[Rpm-maint] [rpm-software-management/rpm] rpmbuild should not store UIDs (Discussion #3547)

[Bernhard M. Wiedemann]

While working on [reproducible builds](https://reproducible-builds.org/) for [openSUSE](https://en.opensuse.org/openSUSE:Reproducible_Builds), I found that getting bit-wise reproduction fails for packages, if these use something like `%attr(0755,wwwrun,www)%{_localstatedir}/lib/%{name}/`
because users are created by `useradd` and that selects the next available UID and rpmbuild stores it as part of cpio headers in the payload.

Here is an example extract from our `ganglia-web-3.7.5-3.1.noarch.rpm`
```diff
-070701000001a7000041ed0000018e000001f30000000166f7aa3600000000000000000000000000000000000000000000001b00000000./var/lib/ganglia-web/dwoo
+070701000001a7000041ed000001f3000001f30000000166f7aa3600000000000000000000000000000000000000000000001b00000000./var/lib/ganglia-web/dwoo
```

Here `1f3` and `18e` are the embedded UIDs.

I think, rpm only uses the user-names for installing, so we could probably just store a 0 there during rpmbuild. What do you think?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/rpm-software-management/rpm/discussions/3547
You are receiving this because you are subscribed to this thread.

Message ID: <rpm-software-management/rpm/repo-discussions/3547 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rpm.org/pipermail/rpm-maint/attachments/20250129/1fe4c3aa/attachment-0001.htm>