[rb-general] lzip/plzip alternatives

Sylvain beuc at beuc.net
Tue Apr 18 21:50:23 CEST 2017


Hi,

I played with reproducible tarballs and noticed that the Debian
packages for lzip and plzip (parallel lzip) manage /usr/bin/lzip
through an alternatives (symlinks) system.
Installing plzip makes /usr/bin/lzip point to that variant.

AFAICT compressors and their parallel variants produce different
output, and this is the case here.

This means that if I produce my tarball using 'tar -c --lzip' or
'tar -c | lzip', depending on whether plzip is installed or not, I
will silently get a different output.

Should I file a bug report against the plzip package?
What severity would you recommend?

(Bonus question: is it theoretically possible to have such tools pairs
 (gz/pigz, xz/pgz, lzip/plzip) produce the same output? :))

Cheers!
Sylvain


More information about the rb-general mailing list