Diff of the two buildlogs:

--
--- b1/build.log	2024-11-11 07:12:03.053226275 +0000
+++ b2/build.log	2024-11-11 07:13:34.133988695 +0000
@@ -1,6 +1,6 @@
 I: pbuilder: network access will be disabled during build
-I: Current time: Sun Nov 10 19:09:24 -12 2024
-I: pbuilder-time-stamp: 1731308964
+I: Current time: Mon Dec 15 03:35:04 +14 2025
+I: pbuilder-time-stamp: 1765719304
 I: Building the build Environment
 I: extracting base tarball [/var/cache/pbuilder/unstable-reproducible-base.tgz]
 I: copying local configuration
@@ -27,54 +27,86 @@
 dpkg-source: info: unpacking golang-github-sigstore-fulcio_1.6.5-1.debian.tar.xz
 I: Not using root during the build.
 I: Installing the build-deps
-I: user script /srv/workspace/pbuilder/60394/tmp/hooks/D02_print_environment starting
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/D01_modify_environment starting
+debug: Running on ionos16-i386.
+I: Changing host+domainname to test build reproducibility
+I: Adding a custom variable just for the fun of it...
+I: Changing /bin/sh to bash
+'/bin/sh' -> '/bin/bash'
+lrwxrwxrwx 1 root root 9 Dec 14 13:35 /bin/sh -> /bin/bash
+I: Setting pbuilder2's login shell to /bin/bash
+I: Setting pbuilder2's GECOS to second user,second room,second work-phone,second home-phone,second other
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/D01_modify_environment finished
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/D02_print_environment starting
 I: set
-  BUILDDIR='/build/reproducible-path'
-  BUILDUSERGECOS='first user,first room,first work-phone,first home-phone,first other'
-  BUILDUSERNAME='pbuilder1'
-  BUILD_ARCH='i386'
-  DEBIAN_FRONTEND='noninteractive'
-  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=11 '
-  DISTRIBUTION='unstable'
-  HOME='/root'
-  HOST_ARCH='i386'
+  BASH=/bin/sh
+  BASHOPTS=checkwinsize:cmdhist:complete_fullquote:extquote:force_fignore:globasciiranges:globskipdots:hostcomplete:interactive_comments:patsub_replacement:progcomp:promptvars:sourcepath
+  BASH_ALIASES=()
+  BASH_ARGC=()
+  BASH_ARGV=()
+  BASH_CMDS=()
+  BASH_LINENO=([0]="12" [1]="0")
+  BASH_LOADABLES_PATH=/usr/local/lib/bash:/usr/lib/bash:/opt/local/lib/bash:/usr/pkg/lib/bash:/opt/pkg/lib/bash:.
+  BASH_SOURCE=([0]="/tmp/hooks/D02_print_environment" [1]="/tmp/hooks/D02_print_environment")
+  BASH_VERSINFO=([0]="5" [1]="2" [2]="32" [3]="1" [4]="release" [5]="i686-pc-linux-gnu")
+  BASH_VERSION='5.2.32(1)-release'
+  BUILDDIR=/build/reproducible-path
+  BUILDUSERGECOS='second user,second room,second work-phone,second home-phone,second other'
+  BUILDUSERNAME=pbuilder2
+  BUILD_ARCH=i386
+  DEBIAN_FRONTEND=noninteractive
+  DEB_BUILD_OPTIONS='buildinfo=+all reproducible=+all parallel=21 '
+  DIRSTACK=()
+  DISTRIBUTION=unstable
+  EUID=0
+  FUNCNAME=([0]="Echo" [1]="main")
+  GROUPS=()
+  HOME=/root
+  HOSTNAME=i-capture-the-hostname
+  HOSTTYPE=i686
+  HOST_ARCH=i386
   IFS=' 	
   '
-  INVOCATION_ID='654274c44c694d1ea27709c240fa3084'
-  LANG='C'
-  LANGUAGE='en_US:en'
-  LC_ALL='C'
-  LD_LIBRARY_PATH='/usr/lib/libeatmydata'
-  LD_PRELOAD='libeatmydata.so'
-  MAIL='/var/mail/root'
-  OPTIND='1'
-  PATH='/usr/sbin:/usr/bin:/sbin:/bin:/usr/games'
-  PBCURRENTCOMMANDLINEOPERATION='build'
-  PBUILDER_OPERATION='build'
-  PBUILDER_PKGDATADIR='/usr/share/pbuilder'
-  PBUILDER_PKGLIBDIR='/usr/lib/pbuilder'
-  PBUILDER_SYSCONFDIR='/etc'
-  PPID='60394'
-  PS1='# '
-  PS2='> '
+  INVOCATION_ID=16a88ed098b7445e9b1f91cc0ea755db
+  LANG=C
+  LANGUAGE=de_CH:de
+  LC_ALL=C
+  LD_LIBRARY_PATH=/usr/lib/libeatmydata
+  LD_PRELOAD=libeatmydata.so
+  MACHTYPE=i686-pc-linux-gnu
+  MAIL=/var/mail/root
+  OPTERR=1
+  OPTIND=1
+  OSTYPE=linux-gnu
+  PATH=/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path
+  PBCURRENTCOMMANDLINEOPERATION=build
+  PBUILDER_OPERATION=build
+  PBUILDER_PKGDATADIR=/usr/share/pbuilder
+  PBUILDER_PKGLIBDIR=/usr/lib/pbuilder
+  PBUILDER_SYSCONFDIR=/etc
+  PIPESTATUS=([0]="0")
+  POSIXLY_CORRECT=y
+  PPID=22415
   PS4='+ '
-  PWD='/'
-  SHELL='/bin/bash'
-  SHLVL='2'
-  SUDO_COMMAND='/usr/bin/timeout -k 18.1h 18h /usr/bin/ionice -c 3 /usr/bin/nice /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.tAo63gXL/pbuilderrc_lmBj --distribution unstable --hookdir /etc/pbuilder/first-build-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.tAo63gXL/b1 --logfile b1/build.log golang-github-sigstore-fulcio_1.6.5-1.dsc'
-  SUDO_GID='112'
-  SUDO_UID='107'
-  SUDO_USER='jenkins'
-  TERM='unknown'
-  TZ='/usr/share/zoneinfo/Etc/GMT+12'
-  USER='root'
-  _='/usr/bin/systemd-run'
-  http_proxy='http://46.16.76.132:3128'
+  PWD=/
+  SHELL=/bin/bash
+  SHELLOPTS=braceexpand:errexit:hashall:interactive-comments:posix
+  SHLVL=3
+  SUDO_COMMAND='/usr/bin/timeout -k 24.1h 24h /usr/bin/ionice -c 3 /usr/bin/nice -n 11 /usr/bin/unshare --uts -- /usr/sbin/pbuilder --build --configfile /srv/reproducible-results/rbuild-debian/r-b-build.tAo63gXL/pbuilderrc_yd2q --distribution unstable --hookdir /etc/pbuilder/rebuild-hooks --debbuildopts -b --basetgz /var/cache/pbuilder/unstable-reproducible-base.tgz --buildresult /srv/reproducible-results/rbuild-debian/r-b-build.tAo63gXL/b2 --logfile b2/build.log golang-github-sigstore-fulcio_1.6.5-1.dsc'
+  SUDO_GID=112
+  SUDO_UID=107
+  SUDO_USER=jenkins
+  TERM=unknown
+  TZ=/usr/share/zoneinfo/Etc/GMT-14
+  UID=0
+  USER=root
+  _='I: set'
+  http_proxy=http://213.165.73.152:3128
 I: uname -a
-  Linux ionos2-i386 6.1.0-27-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.115-1 (2024-11-01) x86_64 GNU/Linux
+  Linux i-capture-the-hostname 6.1.0-27-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.115-1 (2024-11-01) x86_64 GNU/Linux
 I: ls -l /bin
-  lrwxrwxrwx 1 root root 7 Aug  4 21:30 /bin -> usr/bin
-I: user script /srv/workspace/pbuilder/60394/tmp/hooks/D02_print_environment finished
+  lrwxrwxrwx 1 root root 7 Aug  4  2024 /bin -> usr/bin
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/D02_print_environment finished
  -> Attempting to satisfy build-dependencies
  -> Creating pbuilder-satisfydepends-dummy package
 Package: pbuilder-satisfydepends-dummy
@@ -544,7 +576,7 @@
 Get: 418 http://deb.debian.org/debian unstable/main i386 golang-github-sigstore-sigstore-dev all 1.8.10-2 [135 kB]
 Get: 419 http://deb.debian.org/debian unstable/main i386 golang-github-thales-e-security-pool-dev all 0.0.2-4 [10.4 kB]
 Get: 420 http://deb.debian.org/debian unstable/main i386 golang-github-thalesignite-crypto11-dev all 1.2.5-2 [37.2 kB]
-Fetched 208 MB in 5s (40.1 MB/s)
+Fetched 208 MB in 4s (50.3 MB/s)
 debconf: delaying package configuration, since apt-utils is not installed
 Selecting previously unselected package golang-golang-x-sys-dev.
 (Reading database ... 
(Reading database ... 5%
(Reading database ... 10%
(Reading database ... 15%
(Reading database ... 20%
(Reading database ... 25%
(Reading database ... 30%
(Reading database ... 35%
(Reading database ... 40%
(Reading database ... 45%
(Reading database ... 50%
(Reading database ... 55%
(Reading database ... 60%
(Reading database ... 65%
(Reading database ... 70%
(Reading database ... 75%
(Reading database ... 80%
(Reading database ... 85%
(Reading database ... 90%
(Reading database ... 95%
(Reading database ... 100%
(Reading database ... 19955 files and directories currently installed.)
@@ -1897,8 +1929,8 @@
 Setting up tzdata (2024b-3) ...
 
 Current default time zone: 'Etc/UTC'
-Local time is now:      Mon Nov 11 07:10:53 UTC 2024.
-Universal Time is now:  Mon Nov 11 07:10:53 UTC 2024.
+Local time is now:      Sun Dec 14 13:35:57 UTC 2025.
+Universal Time is now:  Sun Dec 14 13:35:57 UTC 2025.
 Run 'dpkg-reconfigure tzdata' if you wish to change it.
 
 Setting up golang-github-coreos-go-semver-dev (0.3.0-1) ...
@@ -2245,7 +2277,11 @@
 Building tag database...
  -> Finished parsing the build-deps
 I: Building the package
-I: Running cd /build/reproducible-path/golang-github-sigstore-fulcio-1.6.5/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games" HOME="/nonexistent/first-build" dpkg-genchanges -S  > ../golang-github-sigstore-fulcio_1.6.5-1_source.changes
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/A99_set_merged_usr starting
+Not re-configuring usrmerge for unstable
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/A99_set_merged_usr finished
+hostname: Name or service not known
+I: Running cd /build/reproducible-path/golang-github-sigstore-fulcio-1.6.5/ && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-buildpackage -us -uc -b && env PATH="/usr/sbin:/usr/bin:/sbin:/bin:/usr/games:/i/capture/the/path" HOME="/nonexistent/second-build" dpkg-genchanges -S  > ../golang-github-sigstore-fulcio_1.6.5-1_source.changes
 dpkg-buildpackage: info: source package golang-github-sigstore-fulcio
 dpkg-buildpackage: info: source version 1.6.5-1
 dpkg-buildpackage: info: source distribution unstable
@@ -2263,143 +2299,143 @@
    dh_autoreconf -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_configure -O--builddirectory=_build -O--buildsystem=golang
    dh_auto_build -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go install -trimpath -v -p 11 github.com/sigstore/fulcio/pkg/api github.com/sigstore/fulcio/pkg/certificate
-internal/unsafeheader
-internal/goexperiment
-internal/goarch
-internal/profilerecord
+	cd _build && go install -trimpath -v -p 21 github.com/sigstore/fulcio/pkg/api github.com/sigstore/fulcio/pkg/certificate
 internal/coverage/rtcov
-internal/goos
-internal/byteorder
 internal/godebugs
-internal/race
-runtime/internal/math
-runtime/internal/sys
-unicode
-unicode/utf8
-math/bits
 internal/itoa
 cmp
-encoding
 internal/asan
-internal/runtime/syscall
-sync/atomic
+internal/race
+internal/unsafeheader
+unicode/utf8
+encoding
+math/bits
+internal/byteorder
+internal/profilerecord
+internal/goos
+internal/msan
 internal/cpu
+sync/atomic
+internal/goexperiment
 internal/runtime/atomic
-internal/chacha8rand
+unicode
+internal/goarch
+internal/runtime/syscall
 unicode/utf16
 container/list
-internal/msan
-internal/abi
-math
 crypto/internal/alias
 crypto/internal/boring/sig
 vendor/golang.org/x/crypto/cryptobyte/asn1
 vendor/golang.org/x/crypto/internal/alias
 internal/nettrace
 log/internal
+runtime/internal/math
+internal/abi
+runtime/internal/sys
+internal/chacha8rand
+math
 internal/bytealg
 internal/runtime/exithook
 internal/stringslite
 runtime
 iter
-sync
+internal/weak
 crypto/subtle
 internal/reflectlite
-internal/weak
+sync
 maps
 slices
-internal/testlog
 internal/singleflight
+internal/testlog
 internal/bisect
-errors
-sort
+runtime/cgo
 internal/godebug
+errors
 internal/oserror
+io
 path
+sort
 crypto/internal/edwards25519/field
-io
+math/rand
+strconv
 vendor/golang.org/x/net/dns/dnsmessage
 math/rand/v2
-strconv
 crypto/internal/nistec/fiat
-syscall
-math/rand
-runtime/cgo
 crypto/internal/edwards25519
-internal/concurrent
-bytes
-strings
+syscall
 hash
 crypto/internal/randutil
-unique
+bytes
+strings
+internal/concurrent
 hash/crc32
-crypto
+unique
+vendor/golang.org/x/text/transform
+crypto/cipher
 crypto/rc4
+crypto
 net/netip
 reflect
-crypto/cipher
-vendor/golang.org/x/text/transform
-crypto/md5
 net/http/internal/ascii
 bufio
-crypto/internal/boring
+crypto/md5
 crypto/des
+crypto/internal/boring
 crypto/aes
-internal/syscall/execenv
+crypto/hmac
 crypto/sha1
 crypto/sha512
-crypto/hmac
-internal/syscall/unix
-time
 crypto/sha256
 vendor/golang.org/x/crypto/hkdf
+time
+internal/syscall/execenv
+internal/syscall/unix
 crypto/internal/nistec
 crypto/ecdh
-internal/fmtsort
-encoding/binary
-io/fs
 context
+io/fs
 internal/poll
+encoding/binary
+internal/fmtsort
 internal/filepathlite
-vendor/golang.org/x/crypto/chacha20
-encoding/base64
 vendor/golang.org/x/crypto/internal/poly1305
+encoding/base64
+vendor/golang.org/x/crypto/chacha20
+os
 vendor/golang.org/x/crypto/chacha20poly1305
 encoding/pem
-os
-vendor/golang.org/x/sys/cpu
 path/filepath
 fmt
+vendor/golang.org/x/sys/cpu
+net
 vendor/golang.org/x/crypto/sha3
 log
+vendor/golang.org/x/net/http2/hpack
+net/http/internal
 mime/quotedprintable
 encoding/hex
+compress/flate
 mime
-vendor/golang.org/x/net/http2/hpack
 net/url
 encoding/json
-compress/flate
 math/big
 vendor/golang.org/x/text/unicode/norm
-net/http/internal
 vendor/golang.org/x/text/unicode/bidi
 compress/gzip
-net
 vendor/golang.org/x/text/secure/bidirule
 vendor/golang.org/x/net/idna
-crypto/rand
 crypto/internal/boring/bbig
+crypto/rand
 crypto/dsa
-crypto/internal/bigmod
 crypto/elliptic
+crypto/internal/bigmod
 encoding/asn1
 crypto/ed25519
 crypto/internal/hpke
 crypto/internal/mlkem768
 crypto/rsa
-vendor/golang.org/x/crypto/cryptobyte
 crypto/x509/pkix
+vendor/golang.org/x/crypto/cryptobyte
 github.com/sigstore/fulcio/pkg/certificate
 crypto/ecdsa
 vendor/golang.org/x/net/http/httpproxy
@@ -2412,13 +2448,13 @@
 net/http
 github.com/sigstore/fulcio/pkg/api
    dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
-	cd _build && go test -vet=off -v -p 11 github.com/sigstore/fulcio/pkg/api github.com/sigstore/fulcio/pkg/certificate
+	cd _build && go test -vet=off -v -p 21 github.com/sigstore/fulcio/pkg/api github.com/sigstore/fulcio/pkg/certificate
 === RUN   TestUserAgentOption
 --- PASS: TestUserAgentOption (0.00s)
 === RUN   TestTimeoutOption
 --- PASS: TestTimeoutOption (1.00s)
 PASS
-ok  	github.com/sigstore/fulcio/pkg/api	1.013s
+ok  	github.com/sigstore/fulcio/pkg/api	1.007s
 === RUN   TestExtensions
 === RUN   TestExtensions/Missing_issuer_extension_leads_to_render_error
 === RUN   TestExtensions/complete_extensions_list_should_create_all_extensions_with_correct_OIDs
@@ -2428,7 +2464,7 @@
 === RUN   TestParseDERString
 --- PASS: TestParseDERString (0.00s)
 PASS
-ok  	github.com/sigstore/fulcio/pkg/certificate	0.008s
+ok  	github.com/sigstore/fulcio/pkg/certificate	0.004s
    create-stamp debian/debhelper-build-stamp
    dh_testroot -O--builddirectory=_build -O--buildsystem=golang
    dh_prep -O--builddirectory=_build -O--buildsystem=golang
@@ -2455,12 +2491,14 @@
 dpkg-buildpackage: info: binary-only upload (no source included)
 dpkg-genchanges: info: including full source code in upload
 I: copying local configuration
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/B01_cleanup starting
+I: user script /srv/workspace/pbuilder/22415/tmp/hooks/B01_cleanup finished
 I: unmounting dev/ptmx filesystem
 I: unmounting dev/pts filesystem
 I: unmounting dev/shm filesystem
 I: unmounting proc filesystem
 I: unmounting sys filesystem
 I: cleaning the build env 
-I: removing directory /srv/workspace/pbuilder/60394 and its subdirectories
-I: Current time: Sun Nov 10 19:12:02 -12 2024
-I: pbuilder-time-stamp: 1731309122
+I: removing directory /srv/workspace/pbuilder/22415 and its subdirectories
+I: Current time: Mon Dec 15 03:36:32 +14 2025
+I: pbuilder-time-stamp: 1765719392