nixpkgs/.github/ISSUE_TEMPLATE/unreproducible_package.md

---
name: Unreproducible package
about: A package that does not produce a bit-by-bit reproducible result each time it is built
title: ''
labels: [ '0.kind: enhancement', '6.topic: reproducible builds' ]
assignees: ''

---

Building this package twice does not produce the bit-by-bit identical result each time, making it harder to detect CI breaches. You can read more about this at https://reproducible-builds.org/ .

Fixing bit-by-bit reproducibility also has additional advantages, such as avoiding hard-to-reproduce bugs, making content-addressed storage more effective and reducing rebuilds in such systems.

### Steps To Reproduce

```
nix-build '<nixpkgs>' -A ... --check --keep-failed
```

You can use `diffoscope` to analyze the differences in the output of the two builds.

To view the build log of the build that produced the artifact in the binary cache:

```
nix-store --read-log $(nix-instantiate '<nixpkgs>' -A ...)
```

### Additional context

(please share the relevant fragment of the diffoscope output here,
and any additional analysis you may have done)
Add issue template for unreproducible packages It's nice to be able to easily create an issue for an unreproducibility, but my additional motivation for creating this issue template is that it makes it easier for non-maintainers to create issues that are correctly tagged '8.topic: reproducible builds'. 2022-09-24 09:39:47 +02:00			`---`
			`name: Unreproducible package`
			`about: A package that does not produce a bit-by-bit reproducible result each time it is built`
			`title: ''`
Fix issue template for unreproducible packages 2023-01-07 11:17:58 +01:00			`labels: [ '0.kind: enhancement', '6.topic: reproducible builds' ]`
Add issue template for unreproducible packages It's nice to be able to easily create an issue for an unreproducibility, but my additional motivation for creating this issue template is that it makes it easier for non-maintainers to create issues that are correctly tagged '8.topic: reproducible builds'. 2022-09-24 09:39:47 +02:00			`assignees: ''`

			`---`

			`Building this package twice does not produce the bit-by-bit identical result each time, making it harder to detect CI breaches. You can read more about this at https://reproducible-builds.org/ .`

			`Fixing bit-by-bit reproducibility also has additional advantages, such as avoiding hard-to-reproduce bugs, making content-addressed storage more effective and reducing rebuilds in such systems.`

			`### Steps To Reproduce`

			```
			`nix-build '<nixpkgs>' -A ... --check --keep-failed`
			```

			You can use `diffoscope` to analyze the differences in the output of the two builds.

			`To view the build log of the build that produced the artifact in the binary cache:`

			```
			`nix-store --read-log $(nix-instantiate '<nixpkgs>' -A ...)`
			```

			`### Additional context`

			`(please share the relevant fragment of the diffoscope output here,`
			`and any additional analysis you may have done)`