Arch Linux minimal container userland 100% reproducible - now what?

[Bernhard M. Wiedemann]

On 21/03/2024 21.38, kpcyrd wrote:
> - libjpeg-turbo: this package contains a .jar file that is built by 
> CMake and contains timestamps of the buildtime, but there's no way in 
> CMake to pass --date to the jar executable to normalize this

You could use strip-nondeterminism for post-processing there.
For some reason it is reproducible in my openSUSE tests without us doing 
any extra steps.
https://ismypackagereproducibleyet.org/?pkg=libjpeg-turbo


> - librsvg: the 3 rebuilders I've checked produced a .text section that is 6 bytes shorter (0x2dda2c vs 0x2dda26), I didn't investigate further yet, the diff is quite long because a lot of addresses are mismatching as a consequence 

My notes have https://gitlab.gnome.org/GNOME/librsvg/-/issues/1015 which 
turned out to be from pango mis-rendering text when font files were absent.

Ciao
Bernhard M.