[tor-bugs] #31691 [Applications/Tor Browser]: Go ldflags should set static build ID

[Tor Bug Tracker & Wiki]

#31691: Go ldflags should set static build ID
--------------------------------------+--------------------------
 Reporter:  JeremyRand                |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  tbb-rbm                   |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by JeremyRand):

 Further investigation seems to support my above hypothesis that Namecoin
 is running into this because we exercise cgo-related code paths that Tor
 currently doesn't.  (Specifically, Namecoin's executable Go projects are
 reproducible within rbm, while our Go project that produces a C ABI shared
 library exposes nonreproducibility in the build ID when built in rbm.)
 Usage of `go install` versus `go build` doesn't seem to have any effect on
 whether the build ID is reproducible.  In any event, fixing this is still
 a good idea for Tor since it improves reproducibility between rbm and non-
 rbm build usage.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31691#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online