Diff of the two buildlogs:

--
--- b1/build.log	2024-11-14 14:48:58.892533034 +0000
+++ b2/build.log	2024-11-14 14:52:26.777046779 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Wed Dec 17 09:06:04 -12 2025
-I: pbuilder-time-stamp: 1766005564
+I: Current time: Fri Nov 15 04:49:01 +14 2024
+I: pbuilder-time-stamp: 1731595741
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
 I: copying local configuration
@@ -26,52 +26,84 @@
 dpkg-source: info: unpacking golang-github-sigstore-timestamp-authority_1.2.3-2.debian.tar.xz
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/2421913/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos1-amd64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Nov 14 14:49 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='amd64'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=42 '
-  DISTRIBUTION='unstable'
-  HOME='/root'
-  HOST_ARCH='amd64'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="32" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu")
+  BASH_VERSION='5.2.32(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=amd64
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=20 '
+  DIRSTACK=()
+  DISTRIBUTION=unstable
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=x86_64
+  HOST_ARCH=amd64
   IFS=' 	
   '
-  INVOCATION_ID='68c90ad53e694ba390775a25eea7d9e4'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='2421913'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=c33d95b281504e66868e5e84cd1d6cd8
+  LANG=C
+  LANGUAGE=et_EE:et
+  LC_ALL=C
+  MACHTYPE=x86_64-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=2313020
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HzxoKhfi/pbuilderrc_svpo --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HzxoKhfi/b1 --logfile b1/build.log golang-github-sigstore-timestamp-authority_1.2.3-2.dsc'
-  SUDO_GID='111'
-  SUDO_UID='106'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://213.165.73.152:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HzxoKhfi/pbuilderrc_t4Gk --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HzxoKhfi/b2 --logfile b2/build.log golang-github-sigstore-timestamp-authority_1.2.3-2.dsc'
+  SUDO_GID=110
+  SUDO_UID=105
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://46.16.76.132:3128
 I: uname -a
-  Linux ionos15-amd64 6.10.11+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.10.11-1~bpo12+1 (2024-10-03) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-27-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.115-1 (2024-11-01) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Aug  4  2024 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/2421913/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Aug  4 21:30 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -593,7 +625,7 @@
 Get: 426 http://deb.debian.org/debian unstable/main amd64 golang-github-sigstore-sigstore-dev all 1.8.10-2 [135 kB]
 Get: 427 http://deb.debian.org/debian unstable/main amd64 golang-github-urfave-negroni-dev all 0.2.0-3 [8752 B]
 Get: 428 http://deb.debian.org/debian unstable/main amd64 golang-k8s-sigs-release-utils-dev all 0.7.7-2 [33.8 kB]
-Fetched 211 MB in 5s (44.0 MB/s)
+Fetched 211 MB in 10s (20.3 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package golang-golang-x-sys-dev.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19969 files and directories currently installed.)
@@ -1973,8 +2005,8 @@
 Setting up tzdata (2024b-3) ...
 
 Current default time zone: 'Etc/UTC'
-Local time is now:      Wed Dec 17 21:10:20 UTC 2025.
-Universal Time is now:  Wed Dec 17 21:10:20 UTC 2025.
+Local time is now:      Thu Nov 14 14:51:22 UTC 2024.
+Universal Time is now:  Thu Nov 14 14:51:22 UTC 2024.
 Run 'dpkg-reconfigure tzdata' if you wish to change it.
 
 Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2326,7 +2358,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/golang-github-sigstore-timestamp-authority-1.2.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../golang-github-sigstore-timestamp-authority_1.2.3-2_source.changes
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/golang-github-sigstore-timestamp-authority-1.2.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../golang-github-sigstore-timestamp-authority_1.2.3-2_source.changes
 dpkg-buildpackage: info: source package golang-github-sigstore-timestamp-authority
 dpkg-buildpackage: info: source version 1.2.3-2
 dpkg-buildpackage: info: source distribution unstable
@@ -2344,139 +2380,139 @@
    dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go install -trimpath -v -p 42 github.com/sigstore/timestamp-authority/pkg/verification github.com/sigstore/timestamp-authority/pkg/x509 github.com/sigstore/timestamp-authority/pkg/x509/testutils
-internal/godebugs
-internal/nettrace
-internal/msan
-internal/coverage/rtcov
-internal/asan
-unicode/utf16
-vendor/golang.org/x/crypto/cryptobyte/asn1
-cmp
-encoding
+	cd _build && go install -trimpath -v -p 20 github.com/sigstore/timestamp-authority/pkg/verification github.com/sigstore/timestamp-authority/pkg/x509 github.com/sigstore/timestamp-authority/pkg/x509/testutils
 internal/goarch
-unicode/utf8
-golang.org/x/crypto/internal/alias
-internal/byteorder
-internal/goexperiment
+internal/race
+internal/coverage/rtcov
 internal/goos
-crypto/internal/alias
 math/bits
-internal/race
-internal/unsafeheader
-internal/itoa
 unicode
 internal/profilerecord
-crypto/subtle
-internal/cpu
-sync/atomic
+crypto/internal/alias
+internal/unsafeheader
+unicode/utf8
+cmp
+internal/goexperiment
+internal/godebugs
 internal/runtime/atomic
 crypto/internal/boring/sig
-internal/runtime/syscall
 runtime/internal/math
-internal/abi
 runtime/internal/sys
-internal/chacha8rand
+internal/runtime/syscall
+sync/atomic
+crypto/subtle
+internal/byteorder
+internal/itoa
+internal/asan
+internal/msan
+internal/abi
+unicode/utf16
+vendor/golang.org/x/crypto/cryptobyte/asn1
+internal/nettrace
+encoding
+internal/cpu
+golang.org/x/crypto/internal/alias
 golang.org/x/crypto/salsa20/salsa
-internal/bytealg
 internal/runtime/exithook
+internal/chacha8rand
+internal/bytealg
 math
 internal/stringslite
 runtime
-internal/weak
-iter
 internal/reflectlite
 sync
+iter
+internal/weak
 slices
-internal/testlog
 internal/singleflight
 internal/bisect
+internal/testlog
 runtime/cgo
 errors
 sort
 io
 internal/oserror
-bytes
+strconv
 vendor/golang.org/x/net/dns/dnsmessage
-crypto/internal/edwards25519/field
-math/rand/v2
 path
 internal/godebug
-strconv
+crypto/internal/edwards25519/field
+math/rand/v2
+syscall
 crypto/internal/nistec/fiat
-crypto/cipher
+bytes
 hash
-reflect
 crypto/internal/randutil
 strings
 math/rand
 crypto/internal/edwards25519
-syscall
 internal/concurrent
-crypto
 unique
+crypto
+reflect
 crypto/md5
+crypto/cipher
+net/netip
+bufio
 crypto/internal/boring
 crypto/des
 crypto/aes
-crypto/sha512
 crypto/sha1
-crypto/hmac
+crypto/sha512
 crypto/sha256
-net/netip
+crypto/hmac
 golang.org/x/crypto/pbkdf2
-bufio
 time
-internal/syscall/execenv
 internal/syscall/unix
+internal/syscall/execenv
+io/fs
 context
 internal/poll
-io/fs
-internal/fmtsort
-encoding/binary
-embed
 internal/filepathlite
+embed
 crypto/internal/nistec
-golang.org/x/crypto/scrypt
-golang.org/x/crypto/internal/poly1305
+internal/fmtsort
+encoding/binary
+os
 encoding/base64
+golang.org/x/crypto/internal/poly1305
+golang.org/x/crypto/scrypt
 golang.org/x/sys/unix
-os
+crypto/ecdh
 encoding/pem
 golang.org/x/crypto/nacl/secretbox
-io/ioutil
 path/filepath
-internal/sysinfo
 fmt
-crypto/ecdh
+io/ioutil
+internal/sysinfo
 net
 os/exec
-flag
-net/url
-github.com/pkg/errors
-encoding/hex
-encoding/json
-runtime/trace
 math/big
+encoding/hex
+net/url
+flag
 runtime/debug
+runtime/trace
+encoding/json
+github.com/pkg/errors
 testing
 golang.org/x/term
 crypto/dsa
 crypto/internal/boring/bbig
 crypto/rand
-crypto/internal/bigmod
-crypto/elliptic
 encoding/asn1
-github.com/secure-systems-lab/go-securesystemslib/encrypted
+crypto/elliptic
+crypto/internal/bigmod
 crypto/ed25519
-crypto/rsa
-crypto/x509/pkix
+github.com/secure-systems-lab/go-securesystemslib/encrypted
 vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
+crypto/rsa
 crypto/ecdsa
 crypto/x509
-github.com/sigstore/sigstore/pkg/cryptoutils
 github.com/sigstore/timestamp-authority/pkg/x509/testutils
 github.com/digitorus/pkcs7
+github.com/sigstore/sigstore/pkg/cryptoutils
 github.com/sigstore/timestamp-authority/pkg/x509
 github.com/digitorus/timestamp
 github.com/sigstore/timestamp-authority/pkg/verification
@@ -2487,13 +2523,13 @@
 rm -fv _build/src/github.com/sigstore/timestamp-authority/pkg/verification/verify_test.go
 removed '_build/src/github.com/sigstore/timestamp-authority/pkg/verification/verify_test.go'
 dh_auto_test 
-	cd _build && go test -vet=off -v -p 42 github.com/sigstore/timestamp-authority/pkg/verification github.com/sigstore/timestamp-authority/pkg/x509 github.com/sigstore/timestamp-authority/pkg/x509/testutils
+	cd _build && go test -vet=off -v -p 20 github.com/sigstore/timestamp-authority/pkg/verification github.com/sigstore/timestamp-authority/pkg/x509 github.com/sigstore/timestamp-authority/pkg/x509/testutils
 ?   	github.com/sigstore/timestamp-authority/pkg/x509	[no test files]
 ?   	github.com/sigstore/timestamp-authority/pkg/x509/testutils	[no test files]
 === RUN   TestVerifyRequest
 --- PASS: TestVerifyRequest (0.00s)
 PASS
-ok  	github.com/sigstore/timestamp-authority/pkg/verification	0.021s
+ok  	github.com/sigstore/timestamp-authority/pkg/verification	0.006s
 make[1]: Leaving directory '/build/reproducible-path/golang-github-sigstore-timestamp-authority-1.2.3'
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--builddirectory=_build -O--buildsystem=golang
@@ -2521,12 +2557,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/2313020/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/2421913 and its subdirectories
-I: Current time: Wed Dec 17 09:11:56 -12 2025
-I: pbuilder-time-stamp: 1766005916
+I: removing directory /srv/workspace/pbuilder/2313020 and its subdirectories
+I: Current time: Fri Nov 15 04:52:25 +14 2024
+I: pbuilder-time-stamp: 1731595945