TorBrowser/Tor/tor.exe
 +++ tmp/2/Browser/TorBrowser/Tor/tor.exe
 @@ -2,20 +2,20 @@
 │  0000010: b800 0000 0000 0000 4000 0000 0000 0000  ........ at .......
 │  0000020: 0000 0000 0000 0000 0000 0000 0000 0000  ................
 │  0000030: 0000 0000 0000 0000 0000 0000 8000 0000  ................
 │  0000040: 0e1f ba0e 00b4 09cd 21b8 014c cd21 5468  ........!..L.!Th
 │  0000050: 6973 2070 726f 6772 616d 2063 616e 6e6f  is program canno
 │  0000060: 7420 6265 2072 756e 2069 6e20 444f 5320  t be run in DOS
 │  0000070: 6d6f 6465 2e0d 0d0a 2400 0000 0000 0000  mode....$.......
 │ -0000080: 5045 0000 4c01 0800 d497 a458 0000 0000  PE..L......X....
 │ +0000080: 5045 0000 4c01 0800 e597 a458 0000 0000  PE..L......X....
 │  0000090: 0000 0000 e000 0e03 0b01 0216 00c6 2500  ..............%.
 │  00000a0: 00fc 3100 004a 0000 c014 0000 0010 0000  ..1..J..........
 │  00000b0: 00e0 2500 0000 4000 0010 0000 0002 0000  ..%... at .........
 │  00000c0: 0400 0000 0100 0000 0400 0000 0000 0000  ................
 │ -00000d0: 00b0 3200 0004 0000 f1d9 3200 0200 4001  ..2.......2... at .
 │ +00000d0: 00b0 3200 0004 0000 02da 3200 0200 4001  ..2.......2... at .
 │  00000e0: 0000 2000 0010 0000 0000 1000 0010 0000  .. .............
 │  00000f0: 0000 0000 1000 0000 0000 0000 0000 0000  ................
 │  0000100: 00d0 3000 3833 0000 0000 0000 0000 0000  ..0.83..........
 │  0000110: 0000 0000 0000 0000 0000 0000 0000 0000  ................
 │  0000120: 0030 3100 a078 0100 0000 0000 0000 0000  .01..x..........
 │  0000130: 0000 0000 0000 0000 0000 0000 0000 0000  ................
 │  0000140: 0420 3100 1800 0000 0000 0000 0000 0000  . 1.............
 │
 }}}

 It doesn't look like a timestamp issue as adding faketime there is not
 fixing the problem.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20426#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online