[tor-bugs] #26475 [Applications/Tor Browser]: ESR60-based Tor Browser bundles are not built reproducibly with Stylo enabled using rustc > 1.25.0

[Tor Bug Tracker & Wiki]

#26475: ESR60-based Tor Browser bundles are not built reproducibly with Stylo
enabled using rustc > 1.25.0
-------------------------------------------------+-------------------------
 Reporter:  gk                                   |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  needs_review
 Priority:  Immediate                            |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-rbm, TorBrowserTeam201810R,      |  Actual Points:
  GeorgKoppen201810                              |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by boklm):

 Replying to [comment:48 gk]:

 >
 > `bug_26475_v2` (https://gitweb.torproject.org/user/gk/tor-browser-
 build.git/commit/?h=bug_26475_v2&id=e2da10a29f46762a8561e30c36915f8568d18c71)
 has the proposed workaround.

 After doing two separates `testbuild` using this branch, I got two non
 matching `TorBrowser-8.5a3-osx64_en-US.dmg` files. After checking the
 content of the dmg files, only the snowflake files are different, so this
 is probably #27827. So it seems the issue from this ticket is fixed.

 However, I also got two non matching `mar-tools-mac64.zip` files.
 https://people.torproject.org/~boklm/tmp/bug_26475/1/mar-tools-
 mac64.zip.asc
 https://people.torproject.org/~boklm/tmp/bug_26475/1/mar-tools-mac64.zip
 https://people.torproject.org/~boklm/tmp/bug_26475/2/mar-tools-
 mac64.zip.asc
 https://people.torproject.org/~boklm/tmp/bug_26475/2/mar-tools-mac64.zip

 I don't know if the non-matching mar-tools is caused by this patch, or
 something else.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26475#comment:52>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online