Diff of the two buildlogs:
--
--- b1/build.log 2025-01-15 20:18:17.019662392 +0000
+++ b2/build.log 2025-01-15 20:20:41.749098043 +0000
@@ -1,6 +1,6 @@
I: pbuilder: network access will be disabled during build
-I: Current time: Wed Jan 15 08:14:53 -12 2025
-I: pbuilder-time-stamp: 1736972093
+I: Current time: Thu Jan 16 10:18:27 +14 2025
+I: pbuilder-time-stamp: 1736972307
I: Building the build Environment
I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
I: copying local configuration
@@ -24,52 +24,84 @@
dpkg-source: info: applying disable-rpmtuf.patch
I: Not using root during the build.
I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/3065407/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/D01_modify_environment starting
+debug: Running on codethink04-arm64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Jan 15 20:18 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/D02_print_environment starting
I: set
- BUILDDIR='/build/reproducible-path'
- BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
- BUILDUSERNAME='pbuilder1'
- BUILD_ARCH='arm64'
- DEBIAN_FRONTEND='noninteractive'
+ BASH=/bin/sh
+ BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+ BASH_ALIASES=()
+ BASH_ARGC=()
+ BASH_ARGV=()
+ BASH_CMDS=()
+ BASH_LINENO=([0]="12" [1]="0")
+ BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+ BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+ BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="aarch64-unknown-linux-gnu")
+ BASH_VERSION='5.2.37(1)-release'
+ BUILDDIR=/build/reproducible-path
+ BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+ BUILDUSERNAME=pbuilder2
+ BUILD_ARCH=arm64
+ DEBIAN_FRONTEND=noninteractive
DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 '
- DISTRIBUTION='unstable'
- HOME='/root'
- HOST_ARCH='arm64'
+ DIRSTACK=()
+ DISTRIBUTION=unstable
+ EUID=0
+ FUNCNAME=([0]="Echo" [1]="main")
+ GROUPS=()
+ HOME=/root
+ HOSTNAME=i-capture-the-hostname
+ HOSTTYPE=aarch64
+ HOST_ARCH=arm64
IFS='
'
- INVOCATION_ID='541fa80c2cc345e7aa1f2dab06a0ba57'
- LANG='C'
- LANGUAGE='en_US:en'
- LC_ALL='C'
- MAIL='/var/mail/root'
- OPTIND='1'
- PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
- PBCURRENTCOMMANDLINEOPERATION='build'
- PBUILDER_OPERATION='build'
- PBUILDER_PKGDATADIR='/usr/share/pbuilder'
- PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
- PBUILDER_SYSCONFDIR='/etc'
- PPID='3065407'
- PS1='# '
- PS2='> '
+ INVOCATION_ID=db910c7820eb4fe184f51fe36e5cea2d
+ LANG=C
+ LANGUAGE=nl_BE:nl
+ LC_ALL=C
+ MACHTYPE=aarch64-unknown-linux-gnu
+ MAIL=/var/mail/root
+ OPTERR=1
+ OPTIND=1
+ OSTYPE=linux-gnu
+ PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+ PBCURRENTCOMMANDLINEOPERATION=build
+ PBUILDER_OPERATION=build
+ PBUILDER_PKGDATADIR=/usr/share/pbuilder
+ PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+ PBUILDER_SYSCONFDIR=/etc
+ PIPESTATUS=([0]="0")
+ POSIXLY_CORRECT=y
+ PPID=3872077
PS4='+ '
- PWD='/'
- SHELL='/bin/bash'
- SHLVL='2'
- SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.L17PJWti/pbuilderrc_qwsS --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.L17PJWti/b1 --logfile b1/build.log rekor_1.3.7-1.dsc'
- SUDO_GID='109'
- SUDO_UID='104'
- SUDO_USER='jenkins'
- TERM='unknown'
- TZ='/usr/share/zoneinfo/Etc/GMT+12'
- USER='root'
- _='/usr/bin/systemd-run'
- http_proxy='http://192.168.101.4:3128'
+ PWD=/
+ SHELL=/bin/bash
+ SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+ SHLVL=3
+ SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.L17PJWti/pbuilderrc_ZA0W --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.L17PJWti/b2 --logfile b2/build.log rekor_1.3.7-1.dsc'
+ SUDO_GID=109
+ SUDO_UID=104
+ SUDO_USER=jenkins
+ TERM=unknown
+ TZ=/usr/share/zoneinfo/Etc/GMT-14
+ UID=0
+ USER=root
+ _='I: set'
+ http_proxy=http://192.168.101.4:3128
I: uname -a
- Linux codethink02-arm64 6.1.0-30-cloud-arm64 #1 SMP Debian 6.1.124-1 (2025-01-12) aarch64 GNU/Linux
+ Linux i-capture-the-hostname 6.1.0-30-cloud-arm64 #1 SMP Debian 6.1.124-1 (2025-01-12) aarch64 GNU/Linux
I: ls -l /bin
lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/3065407/tmp/hooks/D02_print_environment finished
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/D02_print_environment finished
-> Attempting to satisfy build-dependencies
-> Creating pbuilder-satisfydepends-dummy package
Package: pbuilder-satisfydepends-dummy
@@ -651,7 +683,7 @@
Get: 486 http://deb.debian.org/debian unstable/main arm64 golang-k8s-sigs-release-utils-dev all 0.8.5-1 [37.2 kB]
Get: 487 http://deb.debian.org/debian unstable/main arm64 golang-webpki-org-jsoncanonicalizer-dev all 1.0.1-2 [6908 B]
Get: 488 http://deb.debian.org/debian unstable/main arm64 help2man arm64 1.49.3+b1 [198 kB]
-Fetched 226 MB in 2s (117 MB/s)
+Fetched 226 MB in 1s (192 MB/s)
Preconfiguring packages ...
Selecting previously unselected package golang-golang-x-sys-dev.
(Reading database ...
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19964 files and directories currently installed.)
@@ -2214,8 +2246,8 @@
Setting up tzdata (2024b-6) ...
Current default time zone: 'Etc/UTC'
-Local time is now: Wed Jan 15 20:16:20 UTC 2025.
-Universal Time is now: Wed Jan 15 20:16:20 UTC 2025.
+Local time is now: Wed Jan 15 20:19:26 UTC 2025.
+Universal Time is now: Wed Jan 15 20:19:26 UTC 2025.
Run 'dpkg-reconfigure tzdata' if you wish to change it.
Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2624,7 +2656,11 @@
Building tag database...
-> Finished parsing the build-deps
I: Building the package
-I: Running cd /build/reproducible-path/rekor-1.3.7/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../rekor_1.3.7-1_source.changes
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/rekor-1.3.7/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../rekor_1.3.7-1_source.changes
dpkg-buildpackage: info: source package rekor
dpkg-buildpackage: info: source version 1.3.7-1
dpkg-buildpackage: info: source distribution unstable
@@ -2676,28 +2712,28 @@
removed directory '_build/src/github.com/sigstore/rekor/pkg/pki/tuf'
dh_auto_build
cd _build && go install -trimpath -v -p 12 github.com/sigstore/rekor/cmd/rekor-cli
-internal/goos
-internal/coverage/rtcov
-internal/goexperiment
-internal/unsafeheader
-internal/byteorder
internal/race
-internal/godebugs
-internal/goarch
-unicode
+internal/byteorder
internal/profilerecord
-unicode/utf8
-internal/asan
-internal/itoa
-internal/msan
+internal/goarch
+internal/goexperiment
+internal/godebugs
+internal/goos
+internal/unsafeheader
+internal/coverage/rtcov
internal/runtime/syscall
sync/atomic
-internal/abi
internal/cpu
+unicode/utf8
+unicode
runtime/internal/math
+internal/abi
runtime/internal/sys
-math/bits
+internal/asan
+internal/itoa
+internal/msan
internal/chacha8rand
+math/bits
crypto/internal/alias
crypto/subtle
crypto/internal/boring/sig
@@ -2709,23 +2745,23 @@
container/list
vendor/golang.org/x/crypto/internal/alias
log/internal
-math
go.mongodb.org/mongo-driver/bson/bsonoptions
go.mongodb.org/mongo-driver/bson/bsontype
-google.golang.org/protobuf/internal/set
google.golang.org/protobuf/internal/flags
-github.com/sigstore/rekor/pkg/pki/identity
-golang.org/x/crypto/internal/alias
internal/bytealg
internal/runtime/atomic
+google.golang.org/protobuf/internal/set
+math
+github.com/sigstore/rekor/pkg/pki/identity
+golang.org/x/crypto/internal/alias
golang.org/x/crypto/salsa20/salsa
image/color
golang.org/x/exp/constraints
github.com/pelletier/go-toml/v2/internal/characters
log/slog/internal
go.opentelemetry.io/otel/metric/embedded
-go.opentelemetry.io/otel/trace/embedded
golang.org/x/exp/slices
+go.opentelemetry.io/otel/trace/embedded
google.golang.org/grpc/serviceconfig
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/common
github.com/transparency-dev/merkle
@@ -2734,298 +2770,297 @@
runtime
go.opentelemetry.io/otel/internal
internal/reflectlite
-sync
iter
internal/weak
-slices
+sync
maps
+slices
internal/bisect
-internal/testlog
internal/singleflight
-github.com/josharian/intern
google.golang.org/protobuf/internal/pragma
-go.uber.org/zap/internal/pool
-github.com/spf13/viper/internal/encoding
log/slog/internal/buffer
+github.com/spf13/viper/internal/encoding
+github.com/josharian/intern
+internal/testlog
+go.uber.org/zap/internal/pool
runtime/cgo
errors
sort
-internal/godebug
-io
internal/oserror
-syscall
-crypto/internal/randutil
-strings
+io
path
-math/rand
-bytes
-hash
+crypto/internal/edwards25519/field
strconv
-math/rand/v2
-crypto/internal/nistec/fiat
-hash/fnv
-hash/crc32
vendor/golang.org/x/net/dns/dnsmessage
-crypto/internal/edwards25519/field
-internal/saferio
-hash/adler32
-crypto/cipher
-vendor/golang.org/x/text/transform
+crypto/internal/nistec/fiat
+math/rand/v2
+internal/godebug
+bytes
+syscall
+hash
+crypto/internal/randutil
+math/rand
golang.org/x/crypto/cast5
+crypto
+crypto/cipher
internal/concurrent
-html
-bufio
-net/http/internal/ascii
+crypto/rc4
+hash/crc32
+vendor/golang.org/x/text/transform
+strings
crypto/internal/edwards25519
-github.com/sassoftware/relic/signers/sigerrors
-crypto
reflect
-crypto/des
unique
-regexp/syntax
-crypto/internal/boring
crypto/md5
-crypto/rc4
+hash/fnv
+crypto/internal/boring
+crypto/des
+internal/saferio
+golang.org/x/crypto/openpgp/errors
crypto/sha256
crypto/aes
crypto/sha512
crypto/sha1
net/netip
crypto/hmac
-golang.org/x/crypto/openpgp/errors
+hash/adler32
+html
+regexp/syntax
+bufio
vendor/golang.org/x/crypto/hkdf
+net/http/internal/ascii
golang.org/x/crypto/pbkdf2
-compress/bzip2
golang.org/x/crypto/openpgp/s2k
-image
+github.com/sassoftware/relic/signers/sigerrors
golang.org/x/crypto/blowfish
golang.org/x/text/transform
github.com/hashicorp/hcl/hcl/strconv
google.golang.org/grpc/internal/grpcrand
google.golang.org/grpc/internal/buffer
encoding/base32
+compress/bzip2
+image
golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
github.com/x448/float16
-golang.org/x/text/runes
github.com/transparency-dev/merkle/rfc6962
-regexp
+golang.org/x/text/runes
time
internal/syscall/unix
internal/syscall/execenv
+regexp
image/internal/imageutil
image/jpeg
context
-io/fs
-internal/poll
go.uber.org/zap/buffer
-google.golang.org/grpc/backoff
google.golang.org/grpc/keepalive
-github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1
+io/fs
+internal/poll
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.2
+github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v0.1
+google.golang.org/grpc/backoff
github.com/in-toto/in-toto-golang/in_toto/slsa_provenance/v1
go.uber.org/zap/internal/bufferpool
go.uber.org/zap/internal/stacktrace
-go.opentelemetry.io/otel/internal/baggage
-google.golang.org/grpc/internal/backoff
-google.golang.org/grpc/internal/grpcsync
+internal/fmtsort
+encoding/binary
+go.opentelemetry.io/otel/internal/attribute
internal/filepathlite
embed
github.com/spf13/afero/internal/common
+go.opentelemetry.io/otel/internal/baggage
+google.golang.org/grpc/internal/backoff
+google.golang.org/grpc/internal/grpcsync
crypto/internal/nistec
google.golang.org/protobuf/internal/editiondefaults
os
-internal/fmtsort
-encoding/binary
-go.opentelemetry.io/otel/internal/attribute
encoding/base64
-vendor/golang.org/x/crypto/chacha20
vendor/golang.org/x/crypto/internal/poly1305
golang.org/x/crypto/blake2b
-golang.org/x/crypto/internal/poly1305
+golang.org/x/crypto/chacha20
golang.org/x/crypto/scrypt
+golang.org/x/crypto/internal/poly1305
golang.org/x/sys/unix
-golang.org/x/crypto/chacha20
+vendor/golang.org/x/crypto/chacha20
software.sslmate.com/src/go-pkcs12/internal/rc2
-golang.org/x/crypto/nacl/secretbox
encoding/pem
golang.org/x/crypto/openpgp/armor
-crypto/ecdh
+golang.org/x/crypto/nacl/secretbox
vendor/golang.org/x/crypto/chacha20poly1305
+crypto/ecdh
golang.org/x/crypto/curve25519
-fmt
-net
-internal/sysinfo
path/filepath
-io/ioutil
-vendor/golang.org/x/sys/cpu
+fmt
google.golang.org/protobuf/internal/detrand
+vendor/golang.org/x/sys/cpu
go.uber.org/zap/internal/exit
+io/ioutil
+internal/sysinfo
golang.org/x/sys/cpu
google.golang.org/grpc/internal/envconfig
-os/exec
-github.com/spf13/afero/mem
+net
+vendor/golang.org/x/crypto/sha3
github.com/shibumi/go-pathspec
+github.com/spf13/afero/mem
github.com/sassoftware/relic/lib/atomicfile
+os/exec
golang.org/x/crypto/sha3
-vendor/golang.org/x/crypto/sha3
github.com/mitchellh/go-homedir
-math/big
encoding/hex
-net/url
+encoding/xml
+math/big
+vendor/golang.org/x/net/http2/hpack
vendor/golang.org/x/text/unicode/norm
+net/url
encoding/json
encoding/csv
-encoding/xml
-compress/flate
log
-vendor/golang.org/x/net/http2/hpack
+compress/flate
mime
mime/quotedprintable
-net/http/internal
vendor/golang.org/x/text/unicode/bidi
+net/http/internal
database/sql/driver
gopkg.in/yaml.v3
golang.org/x/sync/errgroup
-compress/gzip
google.golang.org/protobuf/internal/errors
-google.golang.org/protobuf/encoding/protowire
github.com/oklog/ulid
+google.golang.org/protobuf/encoding/protowire
+compress/gzip
go/token
-google.golang.org/protobuf/internal/version
google.golang.org/protobuf/reflect/protoreflect
+google.golang.org/protobuf/internal/version
internal/profile
text/tabwriter
+vendor/golang.org/x/text/secure/bidirule
runtime/trace
runtime/debug
+vendor/golang.org/x/net/idna
flag
-vendor/golang.org/x/text/secure/bidirule
-runtime/pprof
go.uber.org/zap/internal/color
+runtime/pprof
encoding/gob
-vendor/golang.org/x/net/idna
github.com/go-openapi/analysis/internal/debug
+github.com/go-openapi/jsonreference/internal
github.com/mailru/easyjson/jlexer
+go.uber.org/atomic
+github.com/blang/semver
+github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer
+golang.org/x/term
google.golang.org/protobuf/internal/descfmt
google.golang.org/protobuf/internal/descopts
google.golang.org/protobuf/internal/strs
google.golang.org/protobuf/internal/encoding/messageset
google.golang.org/protobuf/internal/genid
google.golang.org/protobuf/internal/order
+google.golang.org/protobuf/runtime/protoiface
google.golang.org/protobuf/reflect/protoregistry
google.golang.org/protobuf/internal/encoding/text
-google.golang.org/protobuf/runtime/protoiface
-go.uber.org/atomic
-github.com/go-openapi/jsonreference/internal
-github.com/blang/semver
-github.com/cyberphone/json-canonicalization/go/src/webpki.org/jsoncanonicalizer
-golang.org/x/term
+go.uber.org/multierr
+github.com/opencontainers/go-digest
+compress/zlib
+text/template/parse
+google.golang.org/protobuf/internal/encoding/json
+github.com/fsnotify/fsnotify/internal
+go.uber.org/zap/zapcore
+golang.org/x/text/unicode/norm
+github.com/spf13/jwalterweatherman
crypto/dsa
crypto/elliptic
crypto/internal/bigmod
crypto/internal/boring/bbig
encoding/asn1
crypto/rand
-google.golang.org/protobuf/proto
-go.uber.org/multierr
-github.com/opencontainers/go-digest
google.golang.org/protobuf/internal/encoding/defval
+google.golang.org/protobuf/proto
+github.com/fsnotify/fsnotify
crypto/ed25519
-crypto/rsa
crypto/internal/hpke
crypto/internal/mlkem768
go.mongodb.org/mongo-driver/bson/primitive
-go.uber.org/zap/zapcore
golang.org/x/crypto/ed25519
github.com/secure-systems-lab/go-securesystemslib/encrypted
+crypto/rsa
github.com/jedisct1/go-minisign
-compress/zlib
golang.org/x/crypto/openpgp/elgamal
-vendor/golang.org/x/crypto/cryptobyte
-crypto/x509/pkix
-text/template/parse
-github.com/sigstore/sigstore/pkg/signature/options
-google.golang.org/protobuf/internal/encoding/json
-github.com/fsnotify/fsnotify/internal
-golang.org/x/text/unicode/norm
-github.com/spf13/jwalterweatherman
-google.golang.org/protobuf/internal/filedesc
-go.mongodb.org/mongo-driver/x/bsonx/bsoncore
-google.golang.org/protobuf/encoding/prototext
github.com/subosito/gotenv
-github.com/fsnotify/fsnotify
+text/template
github.com/hashicorp/hcl/hcl/token
+github.com/spf13/viper/internal/encoding/json
gopkg.in/ini.v1
-crypto/ecdsa
+go.mongodb.org/mongo-driver/x/bsonx/bsoncore
+google.golang.org/protobuf/internal/filedesc
+google.golang.org/protobuf/encoding/prototext
+github.com/pelletier/go-toml/v2/internal/danger
github.com/hashicorp/hcl/hcl/ast
+vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
+github.com/sigstore/sigstore/pkg/signature/options
github.com/hashicorp/hcl/hcl/scanner
github.com/hashicorp/hcl/json/token
+github.com/pelletier/go-toml/v2/unstable
+go.uber.org/zap/internal
github.com/hashicorp/hcl/json/scanner
github.com/hashicorp/hcl/hcl/parser
-github.com/spf13/viper/internal/encoding/json
-github.com/pelletier/go-toml/v2/internal/danger
-text/template
github.com/spf13/viper/internal/encoding/yaml
-github.com/hashicorp/hcl/json/parser
golang.org/x/mod/sumdb/note
-golang.org/x/crypto/openpgp/packet
-github.com/pelletier/go-toml/v2/unstable
-github.com/hashicorp/hcl/hcl/printer
-github.com/hashicorp/hcl
+github.com/hashicorp/hcl/json/parser
+crypto/ecdsa
github.com/go-openapi/runtime/logger
github.com/opentracing/opentracing-go/log
log/slog
+github.com/pelletier/go-toml/v2/internal/tracker
go.opentelemetry.io/otel/attribute
+github.com/hashicorp/hcl
+github.com/hashicorp/hcl/hcl/printer
go.opentelemetry.io/otel/codes
go.opentelemetry.io/otel/baggage
-github.com/pelletier/go-toml/v2/internal/tracker
-go.uber.org/zap/internal
-go.mongodb.org/mongo-driver/bson/bsonrw
golang.org/x/net/internal/timeseries
-github.com/spf13/viper/internal/encoding/hcl
-google.golang.org/grpc/internal/grpclog
github.com/pelletier/go-toml/v2
+html/template
+google.golang.org/grpc/internal/grpclog
+go.mongodb.org/mongo-driver/bson/bsonrw
+golang.org/x/crypto/openpgp/packet
google.golang.org/grpc/attributes
+github.com/spf13/viper/internal/encoding/hcl
+go.opentelemetry.io/otel/metric
+go.opentelemetry.io/otel/trace
+go.opentelemetry.io/otel/semconv/v1.17.0
+google.golang.org/grpc/grpclog
google.golang.org/grpc/internal/idle
golang.org/x/text/unicode/bidi
-google.golang.org/grpc/grpclog
-golang.org/x/net/http2/hpack
-github.com/google/trillian/types/internal/tls
google.golang.org/protobuf/internal/encoding/tag
google.golang.org/protobuf/encoding/protojson
-go.opentelemetry.io/otel/metric
-go.opentelemetry.io/otel/trace
-golang.org/x/crypto/openpgp
-google.golang.org/protobuf/internal/impl
-go.opentelemetry.io/otel/semconv/v1.17.0
-google.golang.org/grpc/connectivity
-html/template
github.com/go-logr/logr
-golang.org/x/text/secure/bidirule
-golang.org/x/net/idna
+google.golang.org/grpc/connectivity
+golang.org/x/net/http2/hpack
+google.golang.org/protobuf/internal/impl
+github.com/google/trillian/types/internal/tls
+golang.org/x/crypto/openpgp
github.com/go-logr/logr/funcr
sigs.k8s.io/yaml/goyaml.v2
+github.com/spf13/cast
+golang.org/x/text/secure/bidirule
+github.com/spf13/viper/internal/encoding/toml
os/user
github.com/secure-systems-lab/go-securesystemslib/cjson
-github.com/spf13/viper/internal/encoding/toml
+golang.org/x/net/idna
testing
github.com/fxamacker/cbor
archive/zip
-github.com/go-logr/stdr
+go.mongodb.org/mongo-driver/bson/bsoncodec
golang.org/x/crypto/ssh/terminal
+github.com/spf13/viper/internal/encoding/dotenv
+github.com/spf13/viper/internal/encoding/ini
+github.com/go-logr/stdr
github.com/howeyc/gopass
github.com/sassoftware/relic/lib/binpatch
-go.mongodb.org/mongo-driver/bson/bsoncodec
github.com/transparency-dev/merkle/compact
github.com/common-nighthawk/go-figure
github.com/transparency-dev/merkle/proof
-github.com/spf13/cast
-github.com/spf13/viper/internal/encoding/dotenv
-github.com/spf13/viper/internal/encoding/ini
sigs.k8s.io/yaml
github.com/veraison/go-cose
-go.mongodb.org/mongo-driver/bson
-archive/tar
crypto/x509
+go.mongodb.org/mongo-driver/bson
net/textproto
vendor/golang.org/x/net/http/httpproxy
github.com/google/uuid
@@ -3033,79 +3068,80 @@
github.com/mailru/easyjson/buffer
github.com/google/go-containerregistry/pkg/name
github.com/spf13/pflag
-google.golang.org/grpc/internal
github.com/mailru/easyjson/jwriter
+google.golang.org/grpc/internal
google.golang.org/grpc/internal/syscall
-google.golang.org/grpc/metadata
vendor/golang.org/x/net/http/httpguts
mime/multipart
net/mail
+github.com/sigstore/sigstore/pkg/signature/payload
+golang.org/x/net/http/httpguts
+google.golang.org/grpc/internal/resolver/dns/internal
+golang.org/x/crypto/openpgp/clearsign
+google.golang.org/grpc/metadata
google.golang.org/grpc/codes
+archive/tar
+github.com/godbus/dbus
google.golang.org/grpc/internal/grpcutil
-google.golang.org/grpc/encoding
google.golang.org/grpc/internal/balancerload
-golang.org/x/net/http/httpguts
google.golang.org/grpc/stats
-github.com/sigstore/sigstore/pkg/signature/payload
google.golang.org/grpc/tap
-google.golang.org/grpc/internal/resolver/dns/internal
-golang.org/x/crypto/openpgp/clearsign
-github.com/godbus/dbus
-google.golang.org/protobuf/internal/filetype
+google.golang.org/grpc/encoding
+github.com/asaskevich/govalidator
+github.com/sigstore/sigstore/pkg/cryptoutils
+crypto/tls
+golang.org/x/crypto/ssh
+github.com/secure-systems-lab/go-securesystemslib/signerverifier
+software.sslmate.com/src/go-pkcs12
github.com/sassoftware/relic/lib/zipslicer
+google.golang.org/protobuf/internal/filetype
+github.com/sigstore/sigstore/pkg/signature
google.golang.org/protobuf/runtime/protoimpl
-google.golang.org/protobuf/types/descriptorpb
google.golang.org/protobuf/types/known/timestamppb
+google.golang.org/protobuf/types/descriptorpb
google.golang.org/protobuf/types/known/anypb
-google.golang.org/protobuf/protoadapt
google.golang.org/protobuf/types/known/durationpb
+google.golang.org/protobuf/protoadapt
google.golang.org/protobuf/types/known/fieldmaskpb
-google.golang.org/grpc/encoding/proto
-google.golang.org/grpc/internal/pretty
github.com/golang/protobuf/ptypes/timestamp
-google.golang.org/genproto/googleapis/rpc/status
+github.com/sigstore/rekor/pkg/pki/minisign
github.com/golang/protobuf/ptypes/duration
+google.golang.org/genproto/googleapis/rpc/status
+google.golang.org/grpc/encoding/proto
+google.golang.org/grpc/internal/pretty
google.golang.org/grpc/binarylog/grpc_binarylog_v1
+github.com/spf13/cobra
google.golang.org/grpc/internal/status
+github.com/sigstore/rekor/pkg/pki/x509
google.golang.org/grpc/status
-github.com/asaskevich/govalidator
-crypto/tls
-github.com/sigstore/sigstore/pkg/cryptoutils
-golang.org/x/crypto/ssh
-github.com/secure-systems-lab/go-securesystemslib/signerverifier
-software.sslmate.com/src/go-pkcs12
google.golang.org/grpc/internal/binarylog
-github.com/spf13/cobra
-github.com/sigstore/sigstore/pkg/signature
google.golang.org/genproto/googleapis/api/annotations
-github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
-github.com/sigstore/rekor/pkg/pki/minisign
-github.com/sigstore/rekor/pkg/pki/x509
-github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
github.com/zalando/go-keyring/secret_service
-github.com/zalando/go-keyring
sigs.k8s.io/release-utils/version
+github.com/sigstore/protobuf-specs/gen/pb-go/common/v1
+github.com/zalando/go-keyring
github.com/sassoftware/relic/lib/passprompt
+github.com/sigstore/protobuf-specs/gen/pb-go/rekor/v1
github.com/secure-systems-lab/go-securesystemslib/dsse
-github.com/in-toto/in-toto-golang/in_toto
github.com/sigstore/sigstore/pkg/signature/dsse
+github.com/in-toto/in-toto-golang/in_toto
net/http/httptrace
-github.com/sassoftware/relic/lib/x509tools
google.golang.org/grpc/internal/credentials
-net/http
+github.com/sassoftware/relic/lib/x509tools
google.golang.org/grpc/credentials
+net/http
google.golang.org/grpc/internal/channelz
+google.golang.org/grpc/peer
google.golang.org/grpc/resolver
google.golang.org/grpc/credentials/insecure
-google.golang.org/grpc/peer
github.com/sassoftware/relic/lib/pkcs7
google.golang.org/grpc/internal/metadata
google.golang.org/grpc/internal/resolver/passthrough
google.golang.org/grpc/internal/transport/networktype
google.golang.org/grpc/balancer/grpclb/state
+github.com/sigstore/rekor/pkg/pki/pkcs7
google.golang.org/grpc/internal/resolver/unix
google.golang.org/grpc/internal/resolver/dns
-github.com/sigstore/rekor/pkg/pki/pkcs7
google.golang.org/grpc/resolver/dns
google.golang.org/grpc/channelz
google.golang.org/grpc/balancer
@@ -3115,12 +3151,12 @@
google.golang.org/grpc/balancer/roundrobin
google.golang.org/grpc/internal/balancer/gracefulswitch
github.com/go-openapi/errors
-github.com/go-openapi/swag
expvar
-github.com/go-chi/chi
net/http/pprof
-go.uber.org/zap
+github.com/go-chi/chi
+github.com/go-openapi/swag
github.com/sigstore/rekor/pkg/pki/pgp
+go.uber.org/zap
github.com/sigstore/rekor/pkg/pki/ssh
github.com/spf13/afero
github.com/magiconair/properties
@@ -3128,38 +3164,38 @@
github.com/go-openapi/runtime/middleware/denco
github.com/go-openapi/runtime/middleware/header
github.com/sigstore/rekor/pkg/pki
-github.com/go-openapi/strfmt
github.com/opentracing/opentracing-go
+github.com/go-openapi/strfmt
+github.com/sigstore/rekor/cmd/rekor-cli/app/state
go.opentelemetry.io/otel/propagation
go.opentelemetry.io/otel/semconv/internal/v2
-github.com/sigstore/rekor/cmd/rekor-cli/app/state
net/http/httputil
github.com/hashicorp/go-cleanhttp
-github.com/go-chi/chi/middleware
golang.org/x/net/trace
-github.com/hashicorp/go-retryablehttp
+github.com/go-chi/chi/middleware
github.com/opentracing/opentracing-go/ext
go.opentelemetry.io/otel/internal/global
-go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
+github.com/hashicorp/go-retryablehttp
+github.com/spf13/viper/internal/encoding/javaproperties
golang.org/x/net/http2
+go.opentelemetry.io/otel/semconv/v1.17.0/httpconv
github.com/sassoftware/relic/lib/pkcs9
-github.com/spf13/viper/internal/encoding/javaproperties
github.com/go-openapi/jsonpointer
github.com/sassoftware/relic/lib/certloader
-github.com/spf13/viper
github.com/go-openapi/jsonreference
-github.com/sassoftware/relic/config
github.com/go-openapi/spec
-github.com/sassoftware/relic/lib/signjar
-go.opentelemetry.io/otel
+github.com/sassoftware/relic/config
github.com/go-openapi/runtime
+github.com/spf13/viper
+github.com/sassoftware/relic/lib/signjar
github.com/sigstore/rekor/pkg/log
+go.opentelemetry.io/otel
github.com/go-openapi/runtime/security
github.com/go-openapi/runtime/yamlpc
+github.com/go-openapi/analysis/internal/flatten/normalize
+github.com/go-openapi/analysis/internal/flatten/operations
github.com/go-openapi/analysis/internal/flatten/replace
github.com/go-openapi/analysis/internal/flatten/schutils
-github.com/go-openapi/analysis/internal/flatten/operations
-github.com/go-openapi/analysis/internal/flatten/normalize
github.com/go-openapi/analysis/internal/flatten/sortref
github.com/go-openapi/analysis
google.golang.org/grpc/internal/transport
@@ -3167,37 +3203,37 @@
github.com/go-openapi/validate
github.com/go-openapi/runtime/middleware/untyped
google.golang.org/grpc
-github.com/sigstore/rekor/pkg/generated/models
github.com/go-openapi/runtime/middleware
+github.com/sigstore/rekor/pkg/generated/models
github.com/go-openapi/runtime/client
github.com/sigstore/rekor/pkg/types
-github.com/google/trillian
+github.com/sigstore/rekor/pkg/generated/client/index
+github.com/sigstore/rekor/pkg/generated/client/pubkey
+github.com/sigstore/rekor/pkg/generated/client/tlog
+github.com/sigstore/rekor/pkg/generated/client/entries
github.com/sigstore/rekor/pkg/tle
-github.com/sigstore/rekor/pkg/types/alpine
github.com/sigstore/rekor/pkg/types/cose
github.com/sigstore/rekor/pkg/types/dsse
github.com/sigstore/rekor/pkg/types/hashedrekord
github.com/sigstore/rekor/pkg/types/helm
github.com/sigstore/rekor/pkg/types/intoto
+github.com/sigstore/rekor/pkg/types/alpine
github.com/sigstore/rekor/pkg/types/jar
github.com/sigstore/rekor/pkg/types/rekord
github.com/sigstore/rekor/pkg/types/rfc3161
-github.com/sigstore/rekor/pkg/generated/client/entries
-github.com/sigstore/rekor/pkg/generated/client/index
-github.com/sigstore/rekor/pkg/generated/client/pubkey
-github.com/sigstore/rekor/pkg/generated/client/tlog
-github.com/sigstore/rekor/pkg/types/helm/v0.0.1
+github.com/google/trillian
+github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
github.com/sigstore/rekor/pkg/types/dsse/v0.0.1
github.com/sigstore/rekor/pkg/types/cose/v0.0.1
-github.com/sigstore/rekor/cmd/rekor-cli/app/format
-github.com/sigstore/rekor/pkg/types/hashedrekord/v0.0.1
-github.com/sigstore/rekor/pkg/types/intoto/v0.0.1
-github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
github.com/sigstore/rekor/pkg/types/jar/v0.0.1
-github.com/sigstore/rekor/pkg/types/rekord/v0.0.1
-github.com/sigstore/rekor/pkg/types/alpine/v0.0.1
github.com/sigstore/rekor/pkg/types/rfc3161/v0.0.1
+github.com/sigstore/rekor/cmd/rekor-cli/app/format
+github.com/sigstore/rekor/pkg/types/rekord/v0.0.1
+github.com/sigstore/rekor/pkg/types/intoto/v0.0.1
github.com/sigstore/rekor/pkg/generated/client
+github.com/sigstore/rekor/pkg/types/alpine/v0.0.1
+github.com/sigstore/rekor/pkg/types/helm/v0.0.1
+github.com/sigstore/rekor/pkg/types/intoto/v0.0.2
github.com/sigstore/rekor/pkg/client
github.com/sigstore/rekor/pkg/verify
github.com/google/trillian/types
@@ -3236,7 +3272,7 @@
Use "rekor-cli [command] --help" for more information about a command.
--- PASS: TestCover (0.00s)
PASS
-ok github.com/sigstore/rekor/cmd/rekor-cli 0.034s
+ok github.com/sigstore/rekor/cmd/rekor-cli 0.033s
create-stamp debian/debhelper-build-stamp
dh_testroot -O--builddirectory=_build -O--buildsystem=golang
dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -3251,7 +3287,7 @@
mkdir: created directory '/build/reproducible-path/rekor-1.3.7/debian/rekor/usr/share'
mkdir: created directory '/build/reproducible-path/rekor-1.3.7/debian/rekor/usr/share/man'
mkdir: created directory '/build/reproducible-path/rekor-1.3.7/debian/rekor/usr/share/man/man1'
-env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/build/reproducible-path/rekor-1.3.7/debian/tmp/usr/bin \
+env PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path:/build/reproducible-path/rekor-1.3.7/debian/tmp/usr/bin \
help2man --no-info --version-string="1.3.7-1" \
--no-discard-stderr -Idebian/rekor-cli.h2m \
rekor-cli -o /build/reproducible-path/rekor-1.3.7/debian/rekor/usr/share/man/man1/rekor-cli.1
@@ -3278,8 +3314,8 @@
dh_md5sums -O--builddirectory=_build -O--buildsystem=golang
dh_builddeb -O--builddirectory=_build -O--buildsystem=golang
dpkg-deb: building package 'rekor' in '../rekor_1.3.7-1_arm64.deb'.
-dpkg-deb: building package 'golang-github-sigstore-rekor-dev' in '../golang-github-sigstore-rekor-dev_1.3.7-1_all.deb'.
dpkg-deb: building package 'rekor-dbgsym' in '../rekor-dbgsym_1.3.7-1_arm64.deb'.
+dpkg-deb: building package 'golang-github-sigstore-rekor-dev' in '../golang-github-sigstore-rekor-dev_1.3.7-1_all.deb'.
dpkg-genbuildinfo --build=binary -O../rekor_1.3.7-1_arm64.buildinfo
dpkg-genchanges --build=binary -O../rekor_1.3.7-1_arm64.changes
dpkg-genchanges: info: binary-only upload (no source code included)
@@ -3287,12 +3323,14 @@
dpkg-buildpackage: info: binary-only upload (no source included)
dpkg-genchanges: info: including full source code in upload
I: copying local configuration
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/3872077/tmp/hooks/B01_cleanup finished
I: unmounting dev/ptmx filesystem
I: unmounting dev/pts filesystem
I: unmounting dev/shm filesystem
I: unmounting proc filesystem
I: unmounting sys filesystem
I: cleaning the build env
-I: removing directory /srv/workspace/pbuilder/3065407 and its subdirectories
-I: Current time: Wed Jan 15 08:18:15 -12 2025
-I: pbuilder-time-stamp: 1736972295
+I: removing directory /srv/workspace/pbuilder/3872077 and its subdirectories
+I: Current time: Thu Jan 16 10:20:40 +14 2025
+I: pbuilder-time-stamp: 1736972440