[tor-bugs] #28102 [Applications/Tor Browser]: Make sure we pick the exact same compile environment for Tor Browser builds

[Tor Bug Tracker & Wiki]

#28102: Make sure we pick the exact same compile environment for Tor Browser builds
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  High                 |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-rbm,
     Severity:  Normal               |  TorBrowserTeam201810
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 When creating a container image at time t and creating a container image
 at time t1 it is not guaranteed that we include the same compiler versions
 etc.

 This has led to `mar` executables being different, for instance (see:
 comment:52:ticket:26475): GCC version was in both cases 4.9.2 but in one
 of them contained an updated resulting in `GCC: (Debian 4.9.2-10+deb8u1)
 4.9.2` as a version string instead of `GCC: (Debian 4.9.2-10) 4.9.2`.

 We could fix that by making sure we compile our own GCC for this case but
 there might be other packages lurking with the same trouble potential. We
 should make sure instead that everyone creating *and* using a container
 image is getting/having the same available.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28102>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online