bazaar.launchpad links have inconsistent checksums

Bug #1576338 reported by Robin H. Johnson on 2016-04-28
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
loggerhead
Undecided
Unassigned
loggerhead-breezy
Medium
Unassigned

Bug Description

Tarballs of bzr revisions, such as those available at http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 have inconsistent checksums, because the gzip header contains the compression timestamp, which changes.

This means that externally they cannot be relied on to have verified content.

Example of problem:

$ wget http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 -O a
$ sleep 5
$ wget http://bazaar.launchpad.net/~cloud-init-dev/cloud-init/trunk/tarball/1212 -O b
$ sha256sum a b
83a34a4177638a8b1aa92efd8f66fdc927c46f83021d8cf3d969783eaa2a8bd8 a
255199258e761732accaf3d0c3981a91c35289bce8f7aacaa9f967d2e5e1f14d b
$ file a b
a: gzip compressed data, last modified: Thu Apr 28 17:16:17 2016, max compression
b: gzip compressed data, last modified: Thu Apr 28 17:16:22 2016, max compression

Please exclude the timestamp from the tarballs, to ensure that the checksum is consistent.

Colin Watson (cjwatson) on 2016-04-28
affects: launchpad → loggerhead
Jelmer Vernooij (jelmer) on 2018-10-20
Changed in loggerhead-breezy:
status: New → Triaged
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers