[Git][reproducible-builds/reproducible-website][master] Archives: add file permissions hint/guidance

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
35ed63bc by James Addison at 2025-01-11T01:30:29+00:00
Archives: add file permissions hint/guidance

- - - - -


1 changed file:

- _docs/archives.md


Changes:

=====================================
_docs/archives.md
=====================================
@@ -110,6 +110,15 @@ To avoid this, either `unset POSIXLY_CORRECT` (only works with [tar>1.32](https:
 `--pax-option=exthdr.name=%d/PaxHeaders/%f,delete=atime,delete=ctime` or `--format=gnu` (both only available in GNU tar)
 or use `--format=ustar` if the limitations in that format are not a problem.
 
+File permissions
+----------------
+
+Permissions on build artifacts may vary, for example due to differing `umask` settings. The resulting permission differences may be reflected when archive files containing them are created.
+
+When possible, it is preferable to create build artifacts using deterministic permissions so that variance does not arise.  However, sometimes it may be easier or more practical to configure static permissions later in the build, when the archive files are created.
+
+To configure file permissions when creating a `tar` archive, you can use the `--mode` argument.  For example, to request that, by default, unpacked files should be readable by everyone by default, writable only by their owner, and to allow everyone to list directory/folder contents, add: `--mode=a=rX,u+w`
+
 Full example
 ------------
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/35ed63bc12a9d1c6e31e49019f8adb9a3883ff2f

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/35ed63bc12a9d1c6e31e49019f8adb9a3883ff2f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20250113/834e3e1a/attachment.htm>