GNU logs - #40316, boring messages

Message sent to bug-guix@HIDDEN:

Subject: bug#40316: core-updates nss not reproducible
Resent-From: Danny Milosavljevic <dannym@HIDDEN>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 30 Mar 2020 02:36:21 +0000
Resent-Message-ID: <handler.40316.B.158553573717472 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: 40316 <at> debbugs.gnu.org
Date: Sun, 29 Mar 2020 13:16:11 +0200
From: Danny Milosavljevic <dannym@HIDDEN>
Message-ID: <20200329131611.38448a58@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="Sig_/pm1QyT0nTMb6r.IYo3ZIizw";
 protocol="application/pgp-signature"; micalg=pgp-sha256
Precedence: list

--Sig_/pm1QyT0nTMb6r.IYo3ZIizw
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Hi,

core-updates' nss is not reproducible (commit
aebcbb27bc2f192cc06163251bab66a4ceb7b7d6).

diffoscope says:

--- /gnu/store/gfpgqvwrixhf3sf1bnzsfxzvld0nd8b7-nss-3.50
+++ /gnu/store/gfpgqvwrixhf3sf1bnzsfxzvld0nd8b7-nss-3.50-check
=E2=94=9C=E2=94=80=E2=94=80 lib
=E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 nss
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libfreebl3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010029
=E2=94=82 =E2=94=82 =E2=94=82 -713ef8afdc7c8efcff89e8c420bfdd8835e6d08bb934=
ce160fe927b99ac8f997
=E2=94=82 =E2=94=82 =E2=94=82 -c043c16bfe67abbbd27a97b4aa4df753c33f5a093d95=
98413edfb4c6a0a68309
=E2=94=82 =E2=94=82 =E2=94=82 -4f3a160aec8a5e8e383c108c802580e5f117f9b2be6d=
496f6eb6e85937258e53
=E2=94=82 =E2=94=82 =E2=94=82 -f3f55ac49f7ffa955e91e054d1dd6b19f725506e2242=
fbb2f8acf81c9ff4278c
=E2=94=82 =E2=94=82 =E2=94=82 -5c6ad6528d1a8505c6c83fd643660e3a31dddff7eb5f=
046f0df6d47ea455c82c
=E2=94=82 =E2=94=82 =E2=94=82 -78ec32d8a1aaa29c9deed1053feae3029eacce8b9ff8=
8777ff964757aeb1ccce
=E2=94=82 =E2=94=82 =E2=94=82 -bd14d326b7fb0822bbc982250e51d4eaa73599ef8e4f=
d2298f076edf9a9be41e
=E2=94=82 =E2=94=82 =E2=94=82 -94da645f57dc12af730b3661973390672cbcf767caf4=
95e1f3656f06f0fae300
=E2=94=82 =E2=94=82 =E2=94=82 -00004030361665e91e760d37d9117256e4f698d2b124=
115e83aafcc92c2751fa
=E2=94=82 =E2=94=82 =E2=94=82 -f2b3384c22c76a207da12a4c4b72662e9ae53f356d6b=
6d98a066cd240cb06fed
=E2=94=82 =E2=94=82 =E2=94=82 -337d6d
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f00000100a3
=E2=94=82 =E2=94=82 =E2=94=82 +35c76bfe38266728b573ef4fedcb22131ce275a8a484=
902b3ad994ca3a87a754
=E2=94=82 =E2=94=82 =E2=94=82 +998b5c5807e4fa0e9b83a6677eca9140b8bbeeb4c368=
97473065b8305c4d1ddd
=E2=94=82 =E2=94=82 =E2=94=82 +3f967b7041217df53ae6ec4211b031cc12df895a35ef=
cde570dd2c7a610151c9
=E2=94=82 =E2=94=82 =E2=94=82 +ef0acdf28a646db355ece183e2e71275c51b4331e61c=
a7948c7aa62d420e8b17
=E2=94=82 =E2=94=82 =E2=94=82 +481f427197c78094832de5e3f21d27bf701e6fc524e5=
f700567969f91e8864c0
=E2=94=82 =E2=94=82 =E2=94=82 +fae4da549d548ce8b134456e0720d083c8649bdb44ac=
6383d2e5a41bd2ec3b64
=E2=94=82 =E2=94=82 =E2=94=82 +e9b6d281708447aefdd60be32f7d9093fef2579d6c12=
2b48e449b2266bdc4678
=E2=94=82 =E2=94=82 =E2=94=82 +9639fd997f0d8fe649b51a5f3097603b130bb5e8a811=
b5f3c121ed6d7bb58300
=E2=94=82 =E2=94=82 =E2=94=82 +00004004c38a443627df69c2bc659e2e810b24b0e4dc=
042311fb9b2c99d18e7b
=E2=94=82 =E2=94=82 =E2=94=82 +242fc7729f9e5facc1dc69ced89ea571bd69f9527789=
4e9954c28c2f8ab77d62
=E2=94=82 =E2=94=82 =E2=94=82 +e96c1d
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libfreeblpriv3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f00000100a3
=E2=94=82 =E2=94=82 =E2=94=82 -298c351142cb4107acceb8e07a997cc63fade4c4dd6c=
c0d3f5dedad25fca66bc
=E2=94=82 =E2=94=82 =E2=94=82 -d58fb35b3a1f8ce3c90c795a8066cb4312b2b11558da=
f3c388ee3865d1cbc75d
=E2=94=82 =E2=94=82 =E2=94=82 -88832d044dd267885c36455be97ee5ff17ee95a93771=
70441267b604d6bea8d2
=E2=94=82 =E2=94=82 =E2=94=82 -c7fbaebd2c39506220d5d2c4a34e6a848fc139bd38f9=
5c7e48160d847c270a78
=E2=94=82 =E2=94=82 =E2=94=82 -e88519f1a5f2f36c6d6d4c16d621b2e763e48d42818b=
1a3b76421a52c7c209b9
=E2=94=82 =E2=94=82 =E2=94=82 -a70fe921ad9b80411150a5e4d800bd89fe4486361412=
b39a9b5c68abec6bb68d
=E2=94=82 =E2=94=82 =E2=94=82 -8f7d1b823c9d455d0062d9b819b1d5173a493cdbea00=
dcfc98a52537bd373acb
=E2=94=82 =E2=94=82 =E2=94=82 -cb046c7fe4246590c9875413f19dba8f63a2f05771d1=
61513efeb2e663ebf400
=E2=94=82 =E2=94=82 =E2=94=82 -000040299e7b6851b43d6f40d1704237831bbb5a1fd4=
e38c041f1b7222480338
=E2=94=82 =E2=94=82 =E2=94=82 -c27b4e655f1846220c4950db84ce7da9b2c1b2c65303=
04a73c8caff757be8ba4
=E2=94=82 =E2=94=82 =E2=94=82 -51d8ec
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010032
=E2=94=82 =E2=94=82 =E2=94=82 +0bdce77a4aabe0b8a8b97469180a5882104d30c155df=
c227f99b7add6aedda98
=E2=94=82 =E2=94=82 =E2=94=82 +b9aee674e8a2f43377eea0e32f4382f8818a9cd39dfe=
0f2217b989ab695b1317
=E2=94=82 =E2=94=82 =E2=94=82 +971ae000096efde5a3610306a7a60b3075204f775435=
09fb48d1605d0ae6d7cd
=E2=94=82 =E2=94=82 =E2=94=82 +dd5b3576d2d09d9e4d5357ea21e7376e2fa69ba804a1=
9161ab639219592efef5
=E2=94=82 =E2=94=82 =E2=94=82 +ad5b8714ad21118b1fa53453b6e4222e267b0a692704=
de6bcd10895afeaf5f21
=E2=94=82 =E2=94=82 =E2=94=82 +f721c406a796e092b344bc78abd953205e6d932c87fe=
f89e80715a9eefbd6417
=E2=94=82 =E2=94=82 =E2=94=82 +eef4e8c8630fe92927d81870c50f64aa15f2dbb965d9=
aa51a450d0c53607d60a
=E2=94=82 =E2=94=82 =E2=94=82 +8c4ad1461e32c7dc78bf606eaacf38a88a2c47f496b3=
ba289e104e8d25a84400
=E2=94=82 =E2=94=82 =E2=94=82 +0000408df400964ed23bd859d524136afbf355cce08a=
e540f65bbfe055e81950
=E2=94=82 =E2=94=82 =E2=94=82 +6b84f52240c447ad47c53ee31e9fed82d08905f65adf=
edd54f5b91b6b9d6105b
=E2=94=82 =E2=94=82 =E2=94=82 +f2f8f4
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libnssdbm3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001009d
=E2=94=82 =E2=94=82 =E2=94=82 -76e916a4dfe80c81097e4cff0f945852d689772f01c8=
7f11c2fab03f99f20417
=E2=94=82 =E2=94=82 =E2=94=82 -d1458884f5255774a9028c848ce879369734f01f1e12=
ceb9cf63dc9eca1170b8
=E2=94=82 =E2=94=82 =E2=94=82 -23e6678ab9f65f2dbeeae2c96fd90367e720124a2d11=
551127baf17e2a7b214d
=E2=94=82 =E2=94=82 =E2=94=82 -f24bca9fbb5355d2479e7c06ec05fe138ad50c26a187=
6053143bf0ed18eae349
=E2=94=82 =E2=94=82 =E2=94=82 -42b8b96ab9bdde2e234fbfe354d8b3698cd5ddadfdd1=
de6ab8d75c558a96bd8a
=E2=94=82 =E2=94=82 =E2=94=82 -accb720a1207f4b25c9e1df0e0b60574d8f89d65e669=
8e1626e1d1a892c3c1d5
=E2=94=82 =E2=94=82 =E2=94=82 -13ee0f6ee4e87e2b54d566283e99aaa6300e3131913c=
9549d4b1a6ad2869fd4c
=E2=94=82 =E2=94=82 =E2=94=82 -d28567c75a32f0d132021b586ab8fb292994d065ec4b=
3875dabc993cb0e17800
=E2=94=82 =E2=94=82 =E2=94=82 -00004070a60b59d01834af5e27dff70526b0beb20dfa=
bb43a6ab25f766d1ec26
=E2=94=82 =E2=94=82 =E2=94=82 -90ce003539dbf276a167ec78d7a998f69e99bf3c81fc=
7246572342aec6d214da
=E2=94=82 =E2=94=82 =E2=94=82 -abcc97
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001006b
=E2=94=82 =E2=94=82 =E2=94=82 +6170f9835f65f0409f61d947626f5880691b5b1ec5f0=
d280b82d832d3d5d3957
=E2=94=82 =E2=94=82 =E2=94=82 +1745597c3a2392c1271f8508a1c748bc4be5681bacfd=
11480a1855af07ae3cd4
=E2=94=82 =E2=94=82 =E2=94=82 +4fbc4165f89174e7cba60ac7f7c0a17116cfa3fd8e0e=
d6c0c02696352b3f9d53
=E2=94=82 =E2=94=82 =E2=94=82 +7fcbda8cb21b0a95f9e92d38dc8121ea2dac2eabd750=
ba7770c47d514282f45b
=E2=94=82 =E2=94=82 =E2=94=82 +357ef3586d8930a05a6e26c9ea391351d16fa2ab10fb=
08e42406e7a0365c3258
=E2=94=82 =E2=94=82 =E2=94=82 +00de8afadfb3086ca003e964ed1ab11b3410f4ccfede=
3e7b987ade295d4a0bc5
=E2=94=82 =E2=94=82 =E2=94=82 +d505170822d4a01535a93de3a507a51c4180989530d2=
2e50d725d775f7455e9a
=E2=94=82 =E2=94=82 =E2=94=82 +9d5a851f2f976a6f312e924c27ac72a3599f9cf8878b=
be01046a91cd04664c00
=E2=94=82 =E2=94=82 =E2=94=82 +00004002c563080dfd3803f27fa9c896d0dd1b3c985b=
d53f0622cabea11746fa
=E2=94=82 =E2=94=82 =E2=94=82 +ada72d7c05b819eb4dc9cda731e0006b637bd8935555=
06c000dabb5c066d3f7e
=E2=94=82 =E2=94=82 =E2=94=82 +3ea9d8
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libsoftokn3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010030
=E2=94=82 =E2=94=82 =E2=94=82 -045311203f4d6c1624ea5336dc9a5470a2baa285ca72=
94bf2162c479bc0913d4
=E2=94=82 =E2=94=82 =E2=94=82 -f8f326ef62ca8b31781b61e9ad3057d3c4cdd90c882d=
ceb252149d7578cceab4
=E2=94=82 =E2=94=82 =E2=94=82 -4ce0bb338d395901afafbe3c570493a7add01e625de9=
a0a90c4e85c52ce67630
=E2=94=82 =E2=94=82 =E2=94=82 -3b1cc388c65d76d87c5bd31d2db8fbe17db05186c3a4=
bc2032614af6d950e8c7
=E2=94=82 =E2=94=82 =E2=94=82 -91da637dc8a7c2897071c92910e47b529566eddafc91=
8e1c05f39aedea9e712f
=E2=94=82 =E2=94=82 =E2=94=82 -98be2b6b87685411a5d8be0cd4d0c5e680ade81a3b9e=
e09d7aa6489775e3465b
=E2=94=82 =E2=94=82 =E2=94=82 -0dd470a8bd99a84df719cbf935d46a08f9045c58ccb2=
861dd35e76d085caed0a
=E2=94=82 =E2=94=82 =E2=94=82 -9ecc3cffe9bec61966d09e633bf7ac9870d02e03f8d4=
a2911da1b6e02cf6ab00
=E2=94=82 =E2=94=82 =E2=94=82 -0000408a5c4418abe2196ccf3ad0ce5d4df8edfa598b=
efb414c4c622e92b2a70
=E2=94=82 =E2=94=82 =E2=94=82 -c94c5646c44609ba518ecdeef2eaa2745144a5048e2c=
4a92415fee1e3fe2c479
=E2=94=82 =E2=94=82 =E2=94=82 -1fe98a
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010042
=E2=94=82 =E2=94=82 =E2=94=82 +3475f0c8a0fbfcbf67cdac446df60765ccc7b02fb6c5=
079e14c9d2c1da2d7ae5
=E2=94=82 =E2=94=82 =E2=94=82 +8f274ecfcf9d135c05a7405008e8f8c7f5ac86c274aa=
be5fdc33e014b622a5f4
=E2=94=82 =E2=94=82 =E2=94=82 +0c8525071b0d5ee7614464deffee9320a965701df920=
70ff15fe786c1e8c41b3
=E2=94=82 =E2=94=82 =E2=94=82 +b4298574d9c0b9d8e1fe896a12973e579372d75fe8f3=
262254a80b622e6543bb
=E2=94=82 =E2=94=82 =E2=94=82 +16be7160f9a89b934cd7133aa87fa5e03bcf981806cb=
b0bccf01af77008fd424
=E2=94=82 =E2=94=82 =E2=94=82 +cf6190e09910d4aaa812092fa64766d1bce0a9cf77f3=
470f5f0aa37715014cc6
=E2=94=82 =E2=94=82 =E2=94=82 +661c5f55253063713dac706cabab09005b9f1e2889f0=
3e5b860f7eacbce21744
=E2=94=82 =E2=94=82 =E2=94=82 +fd33e21a0ca62878a7863e27667f0f7eb440bdfff02b=
9838d75d3fda4dac2400
=E2=94=82 =E2=94=82 =E2=94=82 +000040180f14354ae8e6d4d243e4fef0819e75346888=
290dd80849a7494dd220
=E2=94=82 =E2=94=82 =E2=94=82 +db71d615c82b2dbdee722fb914aff6875ffd66be934a=
102f0f684535169c9940
=E2=94=82 =E2=94=82 =E2=94=82 +c0733d

--Sig_/pm1QyT0nTMb6r.IYo3ZIizw
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEds7GsXJ0tGXALbPZ5xo1VCwwuqUFAl6Ag3sACgkQ5xo1VCww
uqUcOQf9FRk0qJnm4CkVu0X3dfZk+MXcqa3Cki13j3PjZ3feJpJT5ypO1EB5V15H
CbSQMLRNn3XJoR/O+cmWor1fyUvwEn9FmwNVQymMEATkKoxGz4VoOREOHeu7XTf8
IkjnSrJW03pmNoMkoFv5awv8CTQ/f7VvWVBunI+scruI0AG9OzAVd3jiYsjuLfeH
a7DcBHS0eCqgrFRkAaYxXjKOVmbFhIFOQv1vreAcHupH7N1G2nVWiPkH/WJjUAnh
Jzl+0C8z+uS/GmdkkZ08wj/U8SR8l+0ME1hushNtF8B2xTnc+5z01UlfxXkf8Mzg
XTC3lG9ByG0vFMB0pyld9Gbv3s9kCA==
=WADR
-----END PGP SIGNATURE-----

--Sig_/pm1QyT0nTMb6r.IYo3ZIizw--

Message sent:

Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
Content-Type: text/plain; charset=utf-8
X-Loop: help-debbugs@HIDDEN
From: help-debbugs@HIDDEN (GNU bug Tracking System)
To: Danny Milosavljevic <dannym@HIDDEN>
Subject: bug#40316: Acknowledgement (core-updates nss not reproducible)
Message-ID: <handler.40316.B.158553573717472.ack <at> debbugs.gnu.org>
References: <20200329131611.38448a58@HIDDEN>
X-Gnu-PR-Message: ack 40316
X-Gnu-PR-Package: guix
Reply-To: 40316 <at> debbugs.gnu.org
Date: Mon, 30 Mar 2020 02:36:21 +0000

Thank you for filing a new bug report with debbugs.gnu.org.

This is an automatically generated reply to let you know your message
has been received.

Your message is being forwarded to the package maintainers and other
interested parties for their attention; they will reply in due course.

Your message has been sent to the package maintainer(s):
 bug-guix@HIDDEN

If you wish to submit further information on this problem, please
send it to 40316 <at> debbugs.gnu.org.

Please do not send mail to help-debbugs@HIDDEN unless you wish
to report a problem with the Bug-tracking system.

--=20
40316: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D40316
GNU Bug Tracking System
Contact help-debbugs@HIDDEN with problems

Message sent to bug-guix@HIDDEN:

Subject: bug#40316: core-updates nss not reproducible
Resent-From: =?UTF-8?Q?G=C3=A1bor?= Boskovits <boskovits@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 30 Mar 2020 06:11:02 +0000
Resent-Message-ID: <handler.40316.B40316.158554861616616 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Danny Milosavljevic <dannym@HIDDEN>
Cc: 40316 <at> debbugs.gnu.org
MIME-Version: 1.0
References: <20200329131611.38448a58@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
From: =?UTF-8?Q?G=C3=A1bor?= Boskovits <boskovits@HIDDEN>
Date: Mon, 30 Mar 2020 08:09:51 +0200
Message-ID: <CAE4v=pj6kWsqUkQRJzf8wFdFpiTCnGZySgqE3RyQk0pp-PbcUA@HIDDEN>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

Hello Danny,

Danny Milosavljevic <dannym@HIDDEN> ezt =C3=ADrta (id=C5=91pont: 2=
020.
m=C3=A1rc. 30., H, 4:38):
>
> Hi,
>
> core-updates' nss is not reproducible (commit
> aebcbb27bc2f192cc06163251bab66a4ceb7b7d6).
>
> diffoscope says:
>
> --- /gnu/store/gfpgqvwrixhf3sf1bnzsfxzvld0nd8b7-nss-3.50
> +++ /gnu/store/gfpgqvwrixhf3sf1bnzsfxzvld0nd8b7-nss-3.50-check
> =E2=94=9C=E2=94=80=E2=94=80 lib
> =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 nss
> =E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libfreebl3.chk
> =E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling=
 back to Python hexlify.
> =E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
> =E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33=
f1d5d3b426bf50d7f20933
> =E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060=
f311c744f3ce4e50422d85
> =E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fc=
e29f5d67fcd4a5f823a11a
> =E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39=
b977e132af2d97e021ecf5
> =E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033c=
fab2cffad567ccec68fc83
> =E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e=
29a31baee04f728a28940c
> =E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f3963=
58e15e9795454038456f02
> =E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f0000010029
> =E2=94=82 =E2=94=82 =E2=94=82 -713ef8afdc7c8efcff89e8c420bfdd8835e6d08bb9=
34ce160fe927b99ac8f997
> =E2=94=82 =E2=94=82 =E2=94=82 -c043c16bfe67abbbd27a97b4aa4df753c33f5a093d=
9598413edfb4c6a0a68309
> =E2=94=82 =E2=94=82 =E2=94=82 -4f3a160aec8a5e8e383c108c802580e5f117f9b2be=
6d496f6eb6e85937258e53
> =E2=94=82 =E2=94=82 =E2=94=82 -f3f55ac49f7ffa955e91e054d1dd6b19f725506e22=
42fbb2f8acf81c9ff4278c
> =E2=94=82 =E2=94=82 =E2=94=82 -5c6ad6528d1a8505c6c83fd643660e3a31dddff7eb=
5f046f0df6d47ea455c82c
> =E2=94=82 =E2=94=82 =E2=94=82 -78ec32d8a1aaa29c9deed1053feae3029eacce8b9f=
f88777ff964757aeb1ccce
> =E2=94=82 =E2=94=82 =E2=94=82 -bd14d326b7fb0822bbc982250e51d4eaa73599ef8e=
4fd2298f076edf9a9be41e
> =E2=94=82 =E2=94=82 =E2=94=82 -94da645f57dc12af730b3661973390672cbcf767ca=
f495e1f3656f06f0fae300
> =E2=94=82 =E2=94=82 =E2=94=82 -00004030361665e91e760d37d9117256e4f698d2b1=
24115e83aafcc92c2751fa
> =E2=94=82 =E2=94=82 =E2=94=82 -f2b3384c22c76a207da12a4c4b72662e9ae53f356d=
6b6d98a066cd240cb06fed
> =E2=94=82 =E2=94=82 =E2=94=82 -337d6d
> =E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f00000100a3
> =E2=94=82 =E2=94=82 =E2=94=82 +35c76bfe38266728b573ef4fedcb22131ce275a8a4=
84902b3ad994ca3a87a754
> =E2=94=82 =E2=94=82 =E2=94=82 +998b5c5807e4fa0e9b83a6677eca9140b8bbeeb4c3=
6897473065b8305c4d1ddd
> =E2=94=82 =E2=94=82 =E2=94=82 +3f967b7041217df53ae6ec4211b031cc12df895a35=
efcde570dd2c7a610151c9
> =E2=94=82 =E2=94=82 =E2=94=82 +ef0acdf28a646db355ece183e2e71275c51b4331e6=
1ca7948c7aa62d420e8b17
> =E2=94=82 =E2=94=82 =E2=94=82 +481f427197c78094832de5e3f21d27bf701e6fc524=
e5f700567969f91e8864c0
> =E2=94=82 =E2=94=82 =E2=94=82 +fae4da549d548ce8b134456e0720d083c8649bdb44=
ac6383d2e5a41bd2ec3b64
> =E2=94=82 =E2=94=82 =E2=94=82 +e9b6d281708447aefdd60be32f7d9093fef2579d6c=
122b48e449b2266bdc4678
> =E2=94=82 =E2=94=82 =E2=94=82 +9639fd997f0d8fe649b51a5f3097603b130bb5e8a8=
11b5f3c121ed6d7bb58300
> =E2=94=82 =E2=94=82 =E2=94=82 +00004004c38a443627df69c2bc659e2e810b24b0e4=
dc042311fb9b2c99d18e7b
> =E2=94=82 =E2=94=82 =E2=94=82 +242fc7729f9e5facc1dc69ced89ea571bd69f95277=
894e9954c28c2f8ab77d62
> =E2=94=82 =E2=94=82 =E2=94=82 +e96c1d
> =E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libfreeblpriv3.chk
> =E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling=
 back to Python hexlify.
> =E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
> =E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33=
f1d5d3b426bf50d7f20933
> =E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060=
f311c744f3ce4e50422d85
> =E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fc=
e29f5d67fcd4a5f823a11a
> =E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39=
b977e132af2d97e021ecf5
> =E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033c=
fab2cffad567ccec68fc83
> =E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e=
29a31baee04f728a28940c
> =E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f3963=
58e15e9795454038456f02
> =E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f00000100a3
> =E2=94=82 =E2=94=82 =E2=94=82 -298c351142cb4107acceb8e07a997cc63fade4c4dd=
6cc0d3f5dedad25fca66bc
> =E2=94=82 =E2=94=82 =E2=94=82 -d58fb35b3a1f8ce3c90c795a8066cb4312b2b11558=
daf3c388ee3865d1cbc75d
> =E2=94=82 =E2=94=82 =E2=94=82 -88832d044dd267885c36455be97ee5ff17ee95a937=
7170441267b604d6bea8d2
> =E2=94=82 =E2=94=82 =E2=94=82 -c7fbaebd2c39506220d5d2c4a34e6a848fc139bd38=
f95c7e48160d847c270a78
> =E2=94=82 =E2=94=82 =E2=94=82 -e88519f1a5f2f36c6d6d4c16d621b2e763e48d4281=
8b1a3b76421a52c7c209b9
> =E2=94=82 =E2=94=82 =E2=94=82 -a70fe921ad9b80411150a5e4d800bd89fe44863614=
12b39a9b5c68abec6bb68d
> =E2=94=82 =E2=94=82 =E2=94=82 -8f7d1b823c9d455d0062d9b819b1d5173a493cdbea=
00dcfc98a52537bd373acb
> =E2=94=82 =E2=94=82 =E2=94=82 -cb046c7fe4246590c9875413f19dba8f63a2f05771=
d161513efeb2e663ebf400
> =E2=94=82 =E2=94=82 =E2=94=82 -000040299e7b6851b43d6f40d1704237831bbb5a1f=
d4e38c041f1b7222480338
> =E2=94=82 =E2=94=82 =E2=94=82 -c27b4e655f1846220c4950db84ce7da9b2c1b2c653=
0304a73c8caff757be8ba4
> =E2=94=82 =E2=94=82 =E2=94=82 -51d8ec
> =E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f0000010032
> =E2=94=82 =E2=94=82 =E2=94=82 +0bdce77a4aabe0b8a8b97469180a5882104d30c155=
dfc227f99b7add6aedda98
> =E2=94=82 =E2=94=82 =E2=94=82 +b9aee674e8a2f43377eea0e32f4382f8818a9cd39d=
fe0f2217b989ab695b1317
> =E2=94=82 =E2=94=82 =E2=94=82 +971ae000096efde5a3610306a7a60b3075204f7754=
3509fb48d1605d0ae6d7cd
> =E2=94=82 =E2=94=82 =E2=94=82 +dd5b3576d2d09d9e4d5357ea21e7376e2fa69ba804=
a19161ab639219592efef5
> =E2=94=82 =E2=94=82 =E2=94=82 +ad5b8714ad21118b1fa53453b6e4222e267b0a6927=
04de6bcd10895afeaf5f21
> =E2=94=82 =E2=94=82 =E2=94=82 +f721c406a796e092b344bc78abd953205e6d932c87=
fef89e80715a9eefbd6417
> =E2=94=82 =E2=94=82 =E2=94=82 +eef4e8c8630fe92927d81870c50f64aa15f2dbb965=
d9aa51a450d0c53607d60a
> =E2=94=82 =E2=94=82 =E2=94=82 +8c4ad1461e32c7dc78bf606eaacf38a88a2c47f496=
b3ba289e104e8d25a84400
> =E2=94=82 =E2=94=82 =E2=94=82 +0000408df400964ed23bd859d524136afbf355cce0=
8ae540f65bbfe055e81950
> =E2=94=82 =E2=94=82 =E2=94=82 +6b84f52240c447ad47c53ee31e9fed82d08905f65a=
dfedd54f5b91b6b9d6105b
> =E2=94=82 =E2=94=82 =E2=94=82 +f2f8f4
> =E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libnssdbm3.chk
> =E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling=
 back to Python hexlify.
> =E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
> =E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33=
f1d5d3b426bf50d7f20933
> =E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060=
f311c744f3ce4e50422d85
> =E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fc=
e29f5d67fcd4a5f823a11a
> =E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39=
b977e132af2d97e021ecf5
> =E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033c=
fab2cffad567ccec68fc83
> =E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e=
29a31baee04f728a28940c
> =E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f3963=
58e15e9795454038456f02
> =E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f000001009d
> =E2=94=82 =E2=94=82 =E2=94=82 -76e916a4dfe80c81097e4cff0f945852d689772f01=
c87f11c2fab03f99f20417
> =E2=94=82 =E2=94=82 =E2=94=82 -d1458884f5255774a9028c848ce879369734f01f1e=
12ceb9cf63dc9eca1170b8
> =E2=94=82 =E2=94=82 =E2=94=82 -23e6678ab9f65f2dbeeae2c96fd90367e720124a2d=
11551127baf17e2a7b214d
> =E2=94=82 =E2=94=82 =E2=94=82 -f24bca9fbb5355d2479e7c06ec05fe138ad50c26a1=
876053143bf0ed18eae349
> =E2=94=82 =E2=94=82 =E2=94=82 -42b8b96ab9bdde2e234fbfe354d8b3698cd5ddadfd=
d1de6ab8d75c558a96bd8a
> =E2=94=82 =E2=94=82 =E2=94=82 -accb720a1207f4b25c9e1df0e0b60574d8f89d65e6=
698e1626e1d1a892c3c1d5
> =E2=94=82 =E2=94=82 =E2=94=82 -13ee0f6ee4e87e2b54d566283e99aaa6300e313191=
3c9549d4b1a6ad2869fd4c
> =E2=94=82 =E2=94=82 =E2=94=82 -d28567c75a32f0d132021b586ab8fb292994d065ec=
4b3875dabc993cb0e17800
> =E2=94=82 =E2=94=82 =E2=94=82 -00004070a60b59d01834af5e27dff70526b0beb20d=
fabb43a6ab25f766d1ec26
> =E2=94=82 =E2=94=82 =E2=94=82 -90ce003539dbf276a167ec78d7a998f69e99bf3c81=
fc7246572342aec6d214da
> =E2=94=82 =E2=94=82 =E2=94=82 -abcc97
> =E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f000001006b
> =E2=94=82 =E2=94=82 =E2=94=82 +6170f9835f65f0409f61d947626f5880691b5b1ec5=
f0d280b82d832d3d5d3957
> =E2=94=82 =E2=94=82 =E2=94=82 +1745597c3a2392c1271f8508a1c748bc4be5681bac=
fd11480a1855af07ae3cd4
> =E2=94=82 =E2=94=82 =E2=94=82 +4fbc4165f89174e7cba60ac7f7c0a17116cfa3fd8e=
0ed6c0c02696352b3f9d53
> =E2=94=82 =E2=94=82 =E2=94=82 +7fcbda8cb21b0a95f9e92d38dc8121ea2dac2eabd7=
50ba7770c47d514282f45b
> =E2=94=82 =E2=94=82 =E2=94=82 +357ef3586d8930a05a6e26c9ea391351d16fa2ab10=
fb08e42406e7a0365c3258
> =E2=94=82 =E2=94=82 =E2=94=82 +00de8afadfb3086ca003e964ed1ab11b3410f4ccfe=
de3e7b987ade295d4a0bc5
> =E2=94=82 =E2=94=82 =E2=94=82 +d505170822d4a01535a93de3a507a51c4180989530=
d22e50d725d775f7455e9a
> =E2=94=82 =E2=94=82 =E2=94=82 +9d5a851f2f976a6f312e924c27ac72a3599f9cf887=
8bbe01046a91cd04664c00
> =E2=94=82 =E2=94=82 =E2=94=82 +00004002c563080dfd3803f27fa9c896d0dd1b3c98=
5bd53f0622cabea11746fa
> =E2=94=82 =E2=94=82 =E2=94=82 +ada72d7c05b819eb4dc9cda731e0006b637bd89355=
5506c000dabb5c066d3f7e
> =E2=94=82 =E2=94=82 =E2=94=82 +3ea9d8
> =E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 libsoftokn3.chk
> =E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling=
 back to Python hexlify.
> =E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
> =E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33=
f1d5d3b426bf50d7f20933
> =E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060=
f311c744f3ce4e50422d85
> =E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fc=
e29f5d67fcd4a5f823a11a
> =E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39=
b977e132af2d97e021ecf5
> =E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033c=
fab2cffad567ccec68fc83
> =E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e=
29a31baee04f728a28940c
> =E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f3963=
58e15e9795454038456f02
> =E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f0000010030
> =E2=94=82 =E2=94=82 =E2=94=82 -045311203f4d6c1624ea5336dc9a5470a2baa285ca=
7294bf2162c479bc0913d4
> =E2=94=82 =E2=94=82 =E2=94=82 -f8f326ef62ca8b31781b61e9ad3057d3c4cdd90c88=
2dceb252149d7578cceab4
> =E2=94=82 =E2=94=82 =E2=94=82 -4ce0bb338d395901afafbe3c570493a7add01e625d=
e9a0a90c4e85c52ce67630
> =E2=94=82 =E2=94=82 =E2=94=82 -3b1cc388c65d76d87c5bd31d2db8fbe17db05186c3=
a4bc2032614af6d950e8c7
> =E2=94=82 =E2=94=82 =E2=94=82 -91da637dc8a7c2897071c92910e47b529566eddafc=
918e1c05f39aedea9e712f
> =E2=94=82 =E2=94=82 =E2=94=82 -98be2b6b87685411a5d8be0cd4d0c5e680ade81a3b=
9ee09d7aa6489775e3465b
> =E2=94=82 =E2=94=82 =E2=94=82 -0dd470a8bd99a84df719cbf935d46a08f9045c58cc=
b2861dd35e76d085caed0a
> =E2=94=82 =E2=94=82 =E2=94=82 -9ecc3cffe9bec61966d09e633bf7ac9870d02e03f8=
d4a2911da1b6e02cf6ab00
> =E2=94=82 =E2=94=82 =E2=94=82 -0000408a5c4418abe2196ccf3ad0ce5d4df8edfa59=
8befb414c4c622e92b2a70
> =E2=94=82 =E2=94=82 =E2=94=82 -c94c5646c44609ba518ecdeef2eaa2745144a5048e=
2c4a92415fee1e3fe2c479
> =E2=94=82 =E2=94=82 =E2=94=82 -1fe98a
> =E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66=
be323e3c065f0000010042
> =E2=94=82 =E2=94=82 =E2=94=82 +3475f0c8a0fbfcbf67cdac446df60765ccc7b02fb6=
c5079e14c9d2c1da2d7ae5
> =E2=94=82 =E2=94=82 =E2=94=82 +8f274ecfcf9d135c05a7405008e8f8c7f5ac86c274=
aabe5fdc33e014b622a5f4
> =E2=94=82 =E2=94=82 =E2=94=82 +0c8525071b0d5ee7614464deffee9320a965701df9=
2070ff15fe786c1e8c41b3
> =E2=94=82 =E2=94=82 =E2=94=82 +b4298574d9c0b9d8e1fe896a12973e579372d75fe8=
f3262254a80b622e6543bb
> =E2=94=82 =E2=94=82 =E2=94=82 +16be7160f9a89b934cd7133aa87fa5e03bcf981806=
cbb0bccf01af77008fd424
> =E2=94=82 =E2=94=82 =E2=94=82 +cf6190e09910d4aaa812092fa64766d1bce0a9cf77=
f3470f5f0aa37715014cc6
> =E2=94=82 =E2=94=82 =E2=94=82 +661c5f55253063713dac706cabab09005b9f1e2889=
f03e5b860f7eacbce21744
> =E2=94=82 =E2=94=82 =E2=94=82 +fd33e21a0ca62878a7863e27667f0f7eb440bdfff0=
2b9838d75d3fda4dac2400
> =E2=94=82 =E2=94=82 =E2=94=82 +000040180f14354ae8e6d4d243e4fef0819e753468=
88290dd80849a7494dd220
> =E2=94=82 =E2=94=82 =E2=94=82 +db71d615c82b2dbdee722fb914aff6875ffd66be93=
4a102f0f684535169c9940
> =E2=94=82 =E2=94=82 =E2=94=82 +c0733d

Do you have any idea what these might be?
Are these text files, but not recoginzed by diffoscope, or are they
really binary?
Also, IIRC we had problems earlier with this package, as some keys
were generated.
Might this be somehow related?

Best regards,
g_bor
--=20
OpenPGP Key Fingerprint: 7988:3B9F:7D6A:4DBF:3719:0367:2506:A96C:CF63:0B21

Message sent to bug-guix@HIDDEN:

Subject: bug#40316: core-updates nss not reproducible
Resent-From: Marius Bakke <mbakke@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Mon, 30 Mar 2020 11:56:02 +0000
Resent-Message-ID: <handler.40316.B40316.158556932128061 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
To: Danny Milosavljevic <dannym@HIDDEN>, 40316 <at> debbugs.gnu.org
From: Marius Bakke <mbakke@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
References: <20200329131611.38448a58@HIDDEN>
User-Agent: Notmuch/0.29.3 (https://notmuchmail.org) Emacs/26.3
 (x86_64-pc-linux-gnu)
Date: Mon, 30 Mar 2020 13:55:09 +0200
Message-ID: <87pncuukf6.fsf@HIDDEN>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
Precedence: list
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>

--=-=-=
Content-Type: text/plain

Danny Milosavljevic <dannym@HIDDEN> writes:

> Hi,
>
> core-updates' nss is not reproducible (commit
> aebcbb27bc2f192cc06163251bab66a4ceb7b7d6).

Is this issue only present on the 'core-updates' branch?  There haven't
been any changes to NSS on that branch compared to 'master' AFAIK.

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iQEzBAEBCgAdFiEEu7At3yzq9qgNHeZDoqBt8qM6VPoFAl6B3h0ACgkQoqBt8qM6
VPo8Bwf+M6nzNw0dug8dMEb5YzlB3/AdPpztjt76g1RUUFyyw0lxMeqkSuWXqXlg
3wq43RZWUKGtHbHSlD1wL7rvdR8aSiLbHjMJ0l+/Xt1j31izFuhrphJmaOWsfS90
ta1nfgJkLFbll6X/63NFmOC/HEsoW6ofx/V5gOb+FcvQAgajlkH1p4FaaC4Uq3YJ
xUTKwMt+/4/KTInOBOaGJ1/UEL6aknMfRL8Lqbrv2QMrN9XZ2Kmo/goqKLcz8HR4
6qpRaslY2vmguLFfgTWagHreOQ4Tf++2ZUsszVnvotuKQ8Tz1qYbX1uTNogZ9TVt
xUzAnBdgBAbxH81faOr56RM8R6nVsw==
=VX/z
-----END PGP SIGNATURE-----
--=-=-=--

Message received at request <at> debbugs.gnu.org:

Received: (at request) by debbugs.gnu.org; 31 Mar 2020 09:22:04 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Tue Mar 31 05:22:04 2020
Received: from localhost ([127.0.0.1]:35518 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jJD5v-00066O-Up
	for submit <at> debbugs.gnu.org; Tue, 31 Mar 2020 05:22:04 -0400
Received: from m4s11.vlinux.de ([83.151.27.109]:54272 helo=bjoernhoefling.de)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bjoern.hoefling@HIDDEN>)
 id 1jJD5u-00065z-6Y
 for request <at> debbugs.gnu.org; Tue, 31 Mar 2020 05:22:02 -0400
Received: from alma-ubu (p57B5200A.dip0.t-ipconnect.de [87.181.32.10])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by bjoernhoefling.de (Postfix) with ESMTPSA id 368083F998
 for <request <at> debbugs.gnu.org>; Tue, 31 Mar 2020 11:22:00 +0200 (CEST)
Date: Tue, 31 Mar 2020 11:21:58 +0200
From: =?UTF-8?B?QmrDtnJuIEjDtmZsaW5n?= <bjoern.hoefling@HIDDEN>
To: <request <at> debbugs.gnu.org>
Subject: merge nss bugs
Message-ID: <20200331112158.663ecc89@alma-ubu>
X-Mailer: Claws Mail 3.16.0 (GTK+ 2.24.32; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 boundary="Sig_/JORJmSzm6Jr=2pQPU9LVxDt"; protocol="application/pgp-signature"
X-Spam-Score: 0.4 (/)
X-Debbugs-Envelope-To: request
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--Sig_/JORJmSzm6Jr=2pQPU9LVxDt
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

merge 40316 33507 30108

--Sig_/JORJmSzm6Jr=2pQPU9LVxDt
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQQiGUP0np8nb5SZM4K/KGy2WT5f/QUCXoMLtgAKCRC/KGy2WT5f
/eHuAJ9Ee/3Cy/8A+tNax7JvGuFmMS+XCQCePXVaJktqzKzbL1JO+o95PPoSKso=
=EwHg
-----END PGP SIGNATURE-----

--Sig_/JORJmSzm6Jr=2pQPU9LVxDt--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: core-updates nss not reproducible
Resent-From: =?UTF-8?Q?Bj=C3=B6rn_?= =?UTF-8?Q?H=C3=B6fling?= <bjoern.hoefling@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 31 Mar 2020 09:29:02 +0000
Resent-Message-ID: <handler.40316.B40316.158564692424174 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Marius Bakke <mbakke@HIDDEN>
Cc: Danny Milosavljevic <dannym@HIDDEN>, 40316 <at> debbugs.gnu.org
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.158564692424174
          (code B ref 40316); Tue, 31 Mar 2020 09:29:02 +0000
Received: (at 40316) by debbugs.gnu.org; 31 Mar 2020 09:28:44 +0000
Received: from localhost ([127.0.0.1]:35523 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1jJDCO-0006Hq-JT
	for submit <at> debbugs.gnu.org; Tue, 31 Mar 2020 05:28:44 -0400
Received: from m4s11.vlinux.de ([83.151.27.109]:54278 helo=bjoernhoefling.de)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bjoern.hoefling@HIDDEN>)
 id 1jJDCM-0006Hf-RA
 for 40316 <at> debbugs.gnu.org; Tue, 31 Mar 2020 05:28:43 -0400
Received: from alma-ubu (p57B5200A.dip0.t-ipconnect.de [87.181.32.10])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by bjoernhoefling.de (Postfix) with ESMTPSA id F14D53F998;
 Tue, 31 Mar 2020 11:28:41 +0200 (CEST)
Date: Tue, 31 Mar 2020 11:28:41 +0200
From: =?UTF-8?Q?Bj=C3=B6rn_?= =?UTF-8?Q?H=C3=B6fling?= <bjoern.hoefling@HIDDEN>
Message-ID: <20200331112841.37c909bf@alma-ubu>
In-Reply-To: <87pncuukf6.fsf@HIDDEN>
References: <20200329131611.38448a58@HIDDEN> <87pncuukf6.fsf@HIDDEN>
X-Mailer: Claws Mail 3.16.0 (GTK+ 2.24.32; x86_64-pc-linux-gnu)
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 boundary="Sig_/LaBU4.YJBGXOG.EfQ5cZaYY"; protocol="application/pgp-signature"
X-Spam-Score: 0.4 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--Sig_/LaBU4.YJBGXOG.EfQ5cZaYY
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

On Mon, 30 Mar 2020 13:55:09 +0200
Marius Bakke <mbakke@HIDDEN> wrote:

> Danny Milosavljevic <dannym@HIDDEN> writes:
>=20
> > Hi,
> >
> > core-updates' nss is not reproducible (commit
> > aebcbb27bc2f192cc06163251bab66a4ceb7b7d6). =20
>=20
> Is this issue only present on the 'core-updates' branch?  There
> haven't been any changes to NSS on that branch compared to 'master'
> AFAIK.

I haven't tried it on 'master', but I think it is branch-independent,
people are only testing it on core-updates. This bug is over 2 years
old with different versions of nss affected and the same three files
not reproducible. And we had past core-updates mergers.

I found and merged these reports:
bug#30108: [core-updates] nss 3.34.1 not reproducible
bug#33507: nss 3.39 output is not deterministic
bug#40316: core-updates nss not reproducible

Bj=C3=B6rn

--Sig_/LaBU4.YJBGXOG.EfQ5cZaYY
Content-Type: application/pgp-signature
Content-Description: OpenPGP digital signature

-----BEGIN PGP SIGNATURE-----

iF0EARECAB0WIQQiGUP0np8nb5SZM4K/KGy2WT5f/QUCXoMNSQAKCRC/KGy2WT5f
/fpZAJ9iM9L7JtHZ/L+eixYEH8O9QLtOOQCgjqbh1dWZTZ35WpCkysuGaVT98c4=
=/7tG
-----END PGP SIGNATURE-----

--Sig_/LaBU4.YJBGXOG.EfQ5cZaYY--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: core-updates nss not reproducible
References: <20200329131611.38448a58@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
Resent-From: Bone Baboon <bone.baboon@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 18 May 2021 04:11:02 +0000
Resent-Message-ID: <handler.40316.B40316.162131103921736 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.162131103921736
          (code B ref 40316); Tue, 18 May 2021 04:11:02 +0000
Received: (at 40316) by debbugs.gnu.org; 18 May 2021 04:10:39 +0000
Received: from localhost ([127.0.0.1]:54255 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1lir42-0005eW-Er
	for submit <at> debbugs.gnu.org; Tue, 18 May 2021 00:10:39 -0400
Received: from knopi.disroot.org ([178.21.23.139]:48338)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <bone.baboon@HIDDEN>) id 1lir40-0005eN-EZ
 for 40316 <at> debbugs.gnu.org; Tue, 18 May 2021 00:10:37 -0400
Received: from localhost (localhost [127.0.0.1])
 by disroot.org (Postfix) with ESMTP id 2BB3751209
 for <40316 <at> debbugs.gnu.org>; Tue, 18 May 2021 06:10:35 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at disroot.org
Received: from knopi.disroot.org ([127.0.0.1])
 by localhost (disroot.org [127.0.0.1]) (amavisd-new, port 10024)
 with UTF8SMTP id q07wGu3oVnHh for <40316 <at> debbugs.gnu.org>;
 Tue, 18 May 2021 06:10:29 +0200 (CEST)
From: Bone Baboon <bone.baboon@HIDDEN>
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=disroot.org; s=mail;
 t=1621299946; bh=LV9tHpB5A0WerqlM6IvcMHUx0cGpa+UyVgJQGQJOC+g=;
 h=From:To:Subject:Date;
 b=EfsSp0YupkfKvi1QMEByPvhSbSg2lYgSJmo/zVgRxjIAohGyvLU856irVf149bwwj
 82VGYH0ItSoLVtkzpBmbOH7k1XSEa6m69QRVKLAN/UjG1Aa8feVsMQNCiaGgWwcjOW
 Wa/11uyOZnp8FOTi+zLMwppoUpEiTH5jMb4kBLvOrSqzH72HmzSJ1klWwRBX6yILwz
 0jWh8+bfVhJiuKzuxaBaeSsLI2+RaWVq665rWFLMqBRdPNZZ3K+uOp59mEliBx24/1
 JpMF8vFfjIg4NyqQemOt0YXrYe4E17WEQljYaCFS9xevUViuFbWUcuV8FYmwMhURiH
 7jvo5nwbXshvg==
Date: Mon, 17 May 2021 21:04:04 -0400
Message-ID: <87a6osdf97.fsf@HIDDEN>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: 1.1 (+)
X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org",
 has NOT identified this incoming email as spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.
 Content preview: I am also getting the same four files that are not
 reproducible
 for nss on the master branch. As nss is also not reproducible on master maybe
 the title of this bug should be changed to "nss not reproducible". 
 Content analysis details:   (1.1 points, 10.0 required)
 pts rule name              description
 ---- ---------------------- --------------------------------------------------
 0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 1.1 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: 0.1 (/)

I am also getting the same four files that are not reproducible for nss
on the master branch.

As nss is also not reproducible on master maybe the title of this bug
should be changed to "nss not reproducible".

`guix describe` outputs:

```
Generation 24   May 12 2021 18:06:24    (current)
  guix d6aeebb
    repository URL: https://git.savannah.gnu.org/git/guix.git
    branch: master
    commit: d6aeebb23639258311fdfb9dbf5f903079fde51a
```

`guix challenge /gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.59`
outputs:

```
/gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.59 contents differ:
  local hash: 0pqq1v88yjj80sll4j4ahfh52zzqhvkjv3vgkhmnnikvl6vd5sck
  https://ci.guix.gnu.org/nar/lzip/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.5=
9: 1smx41irpiy9kly3zvr0d61x7hwm0haggvyii34byzfypca1xn2f
differing files:
    /lib/nss/libfreebl3.chk
    /lib/nss/libsoftokn3.chk
    /lib/nss/libfreeblpriv3.chk
    /lib/nss/libnssdbm3.chk

1 store items were analyzed:
  - 0 (0.0%) were identical
  - 1 (100.0%) differed
  - 0 (0.0%) were inconclusive
```

`guix challenge --diff=3Ddiffoscope
/gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.59` outputs:

```
/gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.59 contents differ:
  local hash: 0pqq1v88yjj80sll4j4ahfh52zzqhvkjv3vgkhmnnikvl6vd5sck
  https://ci.guix.gnu.org/nar/lzip/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.5=
9: 1smx41irpiy9kly3zvr0d61x7hwm0haggvyii34byzfypca1xn2f
--- /tmp/guix-directory.jSGCMh
+++ /gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m-nss-3.59
=E2=94=82   --- /tmp/guix-directory.jSGCMh/lib
=E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58s85p49phxp5xambafp2m=
-nss-3.59/lib
=E2=94=82 =E2=94=82   --- /tmp/guix-directory.jSGCMh/lib/nss
=E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58s85p49phxp=
5xambafp2m-nss-3.59/lib/nss
=E2=94=82 =E2=94=82 =E2=94=82   --- /tmp/guix-directory.jSGCMh/lib/nss/libf=
reebl3.chk
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58=
s85p49phxp5xambafp2m-nss-3.59/lib/nss/libfreebl3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010062
=E2=94=82 =E2=94=82 =E2=94=82 -d97f1f01f03e65f037c7fee3230c59c36d170cc30f23=
372fbc6eb28d9ec87008
=E2=94=82 =E2=94=82 =E2=94=82 -f07660714bb43d98a06734a1658ce721feab8b0ece03=
ee54cb45dbaee9cff57f
=E2=94=82 =E2=94=82 =E2=94=82 -9d9c0fac4a2d67f4f314423973a42819a9eceba75834=
4ef4b304f1737ebe23a4
=E2=94=82 =E2=94=82 =E2=94=82 -e13aba8e9f88bec5c067d61a16a3dcb347789575f4cf=
a8629880f734ec3db9cc
=E2=94=82 =E2=94=82 =E2=94=82 -d963cee322fa2eba5172715eb19686e185ff13dfcf23=
eb7ed9338230f90b4b57
=E2=94=82 =E2=94=82 =E2=94=82 -8f7f3c3fb8e0e968d4625646f5fb0897c3e2400e5a55=
96f01f841f7e4946d406
=E2=94=82 =E2=94=82 =E2=94=82 -977e6adbce9113d027a38cd34942cf3158422b590c27=
b2731fd506c2326a2dbb
=E2=94=82 =E2=94=82 =E2=94=82 -1a363a864475bd8464282544cf46fe60e94d705cda2d=
34257c9e3cadc378fe00
=E2=94=82 =E2=94=82 =E2=94=82 -00004025839bed8e61fecf86f99135e9912ab62b5497=
dc33bdf2bbda445cf237
=E2=94=82 =E2=94=82 =E2=94=82 -bfd47c8b826ec02b6cac983765bedd1ae17a57827f6f=
e0af965a2538a2776388
=E2=94=82 =E2=94=82 =E2=94=82 -c14b6c
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010087
=E2=94=82 =E2=94=82 =E2=94=82 +37f4789b39e4bcbe32600d9a952265b9a8623a91658d=
6c5b5c7e8d42741219f2
=E2=94=82 =E2=94=82 =E2=94=82 +1f4d9e54994ffa87cc533d63273f7b7d24b63cc0415b=
62cd419656c63f5acf46
=E2=94=82 =E2=94=82 =E2=94=82 +688991664fc00c10740ab0cabbcdb639a9408b76c4cb=
f27827257fdd3aeaa526
=E2=94=82 =E2=94=82 =E2=94=82 +bb9425a9a8c55bb4d4a54e2d389de9561a61af754170=
bf640b8e23bc9c4c7945
=E2=94=82 =E2=94=82 =E2=94=82 +8cfdafc309c7737aa53d0fb451cc7476f73b04b4b5c6=
cfaeabc332d0478c8c5d
=E2=94=82 =E2=94=82 =E2=94=82 +bdde681ef55b30b669a106440c4676f5bf3454617d17=
07e710c0e426ee823ee1
=E2=94=82 =E2=94=82 =E2=94=82 +f1892576f4f4795e6e4fc040b9aab73d65ef132087fd=
aaba64fa8795a9eef4b6
=E2=94=82 =E2=94=82 =E2=94=82 +24700af69d0be0c2f86c1fbfc8a90cc0f50c0a90232c=
d3ce9f5987cf442d4b00
=E2=94=82 =E2=94=82 =E2=94=82 +0000405a720066a9593276d13e8b322c50381a926302=
d79ae6f571c5fcbbbefa
=E2=94=82 =E2=94=82 =E2=94=82 +71a9d259b7efa16aca52365e60baf1aef8904d28f933=
2d71b3fb3e8ecb30bcfb
=E2=94=82 =E2=94=82 =E2=94=82 +19053e
=E2=94=82 =E2=94=82 =E2=94=82   --- /tmp/guix-directory.jSGCMh/lib/nss/libf=
reeblpriv3.chk
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58=
s85p49phxp5xambafp2m-nss-3.59/lib/nss/libfreeblpriv3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001009a
=E2=94=82 =E2=94=82 =E2=94=82 -19ffb743e104ab34cda81d282b09c74ca73dab5baf4e=
5951814556e25fa92f09
=E2=94=82 =E2=94=82 =E2=94=82 -fbb06af5f80893a2c4fb0295ef23c2e8302fc238fda3=
f3d582c9d3e8c062ae8a
=E2=94=82 =E2=94=82 =E2=94=82 -e18dc7a48a1d9e97fc4d21e11abaeb7c98495f478aff=
c6866742c48090d44b09
=E2=94=82 =E2=94=82 =E2=94=82 -a5832f4648b1d165de42e279df2d1512bfe47dffffb6=
5f0c543a6c92cfe8beed
=E2=94=82 =E2=94=82 =E2=94=82 -3fa84456e6eef833bd675d04846d630eed817bfd1533=
77745d5c6244e2f913ef
=E2=94=82 =E2=94=82 =E2=94=82 -17a2b360bebd6f9a0fcbb24ed86e2d59ae5f28df2632=
518390d7e2f75a2da2fe
=E2=94=82 =E2=94=82 =E2=94=82 -2bebf06b7d095a60282a93c38da54ae19625630aac1c=
4755339a047213ed98e9
=E2=94=82 =E2=94=82 =E2=94=82 -91ad52e2723789c34498a0d0eb78055949383ab3a583=
363c653c5ef89a0c0200
=E2=94=82 =E2=94=82 =E2=94=82 -000040862ab0814d947cfb3bf2cf74720e14c633e910=
a7d3d4d7a81364505701
=E2=94=82 =E2=94=82 =E2=94=82 -c3c2c785f6f3804f8aa0de63449bc436f1eb9a4ce187=
392103de463caec69431
=E2=94=82 =E2=94=82 =E2=94=82 -bffb74
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010038
=E2=94=82 =E2=94=82 =E2=94=82 +5f7f605095448c566ae24ab5677dd5ff8519a2564d09=
c3550608f860b12d8e84
=E2=94=82 =E2=94=82 =E2=94=82 +a4e5b87752d9bc32caba6bd53d181776624e22a217d9=
c7567a4556bcb316a13e
=E2=94=82 =E2=94=82 =E2=94=82 +1ecf3d2aa360477073f1fa1d376704668122ec75d1d6=
177cd0368610d4c1c098
=E2=94=82 =E2=94=82 =E2=94=82 +1ca41b0fdd1a188bf4940a5b0773e9c7178cd4141032=
d9f3bca8f77c480884f6
=E2=94=82 =E2=94=82 =E2=94=82 +7a30ba559fcf7547abf80840bb0b42e7c3bb47bf3f06=
4e20c827ce0b0ce48c8f
=E2=94=82 =E2=94=82 =E2=94=82 +f7ecb9f513589edd858a5e5a3441b12e10a8bb61c93c=
3cf33d04c518804dcc27
=E2=94=82 =E2=94=82 =E2=94=82 +7a9d0df213922ff752f8ea4cba6fb0f5ba8acb57dcf0=
2d3746a7cc588b1362a8
=E2=94=82 =E2=94=82 =E2=94=82 +2f7c7077399e18536ca1540e2a868780605dc4bf518a=
2c86dd2bc904df989f00
=E2=94=82 =E2=94=82 =E2=94=82 +0000404547c764e3ab6f499e0ea3656a9332f2da7150=
6a1a5178d4828657682a
=E2=94=82 =E2=94=82 =E2=94=82 +c5f3f65eaf7212c1a7e41438bb48524eb5e1eff3d870=
80f1339c5d3e99369d56
=E2=94=82 =E2=94=82 =E2=94=82 +ebc5fd
=E2=94=82 =E2=94=82 =E2=94=82   --- /tmp/guix-directory.jSGCMh/lib/nss/libn=
ssdbm3.chk
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58=
s85p49phxp5xambafp2m-nss-3.59/lib/nss/libnssdbm3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001002e
=E2=94=82 =E2=94=82 =E2=94=82 -21ad266d676e56ae5ccc227879f1c1c6b9b6dd83eb74=
46a82f5a18bb09a4d252
=E2=94=82 =E2=94=82 =E2=94=82 -4cb3f635179b88fdab69e30efbc1684d7bcd5f24b3c6=
c70a14b998b19c7af1a0
=E2=94=82 =E2=94=82 =E2=94=82 -d3d79f75d2f3fd00a2fe19bfdcef007b67c2004f0571=
f670887e1f8ac7d1bf5d
=E2=94=82 =E2=94=82 =E2=94=82 -3dea50a0117efd7ff049d41ee286e642a0fe43256d77=
146324ab6ce8a83ef8c4
=E2=94=82 =E2=94=82 =E2=94=82 -9807d016f639f5ceb6f427062f5201e51e7776bb6463=
d89f9afeddbc7a9a28ee
=E2=94=82 =E2=94=82 =E2=94=82 -653be542425efa441a6815238c5898d33d76b9e44ceb=
7353e98927bb2935e025
=E2=94=82 =E2=94=82 =E2=94=82 -953cd7649241efaf3edbb5eed3abb7826c837dbbf2aa=
f1e1d9d2ee72dee0b3b5
=E2=94=82 =E2=94=82 =E2=94=82 -0d872cd2eb74969baa23c186b00fa87b4951ae0eb3fa=
867fb6462fad73154800
=E2=94=82 =E2=94=82 =E2=94=82 -0000403e373b8324248b0d53ba133dda29283d133503=
24847164c5ab29024678
=E2=94=82 =E2=94=82 =E2=94=82 -03611368137b58211456ce78c50968bd1233758422d5=
91805c87d25b64a5abda
=E2=94=82 =E2=94=82 =E2=94=82 -09dda9
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001005b
=E2=94=82 =E2=94=82 =E2=94=82 +7a928e5d253ed22eb50a37023609db35ebab0672812f=
924d3ea7b74be43f26d5
=E2=94=82 =E2=94=82 =E2=94=82 +bc93ef30cd96d39daad0ab6eb98efab9047dcc73fa7b=
7dae259dc6a3f43255be
=E2=94=82 =E2=94=82 =E2=94=82 +e519afbb0a727b75247fc078fa22c0f1c716655c99e3=
0b24867974959b52179d
=E2=94=82 =E2=94=82 =E2=94=82 +92d2b9bee276208c7ae5707975c55eea7125d8392970=
9f5e63b6172e389a4858
=E2=94=82 =E2=94=82 =E2=94=82 +6d10c85f501882a285a476692f97247993f4aef2243b=
803b36528fc26d384503
=E2=94=82 =E2=94=82 =E2=94=82 +4437d3107e853f1d05a02f411e7e609ef720ff7bc299=
575d8840faaa40d33ddd
=E2=94=82 =E2=94=82 =E2=94=82 +b58f03a0669be967bc8021dfea2bbce37ae23b3c929f=
f98396d12a84e0634834
=E2=94=82 =E2=94=82 =E2=94=82 +1b80442fbbd9f7dcdda35dea83d1092c5ccc1ac2980b=
d0f3233bc82cbf165300
=E2=94=82 =E2=94=82 =E2=94=82 +00004030d6ccc46ba7ac1abdce687718962041cf98cb=
55787191130175f9e0d1
=E2=94=82 =E2=94=82 =E2=94=82 +ab8b2c610437f4e7a11d220d5989c3868d6db6257ab8=
41d80ffcbff56d3b268c
=E2=94=82 =E2=94=82 =E2=94=82 +5abbee
=E2=94=82 =E2=94=82 =E2=94=82   --- /tmp/guix-directory.jSGCMh/lib/nss/libs=
oftokn3.chk
=E2=94=82 =E2=94=82 =E2=94=9C=E2=94=80=E2=94=80 +++ /gnu/store/vs3dxnrkbf58=
s85p49phxp5xambafp2m-nss-3.59/lib/nss/libsoftokn3.chk
=E2=94=82 =E2=94=82 =E2=94=82=E2=94=84 xxd not available in path. Falling b=
ack to Python hexlify.
=E2=94=82 =E2=94=82 =E2=94=82 @@ -11,19 +11,19 @@
=E2=94=82 =E2=94=82 =E2=94=82  5c80e3430a9e943586d458a1ca22b973460bfb3e33f1=
d5d3b426bf50d7f20933
=E2=94=82 =E2=94=82 =E2=94=82  6ec0311b6d077086ca57f70b4a63f06fc88aed5060f3=
11c744f3ce4e50422d85
=E2=94=82 =E2=94=82 =E2=94=82  335457038ddc664d6183171c7b0d65bc8f2c1986fce2=
9f5d67fcd4a5f823a11a
=E2=94=82 =E2=94=82 =E2=94=82  a2e11115843201ee88f15530e9743c1a2b54452e39b9=
77e132af2d97e021ecf5
=E2=94=82 =E2=94=82 =E2=94=82  58e1c72ee0713d29a4d6e25f859c0504464189033cfa=
b2cffad567ccec68fc83
=E2=94=82 =E2=94=82 =E2=94=82  d91f2e4e9a5e77a1ffe66f048bf96b47c649d2886e29=
a31baee04f728a28940c
=E2=94=82 =E2=94=82 =E2=94=82  1d8c99a26ff8ba9990c7e5b13c1034866a6a1f396358=
e15e9795454038456f02
=E2=94=82 =E2=94=82 =E2=94=82 -b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f000001001e
=E2=94=82 =E2=94=82 =E2=94=82 -24d85331677aae2d94bd05a1efc093d260c20de07d57=
ee8c503956067275acf3
=E2=94=82 =E2=94=82 =E2=94=82 -0059cbab61581aa1c386dba534f268f96c5b9f802ef5=
7311f7fa53915e8018b6
=E2=94=82 =E2=94=82 =E2=94=82 -d31abcd81c84f23d134ebe15127011e75cbbcaa809f6=
ca2d47f6ff67c3d02e8f
=E2=94=82 =E2=94=82 =E2=94=82 -5984d85463d458e3b35b9c35a1355fe4fae0709dd303=
eb4481809e10d8ce7ac0
=E2=94=82 =E2=94=82 =E2=94=82 -83ac85be99af4ce33520874f101665e0e77e7436ee64=
23cf82d4a8924aa53e51
=E2=94=82 =E2=94=82 =E2=94=82 -d21d7766aa5665041c4d4ef75fddce637a754ca42941=
cf986e1bbce60012bc1a
=E2=94=82 =E2=94=82 =E2=94=82 -5666674075c199c128048bcaee9dd35cb7e7248f5530=
47c90e8e98511aeda17f
=E2=94=82 =E2=94=82 =E2=94=82 -2c75e8280037910e500c7e03c7bc935a7ad8d719484f=
f45bba3393e672c92500
=E2=94=82 =E2=94=82 =E2=94=82 -0000400605c2755588373f9f857d000b231c6d59cc6d=
0b1b08eb3f07a2b09cf7
=E2=94=82 =E2=94=82 =E2=94=82 -9a980124839b4bf70a8f3759f4e72fabc28550469f35=
3451c570eb7b4efeebb2
=E2=94=82 =E2=94=82 =E2=94=82 -a15a6a
=E2=94=82 =E2=94=82 =E2=94=82 +b5866eae2f327ea13a342c1cd3ff4e2c381caa2e66be=
323e3c065f0000010011
=E2=94=82 =E2=94=82 =E2=94=82 +b0342b5cad4140db9fa893b68d1c5f3834c1cee9f95e=
dc9b57a7968ec0c4ec2d
=E2=94=82 =E2=94=82 =E2=94=82 +18ccded167b847137ec4b8361aa1e782ccd0797b4401=
382f5d120848b67930be
=E2=94=82 =E2=94=82 =E2=94=82 +07389e0f52dda5f812d7462197594b4e86df50adedaf=
bc57dc4e3160e09b8437
=E2=94=82 =E2=94=82 =E2=94=82 +4570899257469c8e97d46d40fe0801d906dfe8bdc611=
a953b2d0690a0e1d6dc8
=E2=94=82 =E2=94=82 =E2=94=82 +5c7699f30dee70856a6627847e08a710db7432e29b33=
474358005a53dfa5fa95
=E2=94=82 =E2=94=82 =E2=94=82 +f23817dda29c64694119e48e7a9b2a428d5afc42c43d=
afe78994cde0f065b7b9
=E2=94=82 =E2=94=82 =E2=94=82 +eca4ee565767ac13fe183cbac6c85002210e67ad8c56=
35c5bfde812c702b234a
=E2=94=82 =E2=94=82 =E2=94=82 +1dc530f5ff737c7ca25224e7375e35077874a9999215=
70273afab1eb91f96200
=E2=94=82 =E2=94=82 =E2=94=82 +00004053356da884e81a92cd25fdea9dbd9137990a4e=
354d1421d50100bb7e56
=E2=94=82 =E2=94=82 =E2=94=82 +934dc868d7b5b00f1a9b470ca3c27379af91e9695c8f=
dab671a160b6272f9276
=E2=94=82 =E2=94=82 =E2=94=82 +d1fe04

1 store items were analyzed:
  - 0 (0.0%) were identical
  - 1 (100.0%) differed
  - 0 (0.0%) were inconclusive
```

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: core-updates nss not reproducible
Resent-From: Vagrant Cascadian <vagrant@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 07 Mar 2024 22:18:01 +0000
Resent-Message-ID: <handler.40316.B40316.170984984420023 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: control <at> debbugs.gnu.org
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.170984984420023
          (code B ref 40316); Thu, 07 Mar 2024 22:18:01 +0000
Received: (at 40316) by debbugs.gnu.org; 7 Mar 2024 22:17:24 +0000
Received: from localhost ([127.0.0.1]:55228 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1riM3I-0005Cs-A1
	for submit <at> debbugs.gnu.org; Thu, 07 Mar 2024 17:17:24 -0500
Received: from cascadia.aikidev.net ([173.255.214.101]:50562)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <vagrant@HIDDEN>)
 id 1riM3B-0005CV-Hp; Thu, 07 Mar 2024 17:17:22 -0500
Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50])
 (Authenticated sender: vagrant@HIDDEN)
 by cascadia.aikidev.net (Postfix) with ESMTPSA id A9D491AD7C;
 Thu,  7 Mar 2024 14:16:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
 d=reproducible-builds.org; s=1.vagrant; t=1709849796;
 bh=DZRJ/XTu2LOIpLfeP1l0POCblxjvPtnaUsqNa5oDJJ0=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date:From;
 b=V3IST3H9WlZ1vdysO7qFmtLZwVwmRIWoWyHimX0JA7EIhXXqajTC88XL2DdoznMCE
 bbK0sYgXCY/voUufrEczQQ3Mqk4UE3+91rV3dQ4/XSrebMS8LmmvrKA+zteflmL1Zp
 TbI9m9hK/IjR9pAqqEk8i4DlCZqLPS2aosWWKiqy+Qqo8+lT2mA0UJ41eFeTPxqDhr
 xS2nJa0zMXde4ISrGY0agf0qCUFQaUt4iGvE1QlcmZFP9i+59nJ5LcMSzE9oVmLsIW
 F3o6E4Hqs8gCdZWONq4BlzJLp4zzKRvuYipOpNmKuPRjVqxnCquhwKDTryU659fv69
 e6+Ga5P62dngw==
From: Vagrant Cascadian <vagrant@HIDDEN>
In-Reply-To: <87a6osdf97.fsf@HIDDEN>
References: <20200329131611.38448a58@HIDDEN>
 <87a6osdf97.fsf@HIDDEN>
Date: Thu, 07 Mar 2024 14:16:33 -0800
Message-ID: <87zfv9n0vy.fsf@wireframe>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain

retitle 40316 nss not reproducible
thanks

Still an issue on master as of d29e5a83e887cd2f4f459a12cbbfc40c77e55ce2:

guix challenge --verbose --diff=simple nss
guix challenge: warning: could not determine current substitute URLs; using defaults
/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1 contents differ:
  no local build for '/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1'
  https://ci.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1: 18xvq9cb7y2hajixnkk24bh969px0h5289hgby484iyg3x73sagp
  https://bordeaux.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1: 0pnmzsy7m34v51qxpi4lrj2a9m7l19prldabwad8gx24gih4irah
  differing files:
    /lib/nss/libfreebl3.chk
    /lib/nss/libfreeblpriv3.chk
    /lib/nss/libnssdbm3.chk
    /lib/nss/libsoftokn3.chk

1 store items were analyzed:
  - 0 (0.0%) were identical
  - 1 (100.0%) differed
  - 0 (0.0%) were inconclusive

According to the notes in Debian, this is due to cryptographic
signatures performed at build time:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/nss.html


live well,
  vagrant

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZeo8wQAKCRDcUY/If5cW
qpPOAQD3X++W8pz9obrPqz7Lu6lBT7irx7v7bPgKZylMqrwddgEAnZVMhE9BN2R5
5la3TTgaeQLzJ3OFykNGfOIeGuAy4QQ=
=H8rd
-----END PGP SIGNATURE-----
--=-=-=--

Message received at control <at> debbugs.gnu.org:

Received: (at control) by debbugs.gnu.org; 7 Mar 2024 22:17:26 +0000
From debbugs-submit-bounces <at> debbugs.gnu.org Thu Mar 07 17:17:26 2024
Received: from localhost ([127.0.0.1]:55230 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1riM3I-0005Cu-Ln
	for submit <at> debbugs.gnu.org; Thu, 07 Mar 2024 17:17:25 -0500
Received: from cascadia.aikidev.net ([173.255.214.101]:50562)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <vagrant@HIDDEN>)
 id 1riM3B-0005CV-Hp; Thu, 07 Mar 2024 17:17:22 -0500
Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50])
 (Authenticated sender: vagrant@HIDDEN)
 by cascadia.aikidev.net (Postfix) with ESMTPSA id A9D491AD7C;
 Thu,  7 Mar 2024 14:16:36 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
 d=reproducible-builds.org; s=1.vagrant; t=1709849796;
 bh=DZRJ/XTu2LOIpLfeP1l0POCblxjvPtnaUsqNa5oDJJ0=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date:From;
 b=V3IST3H9WlZ1vdysO7qFmtLZwVwmRIWoWyHimX0JA7EIhXXqajTC88XL2DdoznMCE
 bbK0sYgXCY/voUufrEczQQ3Mqk4UE3+91rV3dQ4/XSrebMS8LmmvrKA+zteflmL1Zp
 TbI9m9hK/IjR9pAqqEk8i4DlCZqLPS2aosWWKiqy+Qqo8+lT2mA0UJ41eFeTPxqDhr
 xS2nJa0zMXde4ISrGY0agf0qCUFQaUt4iGvE1QlcmZFP9i+59nJ5LcMSzE9oVmLsIW
 F3o6E4Hqs8gCdZWONq4BlzJLp4zzKRvuYipOpNmKuPRjVqxnCquhwKDTryU659fv69
 e6+Ga5P62dngw==
From: Vagrant Cascadian <vagrant@HIDDEN>
To: 40316 <at> debbugs.gnu.org
Subject: Re: bug#40316: core-updates nss not reproducible
In-Reply-To: <87a6osdf97.fsf@HIDDEN>
References: <20200329131611.38448a58@HIDDEN>
 <87a6osdf97.fsf@HIDDEN>
Date: Thu, 07 Mar 2024 14:16:33 -0800
Message-ID: <87zfv9n0vy.fsf@wireframe>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: -0.0 (/)
X-Debbugs-Envelope-To: control
Cc: control <at> debbugs.gnu.org
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain

retitle 40316 nss not reproducible
thanks

Still an issue on master as of d29e5a83e887cd2f4f459a12cbbfc40c77e55ce2:

guix challenge --verbose --diff=simple nss
guix challenge: warning: could not determine current substitute URLs; using defaults
/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1 contents differ:
  no local build for '/gnu/store/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1'
  https://ci.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1: 18xvq9cb7y2hajixnkk24bh969px0h5289hgby484iyg3x73sagp
  https://bordeaux.guix.gnu.org/nar/lzip/mc9gdsm0cqpyd2522f5xghdl59p1l35r-nss-3.88.1: 0pnmzsy7m34v51qxpi4lrj2a9m7l19prldabwad8gx24gih4irah
  differing files:
    /lib/nss/libfreebl3.chk
    /lib/nss/libfreeblpriv3.chk
    /lib/nss/libnssdbm3.chk
    /lib/nss/libsoftokn3.chk

1 store items were analyzed:
  - 0 (0.0%) were identical
  - 1 (100.0%) differed
  - 0 (0.0%) were inconclusive

According to the notes in Debian, this is due to cryptographic
signatures performed at build time:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/nss.html


live well,
  vagrant

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZeo8wQAKCRDcUY/If5cW
qpPOAQD3X++W8pz9obrPqz7Lu6lBT7irx7v7bPgKZylMqrwddgEAnZVMhE9BN2R5
5la3TTgaeQLzJ3OFykNGfOIeGuAy4QQ=
=H8rd
-----END PGP SIGNATURE-----
--=-=-=--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: Update needed of NSS
References: <20200329131611.38448a58@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
Resent-From: Steve George <steve@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Tue, 23 Apr 2024 12:44:02 +0000
Resent-Message-ID: <handler.40316.B40316.171387620731859 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171387620731859
          (code B ref 40316); Tue, 23 Apr 2024 12:44:02 +0000
Received: (at 40316) by debbugs.gnu.org; 23 Apr 2024 12:43:27 +0000
Received: from localhost ([127.0.0.1]:51929 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rzFUb-0008Hd-Nc
	for submit <at> debbugs.gnu.org; Tue, 23 Apr 2024 08:43:27 -0400
Received: from mailtransmit05.runbox.com ([2a0c:5a00:149::26]:35420)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <steve@HIDDEN>) id 1rzFUX-0008FJ-9S
 for 40316 <at> debbugs.gnu.org; Tue, 23 Apr 2024 08:43:23 -0400
Received: from mailtransmit02.runbox ([10.9.9.162] helo=aibo.runbox.com)
 by mailtransmit05.runbox.com with esmtps (TLS1.2) tls
 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.93)
 (envelope-from <steve@HIDDEN>) id 1rzFU9-00Fmo3-3T
 for 40316 <at> debbugs.gnu.org; Tue, 23 Apr 2024 14:42:57 +0200
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
 d=futurile.net; s=selector1; h=Content-Type:MIME-Version:Message-ID:Subject:
 To:From:Date; bh=s5xD5XmXkGIZ3m+Sfz+J6QZe8raupYhKkvSoSWlId34=; b=g8Bda7sHWg81
 VieutAhQkceIhuyMsvbXvCyvW4OkPNW4fk/RMLbgOXEnzT2kS5iLa3z42Why5objpOKJSSJ1s3ej6
 kwOxh2JDHmhtxBcCKxi3mpE9p6Z2gbIamkA8dMHIBmMKCrASI0JZhJ4J4x6sizGpZ21K/+ueyUZ9y
 JWe+aVjIYX08a9zx6B8WYZxYlK7L/nns7RcGRE2QqmRXTEsH4CKJ5TwCLTr6HUFYa9k7PfMWMB9Ez
 E983Luh0ZFkun3JWU8s8CrhooyBX5Xseb1T0TeWYL81YnnBgYeK6dQ1yJQcm0IJi2tdllGdBk888Z
 fT3TCy1Zr+Z/mJSpHc8AmQ==;
Received: from [10.9.9.72] (helo=submission01.runbox)
 by mailtransmit02.runbox with esmtp (Exim 4.86_2)
 (envelope-from <steve@HIDDEN>) id 1rzFU8-0002ob-ON
 for 40316 <at> debbugs.gnu.org; Tue, 23 Apr 2024 14:42:56 +0200
Received: by submission01.runbox with esmtpsa [Authenticated ID (641962)]
 (TLS1.2:ECDHE_SECP256R1__RSA_SHA256__AES_256_GCM:256) (Exim 4.93)
 id 1rzFU1-004joK-DA
 for 40316 <at> debbugs.gnu.org; Tue, 23 Apr 2024 14:42:49 +0200
Date: Tue, 23 Apr 2024 13:42:48 +0100
From: Steve George <steve@HIDDEN>
Message-ID: <ZiesyKIEQ-izI-3k@dragon2>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
X-Spam-Score: -0.7 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi,

Confirmed nss doesn't build reproducibly on current core-updates branch.

Also looks like it needs an update to 3.99

Steve / Futurile

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: Core updates status
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 25 Apr 2024 14:08:05 +0000
Resent-Message-ID: <handler.40316.B40316.171405404617446 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Steve George <steve@HIDDEN>
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171405404617446
          (code B ref 40316); Thu, 25 Apr 2024 14:08:05 +0000
Received: (at 40316) by debbugs.gnu.org; 25 Apr 2024 14:07:26 +0000
Received: from localhost ([127.0.0.1]:60807 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1rzzkx-0004Wj-83
	for submit <at> debbugs.gnu.org; Thu, 25 Apr 2024 10:07:25 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:50010
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1rzzkr-0004VQ-Pf
 for 40316 <at> debbugs.gnu.org; Thu, 25 Apr 2024 10:07:20 -0400
Received: from [192.168.1.172]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 88333A63ACC;
 Thu, 25 Apr 2024 16:06:58 +0200 (CEST)
Message-ID: <2dc99b59-cb76-f822-f2ce-027f523bb682@HIDDEN>
Date: Thu, 25 Apr 2024 15:06:58 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.15.0
Content-Language: en-US
References: <Ziihyt5dYdvv_fRR@dragon2>
 <451a97f9-0e16-c1b3-8884-52420e265db3@HIDDEN>
 <quwzpv6nqevtbdp2galghxgx3x23zmsppmm6gcmpj3siqrrbud@r27tt6htlol3>
From: Christina O'Donnell <cdo@HIDDEN>
In-Reply-To: <quwzpv6nqevtbdp2galghxgx3x23zmsppmm6gcmpj3siqrrbud@r27tt6htlol3>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Score: -3.0 (---)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

Hi Steve,

> It would be good to confirm this one:
>
> https://debbugs.gnu.org/cgi/bugreport.cgi?bug=40316

Still fails to reproduce with those changes applied.

The culprit is in nss/cmd/shlibsign/shlibsign.c:

shlibSignHMAC generates a new key-pair each time it's run:

     /* Generate a DSA key pair */
     logIt("Generate an HMAC key ... \n");
     crv = pFunctionList->C_GenerateKey(hRwSession, &hmacKeyGenMech,
                                        hmacKeyTemplate,
PR_ARRAY_SIZE(hmacKeyTemplate),
                                        &hHMACKey);

Three options:
  1. Disable library signing entirely.
  2. Seed the generation to be deterministic.
  3. Drop in a HMAC key-pair and patch the code to use that instead of 
generating.

2 and 3 defeat the point of the cryptographically secure supply chain as 
the private key can be obtained deterministically, so my vote would be 
simply  to not sign the libraries (1), which would be easier to 
maintain. We're not the primary distributor and users can verify our 
distribution of nss by running `guix challenge` anyway.

> It looks like Zhen Junjie applied two patches to fix NSS cross-compilation on Master [0]

Building everything cross-compiled to ARM now.

Kind regards,

Christina

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: nss not reproducible
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 25 Apr 2024 17:03:10 +0000
Resent-Message-ID: <handler.40316.B40316.17140645419463 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Steve George <steve@HIDDEN>
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.17140645419463
          (code B ref 40316); Thu, 25 Apr 2024 17:03:10 +0000
Received: (at 40316) by debbugs.gnu.org; 25 Apr 2024 17:02:21 +0000
Received: from localhost ([127.0.0.1]:33201 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s02U9-0002RQ-2p
	for submit <at> debbugs.gnu.org; Thu, 25 Apr 2024 13:02:19 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:59548
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s02Ty-0002Oy-Ue
 for 40316 <at> debbugs.gnu.org; Thu, 25 Apr 2024 13:02:08 -0400
Received: from [192.168.1.172]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 84605A63999;
 Thu, 25 Apr 2024 19:01:43 +0200 (CEST)
Message-ID: <714bd3eb-76ed-2159-9761-f8614a1b164a@HIDDEN>
Date: Thu, 25 Apr 2024 18:01:42 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.15.0
Content-Language: en-US
From: Christina O'Donnell <cdo@HIDDEN>
References: <Ziihyt5dYdvv_fRR@dragon2>
 <451a97f9-0e16-c1b3-8884-52420e265db3@HIDDEN>
 <quwzpv6nqevtbdp2galghxgx3x23zmsppmm6gcmpj3siqrrbud@r27tt6htlol3>
 <2dc99b59-cb76-f822-f2ce-027f523bb682@HIDDEN>
In-Reply-To: <2dc99b59-cb76-f822-f2ce-027f523bb682@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Spam-Score: -3.0 (---)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -4.0 (----)

Hi,

I believe I have a fix for this, I'm just waiting on my machine to hurry 
up and confirm it, might end up running over night, then I'll send my 
patch up.

I'm doing two native builds and two cross-builds.

I've also updated to 3.99.

Kind regards,

Christina

On 25/04/2024 15:06, Christina O'Donnell wrote:
> Hi Steve,
>
>> It would be good to confirm this one:
>>
>> https://debbugs.gnu.org/cgi/bugreport.cgi?bug=40316
>
> Still fails to reproduce with those changes applied.
>
> The culprit is in nss/cmd/shlibsign/shlibsign.c:
>
> shlibSignHMAC generates a new key-pair each time it's run:
>
>     /* Generate a DSA key pair */
>     logIt("Generate an HMAC key ... \n");
>     crv = pFunctionList->C_GenerateKey(hRwSession, &hmacKeyGenMech,
>                                        hmacKeyTemplate,
> PR_ARRAY_SIZE(hmacKeyTemplate),
>                                        &hHMACKey);
>
> Three options:
>  1. Disable library signing entirely.
>  2. Seed the generation to be deterministic.
>  3. Drop in a HMAC key-pair and patch the code to use that instead of 
> generating.
>
> 2 and 3 defeat the point of the cryptographically secure supply chain 
> as the private key can be obtained deterministically, so my vote would 
> be simply  to not sign the libraries (1), which would be easier to 
> maintain. We're not the primary distributor and users can verify our 
> distribution of nss by running `guix challenge` anyway.
>
>> It looks like Zhen Junjie applied two patches to fix NSS 
>> cross-compilation on Master [0]
>
> Building everything cross-compiled to ARM now.
>
> Kind regards,
>
> Christina
>
>

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 0/6] WIP: nss: Update to 3.99
References: <20200329131611.38448a58@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:06 +0000
Resent-Message-ID: <handler.40316.B40316.171416728716559 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416728716559
          (code B ref 40316); Fri, 26 Apr 2024 21:35:06 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:34:47 +0000
Received: from localhost ([127.0.0.1]:38574 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDN-0004Hg-Bl
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:46 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39138
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDJ-0004Gc-Om
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:39 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id A1B2DA604B4;
 Fri, 26 Apr 2024 23:34:17 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:33:56 +0100
Message-ID: <cover.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

Hi,

I've got as far as making nss 3.98 reproducible, however updating it to 3.99
results in 51 test failures. These are regressions, and worked correctly for
3.98. I'm not entirely sure what the issue is, but I've run out of time to
debug it this week, so I'm sending this patch up as is.

Up to patch 3 build correctly. Patch 4 is the first one that fails.

The issue specifically seems to all be related to FIPS:

    A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has
    occurred with the token or slot.

If someone could take a look at this and see if there's anything I've missded
then I'd appreciate that. Otherwise I'm free to pick it back up again on
Tuesday.

Let me know if you have any questions.

Kind regards,
Christina

Christina O'Donnell (4):
  gnu: nss: Make reproducible.
  gnu: nss: Update to 3.99.
  gnu: nss-certs: Update to 3.99.
  WIP: nss: Attempting to resolve FIPS regression.

Zheng Junjie (2):
  gnu: nss: Fix cross-compilation.
  gnu: nspr: Fix cross-compilation.

 gnu/packages/certs.scm                        | 24 +++++--
 gnu/packages/nss.scm                          | 30 +++++++--
 .../patches/nss-Disable-library-signing.patch | 67 +++++++++++++++++++
 3 files changed, 111 insertions(+), 10 deletions(-)
 create mode 100644 gnu/packages/patches/nss-Disable-library-signing.patch


base-commit: 9a47ef6182b6a36354699efbdbedca17f24cd9b8
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 3/6] gnu: nss: Make reproducible.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:10 +0000
Resent-Message-ID: <handler.40316.B40316.171416729616652 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416729616652
          (code B ref 40316); Fri, 26 Apr 2024 21:35:10 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:34:56 +0000
Received: from localhost ([127.0.0.1]:38576 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDa-0004K4-8M
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:56 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39172
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDJ-0004Gf-Mt
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:41 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 1D43BA63B06;
 Fri, 26 Apr 2024 23:34:18 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:33:59 +0100
Message-ID: <ba7d0083ae84b8ff3bd5e01a633cbe32226f8651.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/patches/nss-Disable-library-signing.patch: Disable library
signing to make the build reproducible.
gnu/packages/nss.scm (nss): Apply this new patch.

Change-Id: I7860bae219ecc4a79423a590c27a1097ae2e7874
---
 gnu/packages/nss.scm                          |  3 +-
 .../patches/nss-Disable-library-signing.patch | 67 +++++++++++++++++++
 2 files changed, 69 insertions(+), 1 deletion(-)
 create mode 100644 gnu/packages/patches/nss-Disable-library-signing.patch

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 0baafe2f373..b608a995577 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -124,7 +124,8 @@ (define-public nss
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-                                       "nss-increase-test-timeout.patch"))
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-Disable-library-signing.patch"))
               (modules '((guix build utils)))
               (snippet
                '(begin
diff --git a/gnu/packages/patches/nss-Disable-library-signing.patch b/gnu/packages/patches/nss-Disable-library-signing.patch
new file mode 100644
index 00000000000..b488d29dcad
--- /dev/null
+++ b/gnu/packages/patches/nss-Disable-library-signing.patch
@@ -0,0 +1,67 @@
+From 4734b834755822f962af29e9395daa7338084e21 Mon Sep 17 00:00:00 2001
+Message-ID: <4734b834755822f962af29e9395daa7338084e21.1714059680.git.cdo@HIDDEN>
+From: Christina O'Donnell <cdo@HIDDEN>
+Date: Thu, 25 Apr 2024 16:35:50 +0100
+Subject: [PATCH] nss: Disable library signing.
+
+---
+ nss/cmd/shlibsign/Makefile | 32 +-------------------------------
+ 1 file changed, 1 insertion(+), 31 deletions(-)
+
+diff --git a/nss/cmd/shlibsign/Makefile b/nss/cmd/shlibsign/Makefile
+index a119205..7a85c1d 100644
+--- a/nss/cmd/shlibsign/Makefile
++++ b/nss/cmd/shlibsign/Makefile
+@@ -43,22 +43,9 @@ EXTRA_SHARED_LIBS += \
+ 
+ endif
+ 
+-
+-# sign any and all shared libraries that contain the word freebl
+-ifeq ($(NSS_BUILD_WITHOUT_SOFTOKEN),1)
++# Disable library signing as it's non-deterministic
+ CHECKLIBS =
+ CHECKLOC =
+-else
+-CHECKLIBS = $(DIST)/lib/$(DLL_PREFIX)softokn3.$(DLL_SUFFIX)
+-CHECKLIBS += $(wildcard $(DIST)/lib/$(DLL_PREFIX)freebl*3.$(DLL_SUFFIX))
+-ifndef NSS_DISABLE_DBM
+-CHECKLIBS += $(DIST)/lib/$(DLL_PREFIX)nssdbm3.$(DLL_SUFFIX)
+-endif
+-CHECKLOC = $(CHECKLIBS:.$(DLL_SUFFIX)=.chk)
+-
+-MD_LIB_RELEASE_FILES = $(CHECKLOC)
+-ALL_TRASH += $(CHECKLOC)
+-endif
+ 
+ #######################################################################
+ # (5) Execute "global" rules. (OPTIONAL)                              #
+@@ -78,23 +65,6 @@ include $(CORE_DEPTH)/coreconf/rules.mk
+ 
+ include ../platrules.mk
+ 
+-SRCDIR = $(call core_abspath,.)
+-
+-%.chk: %.$(DLL_SUFFIX) 
+-ifeq ($(OS_TARGET), OS2)
+-	cd $(OBJDIR) ; cmd.exe /c $(SRCDIR)/sign.cmd $(DIST) \
+-	$(call core_abspath,$(OBJDIR)) $(OS_TARGET) \
+-	$(call core_abspath,$(NSPR_LIB_DIR)) $(call core_abspath,$<)
+-else
+-    ifeq ($(CROSS_COMPILE),1)
+-	# do nothing
+-    else
+-	cd $(OBJDIR) ; sh $(SRCDIR)/sign.sh $(call core_abspath,$(DIST)) \
+-	$(call core_abspath,$(OBJDIR)) $(OS_TARGET) \
+-	$(call core_abspath,$(NSPR_LIB_DIR)) $(call core_abspath,$<)
+-    endif
+-endif
+-
+ libs: install
+ ifdef CHECKLOC
+ 	$(MAKE) $(CHECKLOC)
+
+base-commit: 2951778f8e8855bed24754a57ecc43f02a2843dd
+-- 
+2.41.0
+
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 1/6] gnu: nss: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:14 +0000
Resent-Message-ID: <handler.40316.B40316.171416729716669 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416729716669
          (code B ref 40316); Fri, 26 Apr 2024 21:35:14 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:34:57 +0000
Received: from localhost ([127.0.0.1]:38578 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDc-0004Kc-Nu
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:57 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39154
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDJ-0004Gd-Ou
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:42 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id CA43FA63AD2;
 Fri, 26 Apr 2024 23:34:17 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:33:57 +0100
Message-ID: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nss)[arguments]<#:make-flags>: When
cross-compilation, Add CROSS_COMPILE=1.
<#:phases>: When cross-compilation, Set env NATIVE_CC to gcc.

Change-Id: I5c9559a4b8cecf2cfc6c47d136d69c01a335faaf
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 7e9ed49ead8..459e53bc1cf 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -154,6 +154,9 @@ (define-public nss
                                             (#$(target-linux?) "linux")
                                             (else ""))))
                        #~())
+                #$@(if (%current-target-system)
+                       #~("CROSS_COMPILE=1")
+                       #~())
                 (string-append "NSPR_INCLUDE_DIR="
                                (search-input-directory %build-inputs
                                                        "include/nspr"))
@@ -175,6 +178,10 @@ (define-public nss
             (lambda _
               (setenv "CC" #$(cc-for-target))
               (setenv "CCC" #$(cxx-for-target))
+              ;; TODO: Set this unconditionally
+              #$@(if (%current-target-system)
+                     #~((setenv "NATIVE_CC" "gcc"))
+                     #~())
               ;; No VSX on powerpc-linux.
               #$@(if (target-ppc32?)
                      #~((setenv "NSS_DISABLE_CRYPTO_VSX" "1"))
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 2/6] gnu: nspr: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:19 +0000
Resent-Message-ID: <handler.40316.B40316.171416729916696 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416729916696
          (code B ref 40316); Fri, 26 Apr 2024 21:35:19 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:34:59 +0000
Received: from localhost ([127.0.0.1]:38580 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDd-0004Ko-7c
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:58 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39160
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDJ-0004Ge-Qk
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:44 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id EDEF6A63ADD;
 Fri, 26 Apr 2024 23:34:17 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:33:58 +0100
Message-ID: <1ea4518f8c971f69a4731da7559c7ab322ff77ed.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nspr)[arguments]<#:configure-flags>: When
cross-compilation, Add HOST_CC=gcc.

Change-Id: I337f217f153f8cc3a713906643d6fab9115056e9
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 459e53bc1cf..0baafe2f373 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -71,7 +71,10 @@ (define-public nspr
       #~(list "--disable-static"
               "--enable-64bit"
               (string-append "LDFLAGS=-Wl,-rpath="
-                             (assoc-ref %outputs "out") "/lib"))
+                             (assoc-ref %outputs "out") "/lib")
+              #$@(if (%current-target-system)
+                     #~("HOST_CC=gcc")
+                     #~()))
       ;; Use fixed timestamps for reproducibility.
       #:make-flags #~'("SH_DATE='1970-01-01 00:00:01'"
                        ;; This is epoch 1 in microseconds.
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 4/6] gnu: nss: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:24 +0000
Resent-Message-ID: <handler.40316.B40316.171416730116713 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416730116713
          (code B ref 40316); Fri, 26 Apr 2024 21:35:24 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:35:01 +0000
Received: from localhost ([127.0.0.1]:38582 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDf-0004LF-2D
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:35:00 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39188
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDK-0004Gp-2m
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:44 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 44D84A63B08;
 Fri, 26 Apr 2024 23:34:18 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:34:00 +0100
Message-ID: <e7eea53f912ca11685ddc2519e9090bb52c7ed6b.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/nss.scm (nss): Update to 3.99.

Change-Id: Iba6c9dc2956cc0febb62a1c471add899250fa489
---
 gnu/packages/nss.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index b608a995577..80667d8affe 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -109,7 +109,7 @@ (define-public nss
     ;; IMPORTANT: Also update and test the nss-certs package, which duplicates
     ;; version and source to avoid a top-level variable reference & module
     ;; cycle.
-    (version "3.88.1")
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -120,7 +120,7 @@ (define-public nss
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 5/6] gnu: nss-certs: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:27 +0000
Resent-Message-ID: <handler.40316.B40316.171416730316769 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416730316769
          (code B ref 40316); Fri, 26 Apr 2024 21:35:27 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:35:03 +0000
Received: from localhost ([127.0.0.1]:38584 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDg-0004LW-JG
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:35:02 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39204
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDM-0004HP-4b
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:45 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 6D59BA63B09;
 Fri, 26 Apr 2024 23:34:18 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:34:01 +0100
Message-ID: <4e8fc191444bf48b1d1b8d21c3f1a723c4f4ad85.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/certs.scm (nss-certs-3.88.1): New variable.
(nss-certs-3.98): Update and rename to nss-certs-3.99.
(nss-certs): Update to 3.99.

Change-Id: I2f5f737d44d08497d4f5e0e07557be36d2f1f070
---
 gnu/packages/certs.scm | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index 7078c7c8d11..7aa96493fbe 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -125,7 +125,7 @@ (define-public certdata2pem
 that was originally contributed to Debian.")
       (license license:isc))))
 
-(define-public nss-certs
+(define-public nss-certs-3.88.1
   (package
     (name "nss-certs")
     ;; XXX We used to refer to the nss package here, but that eventually caused
@@ -188,10 +188,10 @@ (define-public nss-certs
     (home-page "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS")
     (license license:mpl2.0)))
 
-(define-public nss-certs-3.98
+(define-public nss-certs-3.99
   (package
-    (inherit nss-certs)
-    (version "3.98")
+    (inherit nss-certs-3.88.1)
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -202,7 +202,21 @@ (define-public nss-certs-3.98
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "1kh98amfklrq6915n4mlbrcqghc3srm7rkzs9dkh21jwscrwqjgm"))))))
+                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+              ;; Create nss.pc and nss-config.
+              (patches (search-patches "nss-3.56-pkgconfig.patch"
+                                       "nss-getcwd-nonnull.patch"
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-Disable-library-signing.patch"))
+              (modules '((guix build utils)))
+              (snippet
+               '(begin
+                  ;; Delete the bundled copy of these libraries.
+                  (delete-file-recursively "nss/lib/zlib")
+                  (delete-file-recursively "nss/lib/sqlite")))))))
+
+(define-public nss-certs
+  nss-certs-3.99)
 
 (define-public le-certs
   (package
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 6/6] WIP: nss: Attempting to resolve FIPS regression.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 21:35:29 +0000
Resent-Message-ID: <handler.40316.B40316.171416730716811 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: guix-devel@HIDDEN, Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171416730716811
          (code B ref 40316); Fri, 26 Apr 2024 21:35:29 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 21:35:07 +0000
Received: from localhost ([127.0.0.1]:38586 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0TDi-0004MM-V0
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:35:05 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:39218
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s0TDM-0004HQ-4v
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 17:34:45 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 96364A63B0A;
 Fri, 26 Apr 2024 23:34:18 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Fri, 26 Apr 2024 22:34:02 +0100
Message-ID: <bfed33ceadbd21b2688266f5e3a2918332c264c9.1714166213.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

There are 51 new test failures which all appear to be related to FIPS.

For example:

modutil -dbdir /tmp/guix-build-nss-3.99.drv-0/nss-3.99/tests_results/security/localhost.1/fips -fips true

WARNING: Performing this operation while the browser is running could cause
corruption of your security databases. If the browser is currently running,
you should exit browser before continuing this operation. Type
'q <enter>' to abort, or <enter> to continue:
A PKCS #11 module returned CKR_DEVICE_ERROR, indicating that a problem has occurred with the token or slot.
ERROR: Unable to switch FIPS modes.
cert.sh: #291: Enable FIPS mode on database for FIPS PUB 140 Test Certificate (11)  - FAILED
cert.sh ERROR: Enable FIPS mode on database for FIPS PUB 140 Test Certificate failed 11

Change-Id: If0d57bb9e129eb862fae1a28d9779c6100e0a23d
---
 gnu/packages/nss.scm | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 80667d8affe..a8fb6965c2c 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -134,6 +134,10 @@ (define-public nss
                   (delete-file-recursively "nss/lib/sqlite")))))
     (build-system gnu-build-system)
     (outputs '("out" "bin"))
+    ;; (search-paths
+    ;;  (list (search-path-specification
+    ;;         (variable "LD_LIBRARY_PATH")
+    ;;         (files '("lib")))))
     (arguments
      (list
       #:make-flags
@@ -161,12 +165,15 @@ (define-public nss
                 #$@(if (%current-target-system)
                        #~("CROSS_COMPILE=1")
                        #~())
+                (string-append "NSS_FORCE_FIPS=1")
+                (string-append "NSPR_LIB_DIR="
+                               (string-append #$nspr "/lib"))
                 (string-append "NSPR_INCLUDE_DIR="
                                (search-input-directory %build-inputs
                                                        "include/nspr"))
                 ;; Add $out/lib/nss to RPATH.
                 (string-append "RPATH=" rpath)
-                (string-append "LDFLAGS=" rpath)))
+                (string-append "LDFLAGS=" rpath " -L" #$nspr "/lib")))
       #:modules '((guix build gnu-build-system)
                   (guix build utils)
                   (ice-9 ftw)
@@ -203,6 +210,8 @@ (define-public nss
                     (setenv "DOMSUF" "localdomain")
                     (setenv "USE_IP" "TRUE")
                     (setenv "IP_ADDRESS" "127.0.0.1")
+                    ;; (setenv "LD_LIBRARY_PATH"
+                    ;;         (string-append (getenv "LD_LIBRARY_PATH")))
 
                     ;; The "PayPalEE.cert" certificate expires every six months,
                     ;; leading to test failures:
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH 3/6] gnu: nss: Make reproducible.
Resent-From: Vagrant Cascadian <vagrant@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Fri, 26 Apr 2024 23:00:11 +0000
Resent-Message-ID: <handler.40316.B40316.171417237011095 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christina O'Donnell <cdo@HIDDEN>, 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171417237011095
          (code B ref 40316); Fri, 26 Apr 2024 23:00:11 +0000
Received: (at 40316) by debbugs.gnu.org; 26 Apr 2024 22:59:30 +0000
Received: from localhost ([127.0.0.1]:38634 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s0UXM-0002sP-GA
	for submit <at> debbugs.gnu.org; Fri, 26 Apr 2024 18:59:29 -0400
Received: from cascadia.aikidev.net ([2600:3c01:e000:267:0:a171:de7:c]:48070)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <vagrant@HIDDEN>) id 1s0UXC-0002p8-7O
 for 40316 <at> debbugs.gnu.org; Fri, 26 Apr 2024 18:59:20 -0400
Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50])
 (Authenticated sender: vagrant@HIDDEN)
 by cascadia.aikidev.net (Postfix) with ESMTPSA id 838921AD8F;
 Fri, 26 Apr 2024 15:58:46 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
 d=reproducible-builds.org; s=1.vagrant; t=1714172326;
 bh=Tbw64BBC8fYR2g+jA1viVzCp4Ifey88cp9QsCRb2i88=;
 h=From:To:Cc:Subject:In-Reply-To:References:Date:From;
 b=XEzC7QzoA4C6ClSfxhNUaoN7TFrLfDb63IZ7cs4jhgv/aMQZB5aZvqGo5u/LapCcT
 vlZUL8GwiSZlq4bxysMfxarSPmZToVsNp6N8KCIKZU5LpyW/g5J1hYr1252v1p1O6S
 kAKlewvYPllOmI0DK2y/WjTyOJoAdSzMZPSVZwYSHcqh4hAaAWtOq9As06QTvzduZg
 sc34OF8EQpsE1kapnuSBE6Dj/ZmOPqUNI83E0RQ/Sz/BMGwFypeheId7miOkPcqsk8
 6iXLjTaUSuzMa4ua1FWW6RfBTs0QUpwUEh4VbE76z4QzEOkVuGjKC4K8QdWG41rGLo
 TaCxDY5tprwtg==
From: Vagrant Cascadian <vagrant@HIDDEN>
In-Reply-To: <ba7d0083ae84b8ff3bd5e01a633cbe32226f8651.1714166213.git.cdo@HIDDEN>
References: <cover.1714166213.git.cdo@HIDDEN>
 <ba7d0083ae84b8ff3bd5e01a633cbe32226f8651.1714166213.git.cdo@HIDDEN>
Date: Fri, 26 Apr 2024 15:58:40 -0700
Message-ID: <87o79vybmn.fsf@wireframe>
MIME-Version: 1.0
Content-Type: multipart/signed; boundary="=-=-=";
 micalg=pgp-sha512; protocol="application/pgp-signature"
X-Spam-Score: 0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

--=-=-=
Content-Type: text/plain

On 2024-04-26, Christina O'Donnell wrote:
> gnu/packages/patches/nss-Disable-library-signing.patch: Disable library
> signing to make the build reproducible.
> gnu/packages/nss.scm (nss): Apply this new patch.

Nice!


> diff --git a/gnu/packages/patches/nss-Disable-library-signing.patch b/gnu/packages/patches/nss-Disable-library-signing.patch
> new file mode 100644
> index 00000000000..b488d29dcad
> --- /dev/null
> +++ b/gnu/packages/patches/nss-Disable-library-signing.patch
> @@ -0,0 +1,67 @@
> +From 4734b834755822f962af29e9395daa7338084e21 Mon Sep 17 00:00:00 2001
> +Message-ID: <4734b834755822f962af29e9395daa7338084e21.1714059680.git.cdo@HIDDEN>
> +From: Christina O'Donnell <cdo@HIDDEN>
> +Date: Thu, 25 Apr 2024 16:35:50 +0100
> +Subject: [PATCH] nss: Disable library signing.
> +
> +---
> + nss/cmd/shlibsign/Makefile | 32 +-------------------------------
> + 1 file changed, 1 insertion(+), 31 deletions(-)

I think it would be good to explain why this patch is included, not just
in the git commit message, but in the patch comments itself. I realize
the patch actually includes a comment about non-determinism, but it is a
bit lost in the diff.

Also, might be worth briefly explaining why disabling this feature is
unlikely to break anything, etc.

Curious if there might be some way to leave most of the code in place,
disable it... otherwise on version updates it is more likely to result
in conflicts with even minor changes...


live well,
  vagrant

--=-=-=
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCZiwxoAAKCRDcUY/If5cW
qsQ5AQDJ/1xNdBXkWi9aT/MbiZO30A0F22MvfMv5LLUbX5WIXAEAxXLjwe8V188l
hwmE+P+mEqzNrlOzfqveZAXd/xk63gQ=
=tJPX
-----END PGP SIGNATURE-----
--=-=-=--

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: nss not reproducible
Resent-From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 08:17:02 +0000
Resent-Message-ID: <handler.40316.B40316.17146377769609 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: Christina O'Donnell <cdo@HIDDEN>
Cc: guix-devel@HIDDEN, zhengjunjie@HIDDEN, 40316 <at> debbugs.gnu.org, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.17146377769609
          (code B ref 40316); Thu, 02 May 2024 08:17:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 08:16:16 +0000
Received: from localhost ([127.0.0.1]:42278 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Rbz-0002Uv-Sx
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 04:16:16 -0400
Received: from eggs.gnu.org ([2001:470:142:3::10]:39850)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <ludo@HIDDEN>) id 1s2Rbx-0002Up-RI
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 04:16:14 -0400
Received: from fencepost.gnu.org ([2001:470:142:3::e])
 by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
 (Exim 4.90_1) (envelope-from <ludo@HIDDEN>)
 id 1s2RbR-0007Hg-Nz; Thu, 02 May 2024 04:15:41 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnu.org;
 s=fencepost-gnu-org; h=MIME-Version:Date:References:In-Reply-To:Subject:To:
 From; bh=PFK4OBeMVcVmTYt1t3P1K1e+ozwHRrNhM4d4hWG5il4=; b=MqSPlvAcr7oBaoyrlICD
 ZFhi0HcoLFTM7WxXGa5iZLriWO8kVoIrkvoxMM1S+ecd35VHRI82p8noJt5BEKMig8T1RVmSPad2T
 zyCo3+O4DPmcDXYmTONsOPs/KJG7WmM668s9OX3i6IjjMSDqvQ0WN4pNLaB0RFd13pG9rvWgzGBxM
 dyhk9a42AcTEqkEt8jKtiP8bJXqQJpIAIIbuA2zqqL7H4tuNBTCZRukK6tDNWLS2J+nw9FEFSEpLO
 edmr44ia7NxXugjQnNO2mlJ2lL9m6Iy5m5/veLY3kwFZNPCvlI1t8FFosG/8z/6Sp6V6WPp2/4BGR
 LCLfTgyHnbhpGw==;
From: Ludovic =?UTF-8?Q?Court=C3=A8s?= <ludo@HIDDEN>
In-Reply-To: <cover.1714166213.git.cdo@HIDDEN> (Christina O'Donnell's
 message of "Fri, 26 Apr 2024 22:33:56 +0100")
References: <20200329131611.38448a58@HIDDEN>
 <cover.1714166213.git.cdo@HIDDEN>
Date: Thu, 02 May 2024 10:15:36 +0200
Message-ID: <87jzkc1vfb.fsf_-_@HIDDEN>
User-Agent: Gnus/5.13 (Gnus v5.13)
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Score: -2.3 (--)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -3.3 (---)

Hi Christina,

Nice work!

Christina O'Donnell <cdo@HIDDEN> skribis:

> I've got as far as making nss 3.98 reproducible, however updating it to 3=
.99
> results in 51 test failures. These are regressions, and worked correctly =
for
> 3.98. I'm not entirely sure what the issue is, but I've run out of time to
> debug it this week, so I'm sending this patch up as is.

Not sure if this is related, but we=E2=80=99re seeing test failures due to
timing issues right now with 3.98:

  https://issues.guix.gnu.org/70693

Thank you!

Ludo=E2=80=99.

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 0/6] Attempt to make nss reproducible
References: <20200329131611.38448a58@HIDDEN>
In-Reply-To: <20200329131611.38448a58@HIDDEN>
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:01 +0000
Resent-Message-ID: <handler.40316.B40316.171464768726834 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464768726834
          (code B ref 40316); Thu, 02 May 2024 11:02:01 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:27 +0000
Received: from localhost ([127.0.0.1]:43050 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBq-0006yi-8F
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:26 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:48452
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBn-0006yP-6r
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:25 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id E3AE8A63B00;
 Thu,  2 May 2024 13:00:59 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:44 +0100
Message-ID: <cover.1714646232.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

This patch series is an incomplete attempt to make nss reproducible. Currently
this fails 4 tests due to NSS_FIPS_DISABLED not being respected.

Christina O'Donnell (4):
  gnu: nss: Update to 3.99.
  gnu: nss-certs: Update to 3.99.
  gnu: nss: Attempt to disable FIPS.
  gnu: nss: Disable FIPS in lowhashtest.

Zheng Junjie (2):
  gnu: nss: Fix cross-compilation.
  gnu: nspr: Fix cross-compilation.

 gnu/packages/certs.scm                        | 24 +++++++++++---
 gnu/packages/nss.scm                          | 27 ++++++++++++---
 .../nss-disable-fips-in-lowhashtest.patch     | 28 ++++++++++++++++
 .../patches/nss-disable-shlibsign.patch       | 33 +++++++++++++++++++
 4 files changed, 102 insertions(+), 10 deletions(-)
 create mode 100644 gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch
 create mode 100644 gnu/packages/patches/nss-disable-shlibsign.patch


base-commit: 9a47ef6182b6a36354699efbdbedca17f24cd9b8
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 2/6] gnu: nspr: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:02 +0000
Resent-Message-ID: <handler.40316.B40316.171464769026865 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769026865
          (code B ref 40316); Thu, 02 May 2024 11:02:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:30 +0000
Received: from localhost ([127.0.0.1]:43054 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBt-0006zE-PL
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:29 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:48456
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBn-0006yQ-7Y
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:25 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 5713EA63B44;
 Thu,  2 May 2024 13:01:00 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:46 +0100
Message-ID: <1ea4518f8c971f69a4731da7559c7ab322ff77ed.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
References: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nspr)[arguments]<#:configure-flags>: When
cross-compilation, Add HOST_CC=gcc.

Change-Id: I337f217f153f8cc3a713906643d6fab9115056e9
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 459e53bc1c..0baafe2f37 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -71,7 +71,10 @@ (define-public nspr
       #~(list "--disable-static"
               "--enable-64bit"
               (string-append "LDFLAGS=-Wl,-rpath="
-                             (assoc-ref %outputs "out") "/lib"))
+                             (assoc-ref %outputs "out") "/lib")
+              #$@(if (%current-target-system)
+                     #~("HOST_CC=gcc")
+                     #~()))
       ;; Use fixed timestamps for reproducibility.
       #:make-flags #~'("SH_DATE='1970-01-01 00:00:01'"
                        ;; This is epoch 1 in microseconds.
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 3/6] gnu: nss: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:02 +0000
Resent-Message-ID: <handler.40316.B40316.171464769026872 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769026872
          (code B ref 40316); Thu, 02 May 2024 11:02:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:30 +0000
Received: from localhost ([127.0.0.1]:43056 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBu-0006zG-1H
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:30 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:48470
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBn-0006yS-85
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:26 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 876C2A63B48;
 Thu,  2 May 2024 13:01:00 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:47 +0100
Message-ID: <989784d90c983cde67b2d8732b16fcd22f84f8a5.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
References: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/nss.scm (nss): Update to 3.99.

Change-Id: Iba6c9dc2956cc0febb62a1c471add899250fa489
---
 gnu/packages/nss.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 0baafe2f37..6795e59d28 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -109,7 +109,7 @@ (define-public nss
     ;; IMPORTANT: Also update and test the nss-certs package, which duplicates
     ;; version and source to avoid a top-level variable reference & module
     ;; cycle.
-    (version "3.88.1")
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -120,7 +120,7 @@ (define-public nss
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
@@ -207,7 +207,7 @@ (define-public nss
                     ;; leading to test failures:
                     ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
                     ;; work around that, set the time to roughly the release date.
-                    (invoke "faketime" "2022-11-01" "./nss/tests/all.sh"))
+                    (invoke "faketime" "2024-02-01" "./nss/tests/all.sh"))
                   (format #t "test suite not run~%"))))
           (replace 'install
             (lambda* (#:key outputs #:allow-other-keys)
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 4/6] gnu: nss-certs: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:02 +0000
Resent-Message-ID: <handler.40316.B40316.171464769126879 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769126879
          (code B ref 40316); Thu, 02 May 2024 11:02:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:31 +0000
Received: from localhost ([127.0.0.1]:43058 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBu-0006zN-Eh
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:30 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:48462
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBn-0006yR-9C
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:26 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id BDA5AA63B4A;
 Thu,  2 May 2024 13:01:00 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:48 +0100
Message-ID: <4468679c910db18313820a2cdd3166f529f4c78e.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
References: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/certs.scm (nss-certs-3.88.1): New variable.
(nss-certs-3.98): Update and rename to nss-certs-3.99.
(nss-certs): Update to 3.99.

Change-Id: I2f5f737d44d08497d4f5e0e07557be36d2f1f070
---
 gnu/packages/certs.scm | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index 7078c7c8d1..7aa96493fb 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -125,7 +125,7 @@ (define-public certdata2pem
 that was originally contributed to Debian.")
       (license license:isc))))
 
-(define-public nss-certs
+(define-public nss-certs-3.88.1
   (package
     (name "nss-certs")
     ;; XXX We used to refer to the nss package here, but that eventually caused
@@ -188,10 +188,10 @@ (define-public nss-certs
     (home-page "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS")
     (license license:mpl2.0)))
 
-(define-public nss-certs-3.98
+(define-public nss-certs-3.99
   (package
-    (inherit nss-certs)
-    (version "3.98")
+    (inherit nss-certs-3.88.1)
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -202,7 +202,21 @@ (define-public nss-certs-3.98
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "1kh98amfklrq6915n4mlbrcqghc3srm7rkzs9dkh21jwscrwqjgm"))))))
+                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+              ;; Create nss.pc and nss-config.
+              (patches (search-patches "nss-3.56-pkgconfig.patch"
+                                       "nss-getcwd-nonnull.patch"
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-Disable-library-signing.patch"))
+              (modules '((guix build utils)))
+              (snippet
+               '(begin
+                  ;; Delete the bundled copy of these libraries.
+                  (delete-file-recursively "nss/lib/zlib")
+                  (delete-file-recursively "nss/lib/sqlite")))))))
+
+(define-public nss-certs
+  nss-certs-3.99)
 
 (define-public le-certs
   (package
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 1/6] gnu: nss: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:03 +0000
Resent-Message-ID: <handler.40316.B40316.171464769126886 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769126886
          (code B ref 40316); Thu, 02 May 2024 11:02:03 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:31 +0000
Received: from localhost ([127.0.0.1]:43060 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBu-0006zU-R0
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:31 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:48440
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBn-0006yO-7a
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:27 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 265A6A63B31;
 Thu,  2 May 2024 13:01:00 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:45 +0100
Message-ID: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714646232.git.cdo@HIDDEN>
References: <cover.1714646232.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nss)[arguments]<#:make-flags>: When
cross-compilation, Add CROSS_COMPILE=1.
<#:phases>: When cross-compilation, Set env NATIVE_CC to gcc.

Change-Id: I5c9559a4b8cecf2cfc6c47d136d69c01a335faaf
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 7e9ed49ead..459e53bc1c 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -154,6 +154,9 @@ (define-public nss
                                             (#$(target-linux?) "linux")
                                             (else ""))))
                        #~())
+                #$@(if (%current-target-system)
+                       #~("CROSS_COMPILE=1")
+                       #~())
                 (string-append "NSPR_INCLUDE_DIR="
                                (search-input-directory %build-inputs
                                                        "include/nspr"))
@@ -175,6 +178,10 @@ (define-public nss
             (lambda _
               (setenv "CC" #$(cc-for-target))
               (setenv "CCC" #$(cxx-for-target))
+              ;; TODO: Set this unconditionally
+              #$@(if (%current-target-system)
+                     #~((setenv "NATIVE_CC" "gcc"))
+                     #~())
               ;; No VSX on powerpc-linux.
               #$@(if (target-ppc32?)
                      #~((setenv "NSS_DISABLE_CRYPTO_VSX" "1"))

base-commit: 9a47ef6182b6a36354699efbdbedca17f24cd9b8
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 5/6] gnu: nss: Attempt to disable FIPS.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:03 +0000
Resent-Message-ID: <handler.40316.B40316.171464769126893 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769126893
          (code B ref 40316); Thu, 02 May 2024 11:02:03 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:31 +0000
Received: from localhost ([127.0.0.1]:43062 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBv-0006zb-3m
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:31 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33032
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBq-0006yZ-2h
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:27 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id F3920A63B4B;
 Thu,  2 May 2024 13:01:00 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:49 +0100
Message-ID: <588f4c610bded4fb26108e40a5dffd4d8d12a026.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
References: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/nss.scm (nss): Define NSS_FIPS_DISABLED to disable FIPS. This is
required because FIPS relies on libraries signed with shlibsign, which is inherently
non-determinstic.

This patch is an incomplete attempt to get the tests to succeed by disabling
inapplicable tests, i.e. tests that depend on FIPS.

I have passed NSS_FIPS_DISABLED=1 to the Makefile however it seems to be
ignoring it for no logical reason.

Change-Id: Ic111c9f290719e82b3ff69589f585384f2e74baa
Change-Id: Id5a59840fa22c013982ab53826f7e66b40bb5227
---
 gnu/packages/nss.scm                          |  8 ++++-
 .../patches/nss-disable-shlibsign.patch       | 33 +++++++++++++++++++
 2 files changed, 40 insertions(+), 1 deletion(-)
 create mode 100644 gnu/packages/patches/nss-disable-shlibsign.patch

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 6795e59d28..08e4cb06ee 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -124,7 +124,8 @@ (define-public nss
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-                                       "nss-increase-test-timeout.patch"))
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-disable-shlibsign.patch"))
               (modules '((guix build utils)))
               (snippet
                '(begin
@@ -141,6 +142,9 @@ (define-public nss
                 (string-append "PREFIX=" #$output)
                 "NSDISTMODE=copy"
                 "NSS_USE_SYSTEM_SQLITE=1"
+                ;; No FIPS because it adds non-determinism.
+                "NSS_FIPS_DISABLED=1"
+                "NSS_NO_INIT_SUPPORT=1"
                 ;; The gtests fail to compile on riscv64.
                 ;; Skipping them doesn't affect the test suite.
                 #$@(if (target-riscv64?)
@@ -202,6 +206,8 @@ (define-public nss
                     (setenv "DOMSUF" "localdomain")
                     (setenv "USE_IP" "TRUE")
                     (setenv "IP_ADDRESS" "127.0.0.1")
+                    (setenv "NSS_CYCLES" "standard")
+                    (setenv "NSS_TESTS" "cipher lowhash libpkix cert dbtests tools sdr crmf smime ssl ocsp merge pkits ec gtests ssl_gtests policy")
 
                     ;; The "PayPalEE.cert" certificate expires every six months,
                     ;; leading to test failures:
diff --git a/gnu/packages/patches/nss-disable-shlibsign.patch b/gnu/packages/patches/nss-disable-shlibsign.patch
new file mode 100644
index 0000000000..591af76449
--- /dev/null
+++ b/gnu/packages/patches/nss-disable-shlibsign.patch
@@ -0,0 +1,33 @@
+From 85b7cf166687cbfaf3e3764ed1ea9bb3b9404ef0 Mon Sep 17 00:00:00 2001
+Message-ID: <85b7cf166687cbfaf3e3764ed1ea9bb3b9404ef0.1714589168.git.cdo@HIDDEN>
+From: Christina O'Donnell <cdo@HIDDEN>
+Date: Wed, 1 May 2024 19:44:09 +0100
+Subject: [PATCH] nss: Disable shlibsign.
+
+This is required as it generates a new key each time it is run through a
+non-deterministic process.
+---
+ nss/cmd/shlibsign/sign.sh | 6 ++++--
+ 1 file changed, 4 insertions(+), 2 deletions(-)
+
+diff --git a/nss/cmd/shlibsign/sign.sh b/nss/cmd/shlibsign/sign.sh
+index 5551c5f..baf1dea 100644
+--- a/nss/cmd/shlibsign/sign.sh
++++ b/nss/cmd/shlibsign/sign.sh
+@@ -45,7 +45,9 @@ WIN*)
+     export LIBRARY_PATH
+     ADDON_PATH=${1}/lib:${4}:$ADDON_PATH
+     export ADDON_PATH
+-    echo "${2}"/shlibsign -v -i "${5}"
+-    "${2}"/shlibsign -v -i "${5}"
++    # Disable lib signing as it generates its keys through a non-deterministic
++    # process.
++    # echo "${2}"/shlibsign -v -i "${5}"
++    # "${2}"/shlibsign -v -i "${5}"
+     ;;
+ esac
+
+base-commit: c9d74497ed5a5b0a0d3f7d609b1c15a3b810ee5b
+-- 
+2.41.0
+
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 6/6] gnu: nss: Disable FIPS in lowhashtest.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 11:02:04 +0000
Resent-Message-ID: <handler.40316.B40316.171464769226899 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171464769226899
          (code B ref 40316); Thu, 02 May 2024 11:02:04 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 11:01:32 +0000
Received: from localhost ([127.0.0.1]:43064 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2UBv-0006zk-Kz
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:31 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33038
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2UBq-0006yc-9I
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 07:01:27 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 357F5A63B4C;
 Thu,  2 May 2024 13:01:01 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 12:00:50 +0100
Message-ID: <bab329436b84740e67927d6ba48aae5d3bc23667.1714647502.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
References: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714647502.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

* gnu/packages/nss.scm (nss): Disable FIPS in lowhashtests.
This is required as FIPS is inherently non-deterministic, making the build no
longer reproducible.

Change-Id: I2b294530b017285d0949a1082abaaf3a8fe1f6b5
---
 gnu/packages/nss.scm                          |  3 +-
 .../nss-disable-fips-in-lowhashtest.patch     | 28 +++++++++++++++++++
 2 files changed, 30 insertions(+), 1 deletion(-)
 create mode 100644 gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 08e4cb06ee..02081c32e1 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -125,7 +125,8 @@ (define-public nss
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
                                        "nss-increase-test-timeout.patch"
-                                       "nss-disable-shlibsign.patch"))
+                                       "nss-disable-shlibsign.patch"
+                                       "nss-disable-fips-in-lowhashtest.patch"))
               (modules '((guix build utils)))
               (snippet
                '(begin
diff --git a/gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch b/gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch
new file mode 100644
index 0000000000..c8fc1e7e7a
--- /dev/null
+++ b/gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch
@@ -0,0 +1,28 @@
+From f32bd353c5b741d6da5811fd40681dda80799bfb Mon Sep 17 00:00:00 2001
+Message-ID: <f32bd353c5b741d6da5811fd40681dda80799bfb.1714591857.git.cdo@HIDDEN>
+From: Christina O'Donnell <cdo@HIDDEN>
+Date: Wed, 1 May 2024 20:30:15 +0100
+Subject: [PATCH] nss: Disable FIPS in lowhashtest.
+
+---
+ nss/tests/lowhash/lowhash.sh | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/nss/tests/lowhash/lowhash.sh b/nss/tests/lowhash/lowhash.sh
+index 2984b9b..9dcc89b 100755
+--- a/nss/tests/lowhash/lowhash.sh
++++ b/nss/tests/lowhash/lowhash.sh
+@@ -63,7 +63,7 @@ lowhash_test()
+   else
+     TESTS="MD5 SHA1 SHA224 SHA256 SHA384 SHA512"
+     OLD_MODE=`echo ${NSS_FIPS}`
+-    for fips_mode in 0 1; do
++    for fips_mode in 0; do
+       echo "lowhashtest with fips mode=${fips_mode}"
+       export NSS_FIPS=${fips_mode}
+       for TEST in ${TESTS}
+
+base-commit: 85b7cf166687cbfaf3e3764ed1ea9bb3b9404ef0
+-- 
+2.41.0
+
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v3 5/5] gnu: nss: Make reproducible.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:35:01 +0000
Resent-Message-ID: <handler.40316.B40316.171465325210005 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465325210005
          (code B ref 40316); Thu, 02 May 2024 12:35:01 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:34:12 +0000
Received: from localhost ([127.0.0.1]:43477 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Vdb-0002bI-LS
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:12 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33264
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VdX-0002an-Oq
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:09 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id DCCDBA63B4C;
 Thu,  2 May 2024 14:33:44 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 13:33:40 +0100
Message-ID: <eab5119196e0063e841d19752bb72a320e671f03.1714653076.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714653076.git.cdo@HIDDEN>
References: <cover.1714653076.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/nss.scm (nss): Define NSS_FIPS_DISABLED to disable FIPS. This is
required because FIPS relies on libraries signed with shlibsign, which is inherently
non-determinstic. This removes all non-determinism from this package.

Change-Id: Ic111c9f290719e82b3ff69589f585384f2e74baa
Change-Id: Id5a59840fa22c013982ab53826f7e66b40bb5227
Change-Id: I2b294530b017285d0949a1082abaaf3a8fe1f6b5
Change-Id: I5a52ef3db687a2fe538dfffd744a0fc8515b2cb1
---
 gnu/packages/nss.scm                          |  6 +++-
 .../nss-define-NSS_FIPS_DISABLED.patch        | 29 ++++++++++++++++
 .../patches/nss-disable-shlibsign.patch       | 33 +++++++++++++++++++
 3 files changed, 67 insertions(+), 1 deletion(-)
 create mode 100644 gnu/packages/patches/nss-define-NSS_FIPS_DISABLED.patch
 create mode 100644 gnu/packages/patches/nss-disable-shlibsign.patch

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 6795e59d28..404baaf550 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -124,7 +124,9 @@ (define-public nss
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
-                                       "nss-increase-test-timeout.patch"))
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-disable-shlibsign.patch"
+                                       "nss-define-NSS_FIPS_DISABLED.patch"))
               (modules '((guix build utils)))
               (snippet
                '(begin
@@ -202,6 +204,8 @@ (define-public nss
                     (setenv "DOMSUF" "localdomain")
                     (setenv "USE_IP" "TRUE")
                     (setenv "IP_ADDRESS" "127.0.0.1")
+                    (setenv "NSS_CYCLES" "standard")
+                    (setenv "NSS_TESTS" "cipher lowhash libpkix cert dbtests tools sdr crmf smime ssl ocsp merge pkits ec gtests ssl_gtests policy")
 
                     ;; The "PayPalEE.cert" certificate expires every six months,
                     ;; leading to test failures:
diff --git a/gnu/packages/patches/nss-define-NSS_FIPS_DISABLED.patch b/gnu/packages/patches/nss-define-NSS_FIPS_DISABLED.patch
new file mode 100644
index 0000000000..40ac66e365
--- /dev/null
+++ b/gnu/packages/patches/nss-define-NSS_FIPS_DISABLED.patch
@@ -0,0 +1,29 @@
+From e89a33daac982107421117ad95ae8443ef316079 Mon Sep 17 00:00:00 2001
+Message-ID: <e89a33daac982107421117ad95ae8443ef316079.1714649801.git.cdo@HIDDEN>
+From: Christina O'Donnell <cdo@HIDDEN>
+Date: Thu, 2 May 2024 12:34:40 +0100
+Subject: [PATCH] Define NSS_FIPS_DISABLED.
+
+Disable FIPS as it depends on shlibsign which is non-deterministic.
+---
+ nss/coreconf/config.mk | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/nss/coreconf/config.mk b/nss/coreconf/config.mk
+index 741bbee..e02e5d2 100644
+--- a/nss/coreconf/config.mk
++++ b/nss/coreconf/config.mk
+@@ -215,7 +215,7 @@ endif
+ # NSS_NO_INIT_SUPPORT is always defined on platforms that don't support
+ # executing the startup tests at library load time.
+ ifndef NSS_FORCE_FIPS
+-DEFINES += -DNSS_NO_INIT_SUPPORT
++DEFINES += -DNSS_NO_INIT_SUPPORT -DNSS_FIPS_DISABLED
+ endif
+ 
+ ifdef NSS_SEED_ONLY_DEV_URANDOM
+
+base-commit: 490a62da7d23b579fab71a84e2107f414187738d
+-- 
+2.41.0
+
diff --git a/gnu/packages/patches/nss-disable-shlibsign.patch b/gnu/packages/patches/nss-disable-shlibsign.patch
new file mode 100644
index 0000000000..591af76449
--- /dev/null
+++ b/gnu/packages/patches/nss-disable-shlibsign.patch
@@ -0,0 +1,33 @@
+From 85b7cf166687cbfaf3e3764ed1ea9bb3b9404ef0 Mon Sep 17 00:00:00 2001
+Message-ID: <85b7cf166687cbfaf3e3764ed1ea9bb3b9404ef0.1714589168.git.cdo@HIDDEN>
+From: Christina O'Donnell <cdo@HIDDEN>
+Date: Wed, 1 May 2024 19:44:09 +0100
+Subject: [PATCH] nss: Disable shlibsign.
+
+This is required as it generates a new key each time it is run through a
+non-deterministic process.
+---
+ nss/cmd/shlibsign/sign.sh | 6 ++++--
+ 1 file changed, 4 insertions(+), 2 deletions(-)
+
+diff --git a/nss/cmd/shlibsign/sign.sh b/nss/cmd/shlibsign/sign.sh
+index 5551c5f..baf1dea 100644
+--- a/nss/cmd/shlibsign/sign.sh
++++ b/nss/cmd/shlibsign/sign.sh
+@@ -45,7 +45,9 @@ WIN*)
+     export LIBRARY_PATH
+     ADDON_PATH=${1}/lib:${4}:$ADDON_PATH
+     export ADDON_PATH
+-    echo "${2}"/shlibsign -v -i "${5}"
+-    "${2}"/shlibsign -v -i "${5}"
++    # Disable lib signing as it generates its keys through a non-deterministic
++    # process.
++    # echo "${2}"/shlibsign -v -i "${5}"
++    # "${2}"/shlibsign -v -i "${5}"
+     ;;
+ esac
+
+base-commit: c9d74497ed5a5b0a0d3f7d609b1c15a3b810ee5b
+-- 
+2.41.0
+
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v3 3/5] gnu: nss: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:35:02 +0000
Resent-Message-ID: <handler.40316.B40316.171465325210012 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465325210012
          (code B ref 40316); Thu, 02 May 2024 12:35:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:34:12 +0000
Received: from localhost ([127.0.0.1]:43479 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Vdc-0002bK-6r
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:12 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33248
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VdX-0002al-Oy
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:09 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 80A9DA63B4A;
 Thu,  2 May 2024 14:33:44 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 13:33:38 +0100
Message-ID: <989784d90c983cde67b2d8732b16fcd22f84f8a5.1714653076.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714653076.git.cdo@HIDDEN>
References: <cover.1714653076.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/nss.scm (nss): Update to 3.99.

Change-Id: Iba6c9dc2956cc0febb62a1c471add899250fa489
---
 gnu/packages/nss.scm | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 0baafe2f37..6795e59d28 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -109,7 +109,7 @@ (define-public nss
     ;; IMPORTANT: Also update and test the nss-certs package, which duplicates
     ;; version and source to avoid a top-level variable reference & module
     ;; cycle.
-    (version "3.88.1")
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -120,7 +120,7 @@ (define-public nss
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+                "1g89ig40gfi1sp02gybvl2z818lawcnrqjzsws36cdva834c5maw"))
               ;; Create nss.pc and nss-config.
               (patches (search-patches "nss-3.56-pkgconfig.patch"
                                        "nss-getcwd-nonnull.patch"
@@ -207,7 +207,7 @@ (define-public nss
                     ;; leading to test failures:
                     ;; <https://bugzilla.mozilla.org/show_bug.cgi?id=609734>.  To
                     ;; work around that, set the time to roughly the release date.
-                    (invoke "faketime" "2022-11-01" "./nss/tests/all.sh"))
+                    (invoke "faketime" "2024-02-01" "./nss/tests/all.sh"))
                   (format #t "test suite not run~%"))))
           (replace 'install
             (lambda* (#:key outputs #:allow-other-keys)
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v3 4/5] gnu: nss-certs: Update to 3.99.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:35:02 +0000
Resent-Message-ID: <handler.40316.B40316.171465325310019 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: Christina O'Donnell <cdo@HIDDEN>, zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465325310019
          (code B ref 40316); Thu, 02 May 2024 12:35:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:34:13 +0000
Received: from localhost ([127.0.0.1]:43481 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Vdc-0002bR-Ji
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:12 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33252
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VdX-0002am-Sk
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:10 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id AEDC1A63B4B;
 Thu,  2 May 2024 14:33:44 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 13:33:39 +0100
Message-ID: <4468679c910db18313820a2cdd3166f529f4c78e.1714653076.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714653076.git.cdo@HIDDEN>
References: <cover.1714653076.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

gnu/packages/certs.scm (nss-certs-3.88.1): New variable.
(nss-certs-3.98): Update and rename to nss-certs-3.99.
(nss-certs): Update to 3.99.

Change-Id: I2f5f737d44d08497d4f5e0e07557be36d2f1f070
---
 gnu/packages/certs.scm | 24 +++++++++++++++++++-----
 1 file changed, 19 insertions(+), 5 deletions(-)

diff --git a/gnu/packages/certs.scm b/gnu/packages/certs.scm
index 7078c7c8d1..7aa96493fb 100644
--- a/gnu/packages/certs.scm
+++ b/gnu/packages/certs.scm
@@ -125,7 +125,7 @@ (define-public certdata2pem
 that was originally contributed to Debian.")
       (license license:isc))))
 
-(define-public nss-certs
+(define-public nss-certs-3.88.1
   (package
     (name "nss-certs")
     ;; XXX We used to refer to the nss package here, but that eventually caused
@@ -188,10 +188,10 @@ (define-public nss-certs
     (home-page "https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS")
     (license license:mpl2.0)))
 
-(define-public nss-certs-3.98
+(define-public nss-certs-3.99
   (package
-    (inherit nss-certs)
-    (version "3.98")
+    (inherit nss-certs-3.88.1)
+    (version "3.99")
     (source (origin
               (method url-fetch)
               (uri (let ((version-with-underscores
@@ -202,7 +202,21 @@ (define-public nss-certs-3.98
                       "nss-" version ".tar.gz")))
               (sha256
                (base32
-                "1kh98amfklrq6915n4mlbrcqghc3srm7rkzs9dkh21jwscrwqjgm"))))))
+                "15il9fsmixa1r4446zq1wl627sg0hz9h67w6kjxz273xz3nl7li7"))
+              ;; Create nss.pc and nss-config.
+              (patches (search-patches "nss-3.56-pkgconfig.patch"
+                                       "nss-getcwd-nonnull.patch"
+                                       "nss-increase-test-timeout.patch"
+                                       "nss-Disable-library-signing.patch"))
+              (modules '((guix build utils)))
+              (snippet
+               '(begin
+                  ;; Delete the bundled copy of these libraries.
+                  (delete-file-recursively "nss/lib/zlib")
+                  (delete-file-recursively "nss/lib/sqlite")))))))
+
+(define-public nss-certs
+  nss-certs-3.99)
 
 (define-public le-certs
   (package
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v3 1/5] gnu: nss: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:35:03 +0000
Resent-Message-ID: <handler.40316.B40316.171465325310026 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465325310026
          (code B ref 40316); Thu, 02 May 2024 12:35:03 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:34:13 +0000
Received: from localhost ([127.0.0.1]:43483 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Vdc-0002bY-Ut
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:13 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33222
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VdX-0002aj-P8
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:11 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 2DC04A63B48;
 Thu,  2 May 2024 14:33:44 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 13:33:36 +0100
Message-ID: <5ac99f62f8c43d2df3f64cd77ccbe0540dd82269.1714653076.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714653076.git.cdo@HIDDEN>
References: <cover.1714653076.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nss)[arguments]<#:make-flags>: When
cross-compilation, Add CROSS_COMPILE=1.
<#:phases>: When cross-compilation, Set env NATIVE_CC to gcc.

Change-Id: I5c9559a4b8cecf2cfc6c47d136d69c01a335faaf
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 7e9ed49ead..459e53bc1c 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -154,6 +154,9 @@ (define-public nss
                                             (#$(target-linux?) "linux")
                                             (else ""))))
                        #~())
+                #$@(if (%current-target-system)
+                       #~("CROSS_COMPILE=1")
+                       #~())
                 (string-append "NSPR_INCLUDE_DIR="
                                (search-input-directory %build-inputs
                                                        "include/nspr"))
@@ -175,6 +178,10 @@ (define-public nss
             (lambda _
               (setenv "CC" #$(cc-for-target))
               (setenv "CCC" #$(cxx-for-target))
+              ;; TODO: Set this unconditionally
+              #$@(if (%current-target-system)
+                     #~((setenv "NATIVE_CC" "gcc"))
+                     #~())
               ;; No VSX on powerpc-linux.
               #$@(if (target-ppc32?)
                      #~((setenv "NSS_DISABLE_CRYPTO_VSX" "1"))
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v3 2/5] gnu: nspr: Fix cross-compilation.
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:35:03 +0000
Resent-Message-ID: <handler.40316.B40316.171465325310032 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465325310032
          (code B ref 40316); Thu, 02 May 2024 12:35:03 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:34:13 +0000
Received: from localhost ([127.0.0.1]:43485 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2Vdd-0002bf-99
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:13 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:33236
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VdX-0002ak-P5
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:34:11 -0400
Received: from [86.132.246.87]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 57A65A63B49;
 Thu,  2 May 2024 14:33:44 +0200 (CEST)
From: Christina O'Donnell <cdo@HIDDEN>
Date: Thu,  2 May 2024 13:33:37 +0100
Message-ID: <1ea4518f8c971f69a4731da7559c7ab322ff77ed.1714653076.git.cdo@HIDDEN>
X-Mailer: git-send-email 2.41.0
In-Reply-To: <cover.1714653076.git.cdo@HIDDEN>
References: <cover.1714653076.git.cdo@HIDDEN>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
X-Spam-Score: -0.0 (/)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -1.0 (-)

From: Zheng Junjie <zhengjunjie@HIDDEN>

* gnu/packages/nss.scm (nspr)[arguments]<#:configure-flags>: When
cross-compilation, Add HOST_CC=gcc.

Change-Id: I337f217f153f8cc3a713906643d6fab9115056e9
Signed-off-by: Zheng Junjie <zhengjunjie@HIDDEN>
---
 gnu/packages/nss.scm | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/nss.scm b/gnu/packages/nss.scm
index 459e53bc1c..0baafe2f37 100644
--- a/gnu/packages/nss.scm
+++ b/gnu/packages/nss.scm
@@ -71,7 +71,10 @@ (define-public nspr
       #~(list "--disable-static"
               "--enable-64bit"
               (string-append "LDFLAGS=-Wl,-rpath="
-                             (assoc-ref %outputs "out") "/lib"))
+                             (assoc-ref %outputs "out") "/lib")
+              #$@(if (%current-target-system)
+                     #~("HOST_CC=gcc")
+                     #~()))
       ;; Use fixed timestamps for reproducibility.
       #:make-flags #~'("SH_DATE='1970-01-01 00:00:01'"
                        ;; This is epoch 1 in microseconds.
-- 
2.41.0

Message sent to bug-guix@HIDDEN:

X-Loop: help-debbugs@HIDDEN
Subject: bug#40316: [PATCH v2 0/6] Attempt to make nss reproducible
Resent-From: Christina O'Donnell <cdo@HIDDEN>
Original-Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
Resent-CC: bug-guix@HIDDEN
Resent-Date: Thu, 02 May 2024 12:44:02 +0000
Resent-Message-ID: <handler.40316.B40316.171465379510507 <at> debbugs.gnu.org>
Resent-Sender: help-debbugs@HIDDEN
X-GNU-PR-Message: followup 40316
X-GNU-PR-Package: guix
X-GNU-PR-Keywords: 
To: 40316 <at> debbugs.gnu.org
Cc: zhengjunjie@HIDDEN, vagrant@HIDDEN, steve@HIDDEN
Received: via spool by 40316-submit <at> debbugs.gnu.org id=B40316.171465379510507
          (code B ref 40316); Thu, 02 May 2024 12:44:02 +0000
Received: (at 40316) by debbugs.gnu.org; 2 May 2024 12:43:15 +0000
Received: from localhost ([127.0.0.1]:43540 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces <at> debbugs.gnu.org>)
	id 1s2VmM-0002jP-S7
	for submit <at> debbugs.gnu.org; Thu, 02 May 2024 08:43:15 -0400
Received: from vmi993448.contaboserver.net ([194.163.141.236]:44188
 helo=mutix.org) by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <cdo@HIDDEN>) id 1s2VmG-0002jH-7S
 for 40316 <at> debbugs.gnu.org; Thu, 02 May 2024 08:43:13 -0400
Received: from [192.168.1.172]
 (host81-152-149-149.range81-152.btcentralplus.com [81.152.149.149])
 (Authenticated sender: cdo)
 by mutix.org (Postfix) with ESMTPSA id 95D63A63B32;
 Thu,  2 May 2024 14:42:44 +0200 (CEST)
Message-ID: <3cdb10cf-2fc5-d042-5fb7-15037911340d@HIDDEN>
Date: Thu, 2 May 2024 13:42:44 +0100
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101
 Thunderbird/102.15.0
Content-Language: en-US
References: <cover.1714646232.git.cdo@HIDDEN>
From: Christina O'Donnell <cdo@HIDDEN>
In-Reply-To: <cover.1714646232.git.cdo@HIDDEN>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Spam-Score: -4.3 (----)
X-BeenThere: debbugs-submit <at> debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit <at> debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request <at> debbugs.gnu.org?subject=subscribe>
Errors-To: debbugs-submit-bounces <at> debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces <at> debbugs.gnu.org>
X-Spam-Score: -5.3 (-----)

Hi,

Please disregard my v2 patch. I now see where I went wrong and it's now 
working as expected on my machine.

I've sent an updated (v3) patch which builds successfully on x86_64, 
though I haven't yet tried cross-compiling or confirmed that it's still 
building reproducibly.

Sorry for the noise.

Christina

On 02/05/2024 12:00, Christina O'Donnell wrote:
> This patch series is an incomplete attempt to make nss reproducible. Currently
> this fails 4 tests due to NSS_FIPS_DISABLED not being respected.
>
> Christina O'Donnell (4):
>    gnu: nss: Update to 3.99.
>    gnu: nss-certs: Update to 3.99.
>    gnu: nss: Attempt to disable FIPS.
>    gnu: nss: Disable FIPS in lowhashtest.
>
> Zheng Junjie (2):
>    gnu: nss: Fix cross-compilation.
>    gnu: nspr: Fix cross-compilation.
>
>   gnu/packages/certs.scm                        | 24 +++++++++++---
>   gnu/packages/nss.scm                          | 27 ++++++++++++---
>   .../nss-disable-fips-in-lowhashtest.patch     | 28 ++++++++++++++++
>   .../patches/nss-disable-shlibsign.patch       | 33 +++++++++++++++++++
>   4 files changed, 102 insertions(+), 10 deletions(-)
>   create mode 100644 gnu/packages/patches/nss-disable-fips-in-lowhashtest.patch
>   create mode 100644 gnu/packages/patches/nss-disable-shlibsign.patch
>
>
> base-commit: 9a47ef6182b6a36354699efbdbedca17f24cd9b8

Last modified: Thu, 2 May 2024 12:45:02 UTC

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997 nCipher Corporation Ltd, 1994-97 Ian Jackson.