Diff of the two buildlogs:

--
--- b1/build.log	2023-04-13 17:58:18.557114425 +0000
+++ b2/build.log	2023-04-13 18:00:34.567076403 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Wed May 15 12:18:06 -12 2024
-I: pbuilder-time-stamp: 1715818686
+I: Current time: Fri Apr 14 07:58:21 +14 2023
+I: pbuilder-time-stamp: 1681408701
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/bookworm-reproducible-base.tgz]
 I: copying local configuration
@@ -16,7 +16,7 @@
 I: copying [./fscrypt_0.3.3.orig.tar.xz]
 I: copying [./fscrypt_0.3.3-1.debian.tar.xz]
 I: Extracting source
-gpgv: Signature made Mon Mar  7 09:50:54 2022 -12
+gpgv: Signature made Tue Mar  8 11:50:54 2022 +14
 gpgv:                using RSA key 561AD585EED766921BA8DD96D65861883E014DB9
 gpgv:                issuer "paride@debian.org"
 gpgv: Can't check signature: No public key
@@ -26,11 +26,20 @@
 dpkg-source: info: unpacking fscrypt_0.3.3-1.debian.tar.xz
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/18073/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/D01_modify_environment starting
+debug: Running on codethink16-arm64.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+lrwxrwxrwx 1 root root 4 Jan  6 03:20 /bin/sh -> dash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/D02_print_environment starting
 I: set
   BUILDDIR='/build'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME='pbuilder2'
   BUILD_ARCH='arm64'
   DEBIAN_FRONTEND='noninteractive'
   DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=8'
@@ -40,38 +49,38 @@
   IFS=' 	
   '
   LANG='C'
-  LANGUAGE='en_US:en'
+  LANGUAGE='nl_BE:nl'
   LC_ALL='C'
   MAIL='/var/mail/root'
   OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
+  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path'
   PBCURRENTCOMMANDLINEOPERATION='build'
   PBUILDER_OPERATION='build'
   PBUILDER_PKGDATADIR='/usr/share/pbuilder'
   PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
   PBUILDER_SYSCONFDIR='/etc'
-  PPID='18073'
+  PPID='9450'
   PS1='# '
   PS2='> '
   PS4='+ '
   PWD='/'
   SHELL='/bin/bash'
   SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.Iag3kxnT/pbuilderrc_sjyS --distribution bookworm --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.Iag3kxnT/b1 --logfile b1/build.log fscrypt_0.3.3-1.dsc'
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.Iag3kxnT/pbuilderrc_XL7J --distribution bookworm --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/bookworm-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.Iag3kxnT/b2 --logfile b2/build.log --extrapackages usrmerge fscrypt_0.3.3-1.dsc'
   SUDO_GID='117'
   SUDO_UID='110'
   SUDO_USER='jenkins'
   TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
+  TZ='/usr/share/zoneinfo/Etc/GMT-14'
   USER='root'
   USERNAME='root'
   _='/usr/bin/systemd-run'
   http_proxy='http://192.168.101.16:3128'
 I: uname -a
-  Linux codethink9-arm64 4.15.0-208-generic #220-Ubuntu SMP Mon Mar 20 14:28:12 UTC 2023 aarch64 GNU/Linux
+  Linux i-capture-the-hostname 4.15.0-208-generic #220-Ubuntu SMP Mon Mar 20 14:28:12 UTC 2023 aarch64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 May 14 04:47 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/18073/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Apr 12 00:26 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -185,7 +194,7 @@
 Get: 56 http://deb.debian.org/debian bookworm/main arm64 protoc-gen-go-1-3 arm64 1.3.5-4+b3 [1034 kB]
 Get: 57 http://deb.debian.org/debian bookworm/main arm64 golang-goprotobuf-dev arm64 1.3.5-4+b3 [3432 B]
 Get: 58 http://deb.debian.org/debian bookworm/main arm64 libpam0g-dev arm64 1.5.2-6 [148 kB]
-Fetched 105 MB in 2s (54.1 MB/s)
+Fetched 105 MB in 2s (58.6 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package sensible-utils.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19616 files and directories currently installed.)
@@ -431,8 +440,17 @@
 Writing extended state information...
 Building tag database...
  -> Finished parsing the build-deps
+Reading package lists...
+Building dependency tree...
+Reading state information...
+usrmerge is already the newest version (35).
+0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
 I: Building the package
-I: Running cd /build/fscrypt-0.3.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../fscrypt_0.3.3-1_source.changes
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/A99_set_merged_usr starting
+Re-configuring usrmerge...
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/A99_set_merged_usr finished
+hostname: Temporary failure in name resolution
+I: Running cd /build/fscrypt-0.3.3/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../fscrypt_0.3.3-1_source.changes
 dpkg-buildpackage: info: source package fscrypt
 dpkg-buildpackage: info: source version 0.3.3-1
 dpkg-buildpackage: info: source distribution unstable
@@ -454,19 +472,19 @@
 # Build the command line tool
 DH_GOLANG_BUILDPKG=github.com/google/fscrypt/cmd/... dh_auto_build -O--buildsystem=golang -- --ldflags '-s -w -X "main.version=v0.3.3" -extldflags "-Wl,-z,relro -Wl,-z,now"'
 	cd obj-aarch64-linux-gnu && go install -trimpath -v -p 8 --ldflags "-s -w -X \"main.version=v0.3.3\" -extldflags \"-Wl,-z,relro -Wl,-z,now\"" github.com/google/fscrypt/cmd/fscrypt
-internal/unsafeheader
 internal/goarch
+internal/unsafeheader
 internal/goexperiment
-internal/goos
 internal/race
+runtime/internal/syscall
+internal/goos
 internal/cpu
 unicode
-unicode/utf8
-sync/atomic
-runtime/internal/syscall
 internal/abi
+sync/atomic
 runtime/internal/math
 runtime/internal/sys
+unicode/utf8
 encoding
 internal/itoa
 math/bits
@@ -478,8 +496,8 @@
 internal/bytealg
 math
 runtime
-sync
 internal/reflectlite
+sync
 internal/testlog
 runtime/cgo
 errors
@@ -491,15 +509,15 @@
 path
 syscall
 bytes
+strings
 hash
 text/tabwriter
-strings
 crypto
-encoding/base32
 reflect
+encoding/base32
+bufio
 html
 regexp/syntax
-bufio
 internal/syscall/unix
 internal/syscall/execenv
 time
@@ -513,9 +531,9 @@
 crypto/cipher
 golang.org/x/crypto/blake2b
 golang.org/x/sys/unix
+fmt
 io/ioutil
 path/filepath
-fmt
 golang.org/x/crypto/argon2
 crypto/internal/boring
 crypto/hmac
@@ -523,8 +541,8 @@
 crypto/sha512
 crypto/aes
 golang.org/x/crypto/hkdf
-flag
 log
+flag
 encoding/hex
 github.com/pkg/errors
 encoding/json
@@ -533,8 +551,8 @@
 net/url
 text/template/parse
 golang.org/x/term
-github.com/golang/protobuf/proto
 text/template
+github.com/golang/protobuf/proto
 github.com/cpuguy83/go-md2man/v2/md2man
 github.com/urfave/cli
 github.com/google/fscrypt/util
@@ -544,35 +562,35 @@
 github.com/google/fscrypt/metadata
 github.com/google/fscrypt/crypto
 github.com/google/fscrypt/filesystem
-github.com/google/fscrypt/pam
 github.com/google/fscrypt/keyring
+github.com/google/fscrypt/pam
 github.com/google/fscrypt/actions
 github.com/google/fscrypt/cmd/fscrypt
 # Build the PAM module (C shared library)
 DH_GOLANG_BUILDPKG=github.com/google/fscrypt/pam_fscrypt/... dh_auto_build -O--buildsystem=golang -- --ldflags '-s -w -X "main.version=v0.3.3" -extldflags "-Wl,-z,relro -Wl,-z,now"' -buildmode=c-shared
 	cd obj-aarch64-linux-gnu && go install -trimpath -v -p 8 --ldflags "-s -w -X \"main.version=v0.3.3\" -extldflags \"-Wl,-z,relro -Wl,-z,now\"" -buildmode=c-shared github.com/google/fscrypt/pam_fscrypt
-internal/unsafeheader
-internal/goarch
 internal/goos
+internal/goarch
 internal/goexperiment
-math/bits
 internal/itoa
-internal/cpu
+internal/unsafeheader
+math/bits
 runtime/internal/syscall
-unicode/utf8
-internal/race
 internal/abi
+internal/cpu
 runtime/internal/math
 runtime/internal/sys
+unicode/utf8
+internal/race
 sync/atomic
-unicode
 encoding
+unicode
 unicode/utf16
 crypto/internal/subtle
-math
 crypto/subtle
 crypto/internal/boring/sig
 internal/nettrace
+math
 runtime/internal/atomic
 internal/bytealg
 runtime
@@ -583,16 +601,16 @@
 runtime/cgo
 errors
 sort
-internal/oserror
-io
 strconv
+io
+internal/oserror
 internal/safefilepath
-vendor/golang.org/x/net/dns/dnsmessage
 path
+vendor/golang.org/x/net/dns/dnsmessage
 syscall
-bytes
 strings
 hash
+bytes
 crypto
 encoding/base32
 reflect
@@ -600,36 +618,36 @@
 time
 internal/syscall/execenv
 internal/syscall/unix
-internal/poll
 io/fs
 context
-os
+internal/poll
 internal/fmtsort
 encoding/binary
+os
 encoding/base64
 crypto/cipher
 golang.org/x/crypto/blake2b
 golang.org/x/sys/unix
-io/ioutil
-internal/godebug
 golang.org/x/crypto/argon2
-fmt
-path/filepath
-internal/intern
 crypto/internal/boring
-net/netip
-crypto/aes
 crypto/hmac
 crypto/sha256
+crypto/aes
 crypto/sha512
 golang.org/x/crypto/hkdf
-net
-encoding/json
-encoding/hex
-github.com/pkg/errors
+fmt
+io/ioutil
+path/filepath
+internal/godebug
+internal/intern
+net/netip
 log
-runtime/debug
+github.com/pkg/errors
+encoding/hex
+encoding/json
 os/user
+runtime/debug
+net
 github.com/golang/protobuf/proto
 github.com/google/fscrypt/util
 github.com/google/fscrypt/security
@@ -639,8 +657,8 @@
 github.com/google/fscrypt/crypto
 github.com/google/fscrypt/filesystem
 log/syslog
-github.com/google/fscrypt/keyring
 github.com/google/fscrypt/pam
+github.com/google/fscrypt/keyring
 github.com/google/fscrypt/actions
 github.com/google/fscrypt/pam_fscrypt
 # Workaround for https://github.com/golang/go/issues/24253
@@ -650,7 +668,7 @@
 # One thing we (hopefully) know: there is only one .a file. Its path is also difficult
 # to predict. Let's try to write a command that will always rename it to pam_fscrypt.so.
 ls -l obj-*/pkg/*/github.com/google/fscrypt/*.a
--rw-r--r-- 1 pbuilder1 pbuilder1 3863712 May 15 12:20 obj-aarch64-linux-gnu/pkg/linux_arm64_shared/github.com/google/fscrypt/pam_fscrypt.a
+-rw-r--r-- 1 pbuilder2 pbuilder2 3863712 Apr 14 07:59 obj-aarch64-linux-gnu/pkg/linux_arm64_shared/github.com/google/fscrypt/pam_fscrypt.a
 SOPATH=$(dirname obj-*/pkg/*/github.com/google/fscrypt/*.a) && mv -v $SOPATH/*.a $SOPATH/pam_fscrypt.so
 renamed 'obj-aarch64-linux-gnu/pkg/linux_arm64_shared/github.com/google/fscrypt/pam_fscrypt.a' -> 'obj-aarch64-linux-gnu/pkg/linux_arm64_shared/github.com/google/fscrypt/pam_fscrypt.so'
 make[1]: Leaving directory '/build/fscrypt-0.3.3'
@@ -664,11 +682,11 @@
 DH_GOLANG_EXCLUDES="keyring filesystem" dh_auto_test
 	cd obj-aarch64-linux-gnu && go test -vet=off -v -p 8 github.com/google/fscrypt/actions github.com/google/fscrypt/cmd/fscrypt github.com/google/fscrypt/crypto github.com/google/fscrypt/metadata github.com/google/fscrypt/pam github.com/google/fscrypt/pam_fscrypt github.com/google/fscrypt/security github.com/google/fscrypt/util
 skipping integration test
-ok  	github.com/google/fscrypt/actions	0.039s
+ok  	github.com/google/fscrypt/actions	0.008s
 === RUN   TestTrivial
 --- PASS: TestTrivial (0.00s)
 PASS
-ok  	github.com/google/fscrypt/cmd/fscrypt	0.028s
+ok  	github.com/google/fscrypt/cmd/fscrypt	0.009s
 === RUN   TestMakeKeys
 --- PASS: TestMakeKeys (0.00s)
 === RUN   TestWipe
@@ -684,11 +702,11 @@
 === RUN   TestKeyResize
 --- PASS: TestKeyResize (0.00s)
 === RUN   TestKeyLargeResize
---- PASS: TestKeyLargeResize (0.01s)
+--- PASS: TestKeyLargeResize (0.00s)
 === RUN   TestRandomKeyGen
 --- PASS: TestRandomKeyGen (0.00s)
 === RUN   TestBigKeyGen
---- PASS: TestBigKeyGen (0.27s)
+--- PASS: TestBigKeyGen (0.25s)
 === RUN   TestKeysAndOutputsDistinct
 --- PASS: TestKeysAndOutputsDistinct (0.00s)
 === RUN   TestWrapSucceeds
@@ -698,7 +716,7 @@
 === RUN   TestRandomWrapUnwrapEqual
 --- PASS: TestRandomWrapUnwrapEqual (0.00s)
 === RUN   TestDifferentLengthSecretKey
---- PASS: TestDifferentLengthSecretKey (0.04s)
+--- PASS: TestDifferentLengthSecretKey (0.06s)
 === RUN   TestWrongWrappingKeyLength
 --- PASS: TestWrongWrappingKeyLength (0.00s)
 === RUN   TestWrongUnwrappingKeyLength
@@ -716,9 +734,9 @@
 === RUN   TestComputeKeyDescriptorBadVersion
 --- PASS: TestComputeKeyDescriptorBadVersion (0.00s)
 === RUN   TestPassphraseHashing
---- PASS: TestPassphraseHashing (0.36s)
+--- PASS: TestPassphraseHashing (0.45s)
 === RUN   TestGetRandomRecoveryString
-    recovery_test.go:103: 4W2J3BAD-MTUELQVO-NIGSRY22-ANCFKLNJ-YAP5QSZJ-RGSEXAKP-7SZHAXPT-NO7GZK7C-7AYOCCFS-D4UUKAF6-ZLHMLKYP-TQENDANK-QERM6NI=
+    recovery_test.go:103: YF3EMPJQ-2KDRFAUR-TZHMYWBU-IHKJ3EGP-WLBLUE4N-3GWXM32B-ZL7I555W-76ZIFTJP-5TTHTNAA-F44JEA7Q-ELEQRLZH-R4HZYXHS-ZXKRBDA=
 --- PASS: TestGetRandomRecoveryString (0.00s)
 === RUN   TestFakeSecretKey
 --- PASS: TestFakeSecretKey (0.00s)
@@ -733,7 +751,7 @@
 === RUN   TestBadEndCharacterError
 --- PASS: TestBadEndCharacterError (0.00s)
 PASS
-ok  	github.com/google/fscrypt/crypto	0.734s
+ok  	github.com/google/fscrypt/crypto	0.793s
 === RUN   TestWrite
     config_test.go:64: json encoded config:
         {
@@ -781,19 +799,19 @@
     policy_test.go:57: skipping integration test
 --- SKIP: TestSetV2PolicyNoKey (0.00s)
 PASS
-ok  	github.com/google/fscrypt/metadata	0.022s
+ok  	github.com/google/fscrypt/metadata	0.034s
 === RUN   TestTrivial
 --- PASS: TestTrivial (0.00s)
 PASS
-ok  	github.com/google/fscrypt/pam	0.042s
+ok  	github.com/google/fscrypt/pam	0.009s
 === RUN   TestParseArgsEmpty
 --- PASS: TestParseArgsEmpty (0.00s)
 PASS
-ok  	github.com/google/fscrypt/pam_fscrypt	0.022s
+ok  	github.com/google/fscrypt/pam_fscrypt	0.032s
 === RUN   TestTrivial
 --- PASS: TestTrivial (0.00s)
 PASS
-ok  	github.com/google/fscrypt/security	0.018s
+ok  	github.com/google/fscrypt/security	0.017s
 === RUN   TestPtrOffset
 --- PASS: TestPtrOffset (0.00s)
 === RUN   TestByteSlice
@@ -801,15 +819,15 @@
 === RUN   TestPointerSlice
 --- PASS: TestPointerSlice (0.00s)
 === RUN   TestNeverErrorPanic
-2024/05/15 12:20:42 NeverError() check failed: system error: Hello
+2023/04/14 08:00:07 NeverError() check failed: system error: Hello
 --- PASS: TestNeverErrorPanic (0.00s)
 === RUN   TestNeverErrorNoPanic
 --- PASS: TestNeverErrorNoPanic (0.00s)
 === RUN   TestIsKernelVersionAtLeast
-2024/05/15 12:20:42 Kernel version is 4.15.0-208-generic
+2023/04/14 08:00:08 Kernel version is 4.15.0-208-generic
 --- PASS: TestIsKernelVersionAtLeast (0.00s)
 PASS
-ok  	github.com/google/fscrypt/util	0.051s
+ok  	github.com/google/fscrypt/util	0.026s
 make[1]: Leaving directory '/build/fscrypt-0.3.3'
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--buildsystem=golang
@@ -858,12 +876,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: including full source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/9450/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/18073 and its subdirectories
-I: Current time: Wed May 15 12:21:17 -12 2024
-I: pbuilder-time-stamp: 1715818877
+I: removing directory /srv/workspace/pbuilder/9450 and its subdirectories
+I: Current time: Fri Apr 14 08:00:33 +14 2023
+I: pbuilder-time-stamp: 1681408833