Diff of the two buildlogs: -- --- b1/build.log 2025-02-07 12:25:34.201790277 +0000 +++ b2/build.log 2025-02-07 12:27:28.264629299 +0000 @@ -1,6 +1,6 @@ I: pbuilder: network access will be disabled during build -I: Current time: Fri Feb 7 00:23:39 -12 2025 -I: pbuilder-time-stamp: 1738931019 +I: Current time: Fri Mar 13 08:48:36 +14 2026 +I: pbuilder-time-stamp: 1773341316 I: Building the build Environment I: extracting base tarball [/var/cache/pbuilder/trixie-reproducible-base.tgz] I: copying local configuration @@ -22,51 +22,83 @@ dpkg-source: info: unpacking ruby-sanitize_7.0.0-1.debian.tar.xz I: Not using root during the build. I: Installing the build-deps -I: user script /srv/workspace/pbuilder/3327401/tmp/hooks/D02_print_environment starting +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/D01_modify_environment starting +debug: Running on infom02-amd64. +I: Changing host+domainname to test build reproducibility +I: Adding a custom variable just for the fun of it... +I: Changing /bin/sh to bash +'/bin/sh' -> '/bin/bash' +lrwxrwxrwx 1 root root 9 Mar 12 18:48 /bin/sh -> /bin/bash +I: Setting pbuilder2's login shell to /bin/bash +I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/D01_modify_environment finished +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/D02_print_environment starting I: set - BUILDDIR='/build/reproducible-path' - BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other' - BUILDUSERNAME='pbuilder1' - BUILD_ARCH='amd64' - DEBIAN_FRONTEND='noninteractive' + BASH=/bin/sh + BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath + BASH_ALIASES=() + BASH_ARGC=() + BASH_ARGV=() + BASH_CMDS=() + BASH_LINENO=([0]="12" [1]="0") + BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:. + BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment") + BASH_VERSINFO=([0]="5" [1]="2" [2]="37" [3]="1" [4]="release" [5]="x86_64-pc-linux-gnu") + BASH_VERSION='5.2.37(1)-release' + BUILDDIR=/build/reproducible-path + BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other' + BUILDUSERNAME=pbuilder2 + BUILD_ARCH=amd64 + DEBIAN_FRONTEND=noninteractive DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=12 ' - DISTRIBUTION='trixie' - HOME='/root' - HOST_ARCH='amd64' + DIRSTACK=() + DISTRIBUTION=trixie + EUID=0 + FUNCNAME=([0]="Echo" [1]="main") + GROUPS=() + HOME=/root + HOSTNAME=i-capture-the-hostname + HOSTTYPE=x86_64 + HOST_ARCH=amd64 IFS=' ' - INVOCATION_ID='04d9eea8472f4d26ae2f1546375ed875' - LANG='C' - LANGUAGE='en_US:en' - LC_ALL='C' - MAIL='/var/mail/root' - OPTIND='1' - PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games' - PBCURRENTCOMMANDLINEOPERATION='build' - PBUILDER_OPERATION='build' - PBUILDER_PKGDATADIR='/usr/share/pbuilder' - PBUILDER_PKGLIBDIR='/usr/lib/pbuilder' - PBUILDER_SYSCONFDIR='/etc' - PPID='3327401' - PS1='# ' - PS2='> ' + INVOCATION_ID=ef9139aee0374663be2b437658e53026 + LANG=C + LANGUAGE=et_EE:et + LC_ALL=C + MACHTYPE=x86_64-pc-linux-gnu + MAIL=/var/mail/root + OPTERR=1 + OPTIND=1 + OSTYPE=linux-gnu + PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path + PBCURRENTCOMMANDLINEOPERATION=build + PBUILDER_OPERATION=build + PBUILDER_PKGDATADIR=/usr/share/pbuilder + PBUILDER_PKGLIBDIR=/usr/lib/pbuilder + PBUILDER_SYSCONFDIR=/etc + PIPESTATUS=([0]="0") + POSIXLY_CORRECT=y + PPID=2071821 PS4='+ ' - PWD='/' - SHELL='/bin/bash' - SHLVL='2' - SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.i1xt4qco/pbuilderrc_8n8V --distribution trixie --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.i1xt4qco/b1 --logfile b1/build.log ruby-sanitize_7.0.0-1.dsc' - SUDO_GID='109' - SUDO_UID='104' - SUDO_USER='jenkins' - TERM='unknown' - TZ='/usr/share/zoneinfo/Etc/GMT+12' - USER='root' - _='/usr/bin/systemd-run' + PWD=/ + SHELL=/bin/bash + SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix + SHLVL=3 + SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.i1xt4qco/pbuilderrc_mwFh --distribution trixie --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/trixie-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.i1xt4qco/b2 --logfile b2/build.log ruby-sanitize_7.0.0-1.dsc' + SUDO_GID=109 + SUDO_UID=104 + SUDO_USER=jenkins + TERM=unknown + TZ=/usr/share/zoneinfo/Etc/GMT-14 + UID=0 + USER=root + _='I: set' I: uname -a - Linux infom01-amd64 6.1.0-30-cloud-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.124-1 (2025-01-12) x86_64 GNU/Linux + Linux i-capture-the-hostname 6.12.9+bpo-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.12.9-1~bpo12+1 (2025-01-19) x86_64 GNU/Linux I: ls -l /bin - lrwxrwxrwx 1 root root 7 Nov 22 14:40 /bin -> usr/bin -I: user script /srv/workspace/pbuilder/3327401/tmp/hooks/D02_print_environment finished + lrwxrwxrwx 1 root root 7 Nov 22 2024 /bin -> usr/bin +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/D02_print_environment finished -> Attempting to satisfy build-dependencies -> Creating pbuilder-satisfydepends-dummy package Package: pbuilder-satisfydepends-dummy @@ -251,7 +283,7 @@ Get: 137 http://deb.debian.org/debian trixie/main amd64 ruby-mini-portile2 all 2.8.7-1 [21.3 kB] Get: 138 http://deb.debian.org/debian trixie/main amd64 ruby-pkg-config all 1.5.9-1 [8584 B] Get: 139 http://deb.debian.org/debian trixie/main amd64 ruby-nokogiri amd64 1.18.2+dfsg-1 [271 kB] -Fetched 56.0 MB in 0s (116 MB/s) +Fetched 56.0 MB in 1s (44.7 MB/s) Preconfiguring packages ... Selecting previously unselected package libpython3.13-minimal:amd64. (Reading database ... (Reading database ... 5% (Reading database ... 10% (Reading database ... 15% (Reading database ... 20% (Reading database ... 25% (Reading database ... 30% (Reading database ... 35% (Reading database ... 40% (Reading database ... 45% (Reading database ... 50% (Reading database ... 55% (Reading database ... 60% (Reading database ... 65% (Reading database ... 70% (Reading database ... 75% (Reading database ... 80% (Reading database ... 85% (Reading database ... 90% (Reading database ... 95% (Reading database ... 100% (Reading database ... 19842 files and directories currently installed.) @@ -715,8 +747,8 @@ Setting up tzdata (2024b-6) ... Current default time zone: 'Etc/UTC' -Local time is now: Fri Feb 7 12:24:45 UTC 2025. -Universal Time is now: Fri Feb 7 12:24:45 UTC 2025. +Local time is now: Thu Mar 12 18:49:59 UTC 2026. +Universal Time is now: Thu Mar 12 18:49:59 UTC 2026. Run 'dpkg-reconfigure tzdata' if you wish to change it. Setting up autotools-dev (20220109.1) ... @@ -842,7 +874,11 @@ Building tag database... -> Finished parsing the build-deps I: Building the package -I: Running cd /build/reproducible-path/ruby-sanitize-7.0.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S > ../ruby-sanitize_7.0.0-1_source.changes +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/A99_set_merged_usr starting +Not re-configuring usrmerge for trixie +I: user script /srv/workspace/pbuilder/2071821/tmp/hooks/A99_set_merged_usr finished +hostname: Name or service not known +I: Running cd /build/reproducible-path/ruby-sanitize-7.0.0/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S > ../ruby-sanitize_7.0.0-1_source.changes dpkg-buildpackage: info: source package ruby-sanitize dpkg-buildpackage: info: source version 7.0.0-1 dpkg-buildpackage: info: source distribution unstable @@ -875,7 +911,7 @@ │ ruby-sanitize: Installing files and building extensions for ruby3.1 │ └──────────────────────────────────────────────────────────────────────────────┘ -/usr/bin/ruby3.1 -S gem build --config-file /dev/null --verbose /tmp/d20250207-3335620-qs8yn5/gemspec +/usr/bin/ruby3.1 -S gem build --config-file /dev/null --verbose /tmp/d20260313-2079695-ksznqr/gemspec WARNING: expected RubyGems version 3.6.3, was 3.3.15 WARNING: open-ended dependency on nokogiri (>= 1.16.8) is not recommended if nokogiri is semantically versioned, use: @@ -885,7 +921,7 @@ Name: sanitize Version: 7.0.0 File: sanitize-7.0.0.gem -/usr/bin/ruby3.1 -S gem install --config-file /dev/null --verbose --local --verbose --no-document --ignore-dependencies --install-dir debian/ruby-sanitize/usr/share/rubygems-integration/all /tmp/d20250207-3335620-qs8yn5/sanitize-7.0.0.gem +/usr/bin/ruby3.1 -S gem install --config-file /dev/null --verbose --local --verbose --no-document --ignore-dependencies --install-dir debian/ruby-sanitize/usr/share/rubygems-integration/all /tmp/d20260313-2079695-ksznqr/sanitize-7.0.0.gem /build/reproducible-path/ruby-sanitize-7.0.0/debian/ruby-sanitize/usr/share/rubygems-integration/all/gems/sanitize-7.0.0/lib/sanitize.rb /build/reproducible-path/ruby-sanitize-7.0.0/debian/ruby-sanitize/usr/share/rubygems-integration/all/gems/sanitize-7.0.0/lib/sanitize/config.rb /build/reproducible-path/ruby-sanitize-7.0.0/debian/ruby-sanitize/usr/share/rubygems-integration/all/gems/sanitize-7.0.0/lib/sanitize/config/basic.rb @@ -929,263 +965,263 @@ RUBYLIB=. GEM_PATH=/build/reproducible-path/ruby-sanitize-7.0.0/debian/ruby-sanitize/usr/share/rubygems-integration/all:/build/reproducible-path/ruby-sanitize-7.0.0/debian/.debhelper/generated/_source/home/.local/share/gem/ruby/3.1.0:/var/lib/gems/3.1.0:/usr/local/lib/ruby/gems/3.1.0:/usr/lib/ruby/gems/3.1.0:/usr/lib/x86_64-linux-gnu/ruby/gems/3.1.0:/usr/share/rubygems-integration/3.1.0:/usr/share/rubygems-integration/all:/usr/lib/x86_64-linux-gnu/rubygems-integration/3.1.0 ruby3.1 -S rake --rakelibdir /gem2deb-nonexistent -f debian/ruby-tests.rake /usr/bin/ruby3.1 -w -I"test" /usr/share/rubygems-integration/all/gems/rake-13.2.1/lib/rake/rake_test_loader.rb "test/test_clean_comment.rb" "test/test_clean_css.rb" "test/test_clean_doctype.rb" "test/test_clean_element.rb" "test/test_config.rb" "test/test_malicious_css.rb" "test/test_malicious_html.rb" "test/test_parser.rb" "test/test_sanitize.rb" "test/test_sanitize_css.rb" "test/test_transformers.rb" -v -Run options: -v --seed 62836 +Run options: -v --seed 44370 # Running: -Sanitize::instance methods::#node!#test_0001_should sanitize a Nokogiri::XML::Node = 0.00 s = . -Sanitize::instance methods::#document#test_0003_should not choke on frozen documents = 0.00 s = . +Sanitize::class methods::.document#test_0001_should sanitize an HTML document with the given config = 0.00 s = . +Sanitize::initializer#test_0001_should not modify a transformers array in the given config = 0.00 s = . +Sanitize::instance methods::#document::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH::and :max_tree_depth of -1 is supplied in :parser_options#test_0001_does not raise an ArgumentError exception = 0.01 s = . Sanitize::instance methods::#document#test_0001_should sanitize an HTML document = 0.00 s = . -Sanitize::instance methods::#document#test_0005_should strip control characters (except ASCII whitespace) = 0.00 s = . +Sanitize::instance methods::#document#test_0002_should not modify the input string = 0.00 s = . Sanitize::instance methods::#document#test_0006_should strip non-characters = 0.00 s = . Sanitize::instance methods::#document#test_0004_should normalize newlines = 0.00 s = . -Sanitize::instance methods::#document#test_0002_should not modify the input string = 0.00 s = . +Sanitize::instance methods::#document#test_0005_should strip control characters (except ASCII whitespace) = 0.00 s = . +Sanitize::instance methods::#document#test_0003_should not choke on frozen documents = 0.00 s = . Sanitize::instance methods::#fragment::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH#test_0001_raises an ArgumentError exception = 0.00 s = . Sanitize::instance methods::#node!::when the given node is a document and isn't allowlisted#test_0001_should raise a Sanitize::Error = 0.00 s = . -Sanitize::instance methods::#document::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH#test_0001_raises an ArgumentError exception = 0.00 s = . -Sanitize::initializer#test_0001_should not modify a transformers array in the given config = 0.00 s = . -Sanitize::instance methods::#fragment::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH::and :max_tree_depth of -1 is supplied in :parser_options#test_0001_does not raise an ArgumentError exception = 0.01 s = . -Sanitize::instance methods::#document::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH::and :max_tree_depth of -1 is supplied in :parser_options#test_0001_does not raise an ArgumentError exception = 0.00 s = . +Sanitize::instance methods::#node!#test_0001_should sanitize a Nokogiri::XML::Node = 0.00 s = . Sanitize::class methods::.fragment#test_0001_should sanitize an HTML fragment with the given config = 0.00 s = . -Sanitize::instance methods::#fragment#test_0001_should sanitize an HTML fragment = 0.00 s = . -Sanitize::instance methods::#fragment#test_0003_should not choke on fragments containing or = 0.00 s = . -Sanitize::instance methods::#fragment#test_0004_should not choke on frozen fragments = 0.00 s = . +Sanitize::instance methods::#fragment::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH::and :max_tree_depth of -1 is supplied in :parser_options#test_0001_does not raise an ArgumentError exception = 0.01 s = . +Sanitize::class methods::.node!#test_0001_should sanitize a Nokogiri::XML::Node with the given config = 0.00 s = . +Sanitize::instance methods::#document::when html body exceeds Nokogiri::Gumbo::DEFAULT_MAX_TREE_DEPTH#test_0001_raises an ArgumentError exception = 0.00 s = . Sanitize::instance methods::#fragment#test_0006_should strip control characters (except ASCII whitespace) = 0.00 s = . -Sanitize::instance methods::#fragment#test_0002_should not modify the input string = 0.00 s = . Sanitize::instance methods::#fragment#test_0007_should strip non-characters = 0.00 s = . +Sanitize::instance methods::#fragment#test_0004_should not choke on frozen fragments = 0.00 s = . +Sanitize::instance methods::#fragment#test_0001_should sanitize an HTML fragment = 0.00 s = . +Sanitize::instance methods::#fragment#test_0002_should not modify the input string = 0.00 s = . +Sanitize::instance methods::#fragment#test_0003_should not choke on fragments containing or = 0.00 s = . Sanitize::instance methods::#fragment#test_0005_should normalize newlines = 0.00 s = . -Sanitize::class methods::.node!#test_0001_should sanitize a Nokogiri::XML::Node with the given config = 0.00 s = . -Sanitize::class methods::.document#test_0001_should sanitize an HTML document with the given config = 0.00 s = . +Sanitize::CSS::functionality:::at_rules#test_0001_should remove blockless at-rules that aren't allowlisted = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0014_should clean basic HTML = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0027_should not allow protocol-based JS injection: long hex encoding = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0019_should not allow protocol-based JS injection: simple, spaces before = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0021_should not allow protocol-based JS injection: simple, spaces before and after = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0005_should not preserve the content of removed `math` elements = Sanitize::Transformers::CleanElement::Default config#test_0006_should not preserve the content of removed `noembed` elements = 0.00 s = . +0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0016_should clean unclosed HTML = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0007_should not preserve the content of removed `noframes` elements = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0028_should not allow protocol-based JS injection: hex encoding without semicolons = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0001_should remove non-allowlisted elements, leaving safe contents behind = 0.00 s = . +Sanitize::CSS::functionality:::at_rules#test_0002_preserves allowlisted @container at-rules = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0020_should not allow protocol-based JS injection: simple, spaces after = Sanitize::Transformers::CleanElement::Default config#test_0024_should not allow protocol-based JS injection: long UTF-8 encoding = Sanitize::Transformers::CleanElement::Default config#test_0026_should not allow protocol-based JS injection: hex encoding = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0030_should not allow protocol-based JS injection: invalid URL char = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0025_should not allow protocol-based JS injection: long UTF-8 encoding without semicolons = Sanitize::Transformers::CleanElement::Default config#test_0008_should not preserve the content of removed `noscript` elements = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0022_should not allow protocol-based JS injection: preceding colon = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0029_should not allow protocol-based JS injection: null char = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0004_should not preserve the content of removed `iframe` elements = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0012_should not preserve the content of removed `svg` elements = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0003_should not choke on several instances of the same element in a row = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0015_should clean malformed HTML = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0002_should surround the contents of :whitespace_elements with space characters when removing the element = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0031_should not allow protocol-based JS injection: spaces and entities = 0.00 s = . +Config::.freeze_config#test_0001_should deeply freeze and return a configuration Hash = 0.00 s = . +Sanitize::Transformers::CleanElement::Default config#test_0017_should clean malicious HTML = 0.00 s = . +Malicious HTML::