bazaar.launchpad links have inconsistent checksums

Bug #1576338 reported by Robin H. Johnson on 2016-04-28
This bug affects 2 people
Affects Status Importance Assigned to Milestone

Bug Description

Tarballs of bzr revisions, such as those available at have inconsistent checksums, because the gzip header contains the compression timestamp, which changes.

This means that externally they cannot be relied on to have verified content.

Example of problem:

$ wget -O a
$ sleep 5
$ wget -O b
$ sha256sum a b
83a34a4177638a8b1aa92efd8f66fdc927c46f83021d8cf3d969783eaa2a8bd8 a
255199258e761732accaf3d0c3981a91c35289bce8f7aacaa9f967d2e5e1f14d b
$ file a b
a: gzip compressed data, last modified: Thu Apr 28 17:16:17 2016, max compression
b: gzip compressed data, last modified: Thu Apr 28 17:16:22 2016, max compression

Please exclude the timestamp from the tarballs, to ensure that the checksum is consistent.

Colin Watson (cjwatson) on 2016-04-28
affects: launchpad → loggerhead
Jelmer Vernooij (jelmer) on 2018-10-20
Changed in loggerhead-breezy:
status: New → Triaged
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers