bazaar.launchpad links have inconsistent checksums

Bug #1576338 reported by Robin H. Johnson
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
loggerhead
New
Undecided
Unassigned
loggerhead-breezy
Triaged
Medium
Unassigned

Bug Description

Tarballs of bzr revisions, such as those available at http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 have inconsistent checksums, because the gzip header contains the compression timestamp, which changes.

This means that externally they cannot be relied on to have verified content.

Example of problem:

$ wget http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 -O a
$ sleep 5
$ wget http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 -O b
$ sha256sum a b
83a34a4177638a8b1aa92efd8f66fdc927c46f83021d8cf3d969783eaa2a8bd8 a
255199258e761732accaf3d0c3981a91c35289bce8f7aacaa9f967d2e5e1f14d b
$ file a b
a: gzip compressed data, last modified: Thu Apr 28 17:16:17 2016, max compression
b: gzip compressed data, last modified: Thu Apr 28 17:16:22 2016, max compression

Please exclude the timestamp from the tarballs, to ensure that the checksum is consistent.

Colin Watson (cjwatson)
affects: launchpad → loggerhead
Jelmer Vernooij (jelmer)
Changed in loggerhead-breezy:
status: New → Triaged
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.