Diff of the two buildlogs:

--
--- b1/build.log	2024-04-15 19:21:57.752443559 +0000
+++ b2/build.log	2024-04-15 19:26:19.989340939 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Mon Apr 15 07:19:58 -12 2024
-I: pbuilder-time-stamp: 1713208798
+I: Current time: Tue Apr 16 09:22:07 +14 2024
+I: pbuilder-time-stamp: 1713208927
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
 I: copying local configuration
@@ -28,52 +28,84 @@
 dpkg-source: info: applying auto-gitignore
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/22481/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/D01_modify_environment starting
+debug: Running on ff4a.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Apr 15 19:22 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='armhf'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=3 '
-  DISTRIBUTION='unstable'
-  HOME='/root'
-  HOST_ARCH='armhf'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="21" [3]="1" [4]="release" [5]="arm-unknown-linux-gnueabihf")
+  BASH_VERSION='5.2.21(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=armhf
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=4 '
+  DIRSTACK=()
+  DISTRIBUTION=unstable
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=arm
+  HOST_ARCH=armhf
   IFS=' 	
   '
-  INVOCATION_ID='b5e632104e444632ac37fcd2482faf68'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='22481'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=9f735736d2064b5ea1c65bf562ff6ead
+  LANG=C
+  LANGUAGE=it_CH:it
+  LC_ALL=C
+  MACHTYPE=arm-unknown-linux-gnueabihf
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnueabihf
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=10762
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HZyZ7Gcn/pbuilderrc_BLDx --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HZyZ7Gcn/b1 --logfile b1/build.log golang-github-coreos-go-oidc-v3_3.4.0-2.dsc'
-  SUDO_GID='110'
-  SUDO_UID='103'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://10.0.0.15:3142/'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.HZyZ7Gcn/pbuilderrc_mPSt --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.HZyZ7Gcn/b2 --logfile b2/build.log golang-github-coreos-go-oidc-v3_3.4.0-2.dsc'
+  SUDO_GID=113
+  SUDO_UID=107
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://10.0.0.15:3142/
 I: uname -a
-  Linux virt64z 6.1.0-20-arm64 #1 SMP Debian 6.1.85-1 (2024-04-11) aarch64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-20-armmp-lpae #1 SMP Debian 6.1.85-1 (2024-04-11) armv7l GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Apr 13 07:43 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/22481/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Apr 14 07:45 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -164,7 +196,7 @@
 Get: 43 http://deb.debian.org/debian unstable/main armhf golang-google-cloud-compute-metadata-dev all 0.56.0-3 [32.2 kB]
 Get: 44 http://deb.debian.org/debian unstable/main armhf golang-golang-x-oauth2-google-dev all 0.15.0-1 [46.1 kB]
 Get: 45 http://deb.debian.org/debian unstable/main armhf golang-gopkg-square-go-jose.v2-dev all 2.6.0-2 [266 kB]
-Fetched 66.1 MB in 1s (102 MB/s)
+Fetched 66.1 MB in 4s (17.3 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package sensible-utils.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19442 files and directories currently installed.)
@@ -359,7 +391,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/golang-github-coreos-go-oidc-v3-3.4.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../golang-github-coreos-go-oidc-v3_3.4.0-2_source.changes
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/golang-github-coreos-go-oidc-v3-3.4.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../golang-github-coreos-go-oidc-v3_3.4.0-2_source.changes
 dpkg-buildpackage: info: source package golang-github-coreos-go-oidc-v3
 dpkg-buildpackage: info: source version 3.4.0-2
 dpkg-buildpackage: info: source distribution unstable
@@ -377,19 +413,19 @@
    dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go install -trimpath -v -p 3 github.com/coreos/go-oidc/v3/oidc
-internal/unsafeheader
+	cd _build && go install -trimpath -v -p 4 github.com/coreos/go-oidc/v3/oidc
 internal/goarch
+internal/unsafeheader
 internal/cpu
 internal/coverage/rtcov
+internal/godebugs
 internal/abi
 internal/chacha8rand
-internal/bytealg
-internal/godebugs
 internal/goexperiment
 internal/goos
-runtime/internal/atomic
 runtime/internal/math
+internal/bytealg
+runtime/internal/atomic
 runtime/internal/sys
 runtime/internal/syscall
 internal/race
@@ -398,16 +434,16 @@
 unicode/utf8
 internal/itoa
 math/bits
-runtime
-math
 crypto/internal/alias
 crypto/internal/boring/sig
 cmp
+math
 slices
 unicode/utf16
 vendor/golang.org/x/crypto/cryptobyte/asn1
 encoding
 internal/nettrace
+runtime
 container/list
 vendor/golang.org/x/crypto/internal/alias
 log/internal
@@ -417,94 +453,94 @@
 internal/testlog
 internal/bisect
 internal/singleflight
-errors
 runtime/cgo
+internal/godebug
+errors
 sort
 io
-bytes
 internal/oserror
 syscall
+bytes
 hash
 strconv
+crypto/internal/nistec/fiat
 crypto
 reflect
 time
-crypto/internal/nistec/fiat
 context
 crypto/internal/randutil
 internal/syscall/unix
-internal/poll
 internal/safefilepath
 internal/syscall/execenv
-encoding/binary
-internal/fmtsort
+internal/poll
 path
 io/fs
+crypto/internal/nistec
+math/rand
+os
+encoding/binary
+internal/fmtsort
+strings
+vendor/golang.org/x/net/dns/dnsmessage
 crypto/cipher
 crypto/internal/edwards25519/field
 crypto/internal/boring
 crypto/aes
-os
-internal/godebug
-crypto/internal/nistec
-math/rand
-strings
+crypto/ecdh
 fmt
 crypto/sha512
-crypto/ecdh
 crypto/sha256
 encoding/base64
 crypto/des
 crypto/internal/edwards25519
 crypto/md5
 crypto/sha1
-math/big
-encoding/json
-encoding/hex
 encoding/pem
-vendor/golang.org/x/net/dns/dnsmessage
 internal/intern
 net/netip
-net/url
 path/filepath
-net
-crypto/elliptic
-crypto/internal/bigmod
-crypto/internal/boring/bbig
-encoding/asn1
-crypto/rand
-crypto/rsa
-crypto/dsa
-vendor/golang.org/x/crypto/cryptobyte
-crypto/ed25519
-crypto/x509/pkix
 io/ioutil
+math/big
+encoding/json
+encoding/hex
+net/url
+net
 bufio
-crypto/ecdsa
 mime
 compress/flate
 hash/crc32
 crypto/hmac
 crypto/rc4
 vendor/golang.org/x/crypto/chacha20
-vendor/golang.org/x/crypto/internal/poly1305
 compress/gzip
+crypto/elliptic
+crypto/internal/bigmod
+crypto/internal/boring/bbig
+encoding/asn1
+crypto/rand
+crypto/dsa
+crypto/rsa
+crypto/ed25519
+vendor/golang.org/x/crypto/internal/poly1305
+vendor/golang.org/x/crypto/cryptobyte
+crypto/x509/pkix
 vendor/golang.org/x/crypto/chacha20poly1305
 vendor/golang.org/x/crypto/hkdf
 vendor/golang.org/x/text/transform
 log
 vendor/golang.org/x/text/unicode/norm
+crypto/ecdsa
 vendor/golang.org/x/text/unicode/bidi
-vendor/golang.org/x/text/secure/bidirule
 vendor/golang.org/x/net/http2/hpack
+vendor/golang.org/x/text/secure/bidirule
 mime/quotedprintable
 net/http/internal
-vendor/golang.org/x/net/idna
 net/http/internal/ascii
 golang.org/x/crypto/ed25519
 golang.org/x/crypto/pbkdf2
 gopkg.in/square/go-jose.v2/cipher
 gopkg.in/square/go-jose.v2/json
+vendor/golang.org/x/net/idna
 vendor/golang.org/x/net/http/httpproxy
 net/textproto
 crypto/x509
@@ -518,17 +554,17 @@
 golang.org/x/oauth2
 github.com/coreos/go-oidc/v3/oidc
    dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go test -vet=off -v -p 3 github.com/coreos/go-oidc/v3/oidc
+	cd _build && go test -vet=off -v -p 4 github.com/coreos/go-oidc/v3/oidc
 === RUN   TestRSAVerify
---- PASS: TestRSAVerify (0.44s)
+--- PASS: TestRSAVerify (0.91s)
 === RUN   TestECDSAVerify
---- PASS: TestECDSAVerify (0.04s)
+--- PASS: TestECDSAVerify (0.06s)
 === RUN   TestMultipleKeysVerify
---- PASS: TestMultipleKeysVerify (0.27s)
+--- PASS: TestMultipleKeysVerify (0.94s)
 === RUN   TestMismatchedKeyID
---- PASS: TestMismatchedKeyID (0.31s)
+--- PASS: TestMismatchedKeyID (0.80s)
 === RUN   TestRotation
---- PASS: TestRotation (0.45s)
+--- PASS: TestRotation (1.02s)
 === RUN   TestAccessTokenVerification
 === RUN   TestAccessTokenVerification/goodRS256
 === RUN   TestAccessTokenVerification/goodES384
@@ -567,7 +603,7 @@
 === RUN   TestUserInfoEndpoint/signed_jwt_userinfo,_content-type_with_charset
 === RUN   TestUserInfoEndpoint/basic_json_userinfo_-_cognito_variant
 === RUN   TestUserInfoEndpoint/signed_jwt_userinfo_-_cognito_variant
---- PASS: TestUserInfoEndpoint (0.01s)
+--- PASS: TestUserInfoEndpoint (0.02s)
     --- PASS: TestUserInfoEndpoint/basic_json_userinfo (0.00s)
     --- PASS: TestUserInfoEndpoint/signed_jwt_userinfo (0.00s)
     --- PASS: TestUserInfoEndpoint/signed_jwt_userinfo,_content-type_with_charset (0.00s)
@@ -587,7 +623,7 @@
 === RUN   TestVerify/nbf_in_future_within_clock_skew_tolerance
 === RUN   TestVerify/unsigned_token
 === RUN   TestVerify/unsigned_token_InsecureSkipSignatureCheck
---- PASS: TestVerify (2.60s)
+--- PASS: TestVerify (7.12s)
     --- PASS: TestVerify/good_token (0.01s)
     --- PASS: TestVerify/invalid_issuer (0.01s)
     --- PASS: TestVerify/skip_issuer_check (0.01s)
@@ -605,7 +641,7 @@
 === RUN   TestVerifyAudience/good_audience
 === RUN   TestVerifyAudience/mismatched_audience
 === RUN   TestVerifyAudience/multiple_audiences,_one_matches
---- PASS: TestVerifyAudience (0.53s)
+--- PASS: TestVerifyAudience (1.35s)
     --- PASS: TestVerifyAudience/good_audience (0.01s)
     --- PASS: TestVerifyAudience/mismatched_audience (0.01s)
     --- PASS: TestVerifyAudience/multiple_audiences,_one_matches (0.01s)
@@ -615,7 +651,7 @@
 === RUN   TestVerifySigningAlg/ecdsa_signing
 === RUN   TestVerifySigningAlg/one_of_many_supported
 === RUN   TestVerifySigningAlg/not_in_requiredAlgs
---- PASS: TestVerifySigningAlg (0.21s)
+--- PASS: TestVerifySigningAlg (0.77s)
     --- PASS: TestVerifySigningAlg/default_signing_alg (0.01s)
     --- PASS: TestVerifySigningAlg/bad_signing_alg (0.00s)
     --- PASS: TestVerifySigningAlg/ecdsa_signing (0.01s)
@@ -623,7 +659,7 @@
     --- PASS: TestVerifySigningAlg/not_in_requiredAlgs (0.00s)
 === RUN   TestAccessTokenHash
 === RUN   TestAccessTokenHash/at_hash
---- PASS: TestAccessTokenHash (0.27s)
+--- PASS: TestAccessTokenHash (0.53s)
     --- PASS: TestAccessTokenHash/at_hash (0.01s)
 === RUN   TestDistributedClaims
 === RUN   TestDistributedClaims/NoDistClaims
@@ -631,7 +667,7 @@
 === RUN   TestDistributedClaims/2DistClaims1Src
 === RUN   TestDistributedClaims/1Name0Src
 === RUN   TestDistributedClaims/NoNames1Src
---- PASS: TestDistributedClaims (1.37s)
+--- PASS: TestDistributedClaims (3.25s)
     --- PASS: TestDistributedClaims/NoDistClaims (0.01s)
     --- PASS: TestDistributedClaims/1DistClaim (0.01s)
     --- PASS: TestDistributedClaims/2DistClaims1Src (0.01s)
@@ -641,12 +677,12 @@
 === RUN   TestDistClaimResolver/noAccessToken
 === RUN   TestDistClaimResolver/rightAccessToken
 === RUN   TestDistClaimResolver/wrongAccessToken
---- PASS: TestDistClaimResolver (0.67s)
-    --- PASS: TestDistClaimResolver/noAccessToken (0.04s)
-    --- PASS: TestDistClaimResolver/rightAccessToken (0.03s)
-    --- PASS: TestDistClaimResolver/wrongAccessToken (0.03s)
+--- PASS: TestDistClaimResolver (1.46s)
+    --- PASS: TestDistClaimResolver/noAccessToken (0.07s)
+    --- PASS: TestDistClaimResolver/rightAccessToken (0.07s)
+    --- PASS: TestDistClaimResolver/wrongAccessToken (0.07s)
 PASS
-ok  	github.com/coreos/go-oidc/v3/oidc	7.188s
+ok  	github.com/coreos/go-oidc/v3/oidc	18.251s
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--builddirectory=_build -O--buildsystem=golang
    dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -673,12 +709,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: not including original source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/10762/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/22481 and its subdirectories
-I: Current time: Mon Apr 15 07:21:53 -12 2024
-I: pbuilder-time-stamp: 1713208913
+I: removing directory /srv/workspace/pbuilder/10762 and its subdirectories
+I: Current time: Tue Apr 16 09:26:15 +14 2024
+I: pbuilder-time-stamp: 1713209175