This PR ensures that the file permissions in macOS zip archives are independent of the user's umask value.
Fixes #30815.
<!--e57a25ab6845829454e8d69fc972939a-->
The following sections might be updated with supplementary metadata relevant to reviewers and maintainers.
<!--006a51241073e994b41acfe9ec718e94-->
For detailed information about the code coverage, see the test coverage report.
<!--021abf342d371248e50ceaed478a90ca-->
See the guideline for information on the review process.
If your review is incorrectly listed, please react with 👎 to this comment and the bot will ignore it on the next update.
apple builds:
a4840ae0607332cb728e228023de4e77fbe2303d0d85df433ee39e9f2ab4e2e7 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/SHA256SUMS.part
93ba6f8d2f3a849f7f2aa380a9996fc3685cebe1c09aea18a976ce7421622c45 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin-unsigned.tar.gz
47319f231c1fd4a74bfd52f7a62f012353df77762b46d9cc04c2f00001365da2 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin-unsigned.zip
6eeb6dc6f35a6c87503f757b2ad9f64d8d7788941981c75a983450b00ee17bda guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin.tar.gz
e33843c4ab7a7f69aa1043c95c350b4d67ed3b431b27fec9b23e14cdfd876214 guix-build-31f4d1ce83a5/output/dist-archive/bitcoin-31f4d1ce83a5.tar.gz
dd88b34f66df456085443567f019fce9eed10fce1175631a8ab109528e634a2b guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/SHA256SUMS.part
f2ebea81dc92fe3e4c8f96a1ef319d549bad755d4baae259f400f8ad4f0a8e9f guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin-unsigned.tar.gz
789b7639e24b15bf9b05e6075cadb437fae9b5da0cac40d209b2c549e8c42adc guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin-unsigned.zip
f49aaf33f471ab153ed3a032b6f059d746ccda8a1c5c9f5568f469b9d490c01b guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin.tar.gz
Concept ACK (will do guix builds)
Output on both build machines (guix x86_64 and debian arm64) (matches @TheCharlatan):
a4840ae0607332cb728e228023de4e77fbe2303d0d85df433ee39e9f2ab4e2e7 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/SHA256SUMS.part
93ba6f8d2f3a849f7f2aa380a9996fc3685cebe1c09aea18a976ce7421622c45 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin-unsigned.tar.gz
47319f231c1fd4a74bfd52f7a62f012353df77762b46d9cc04c2f00001365da2 guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin-unsigned.zip
6eeb6dc6f35a6c87503f757b2ad9f64d8d7788941981c75a983450b00ee17bda guix-build-31f4d1ce83a5/output/arm64-apple-darwin/bitcoin-31f4d1ce83a5-arm64-apple-darwin.tar.gz
e33843c4ab7a7f69aa1043c95c350b4d67ed3b431b27fec9b23e14cdfd876214 guix-build-31f4d1ce83a5/output/dist-archive/bitcoin-31f4d1ce83a5.tar.gz
dd88b34f66df456085443567f019fce9eed10fce1175631a8ab109528e634a2b guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/SHA256SUMS.part
f2ebea81dc92fe3e4c8f96a1ef319d549bad755d4baae259f400f8ad4f0a8e9f guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin-unsigned.tar.gz
789b7639e24b15bf9b05e6075cadb437fae9b5da0cac40d209b2c549e8c42adc guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin-unsigned.zip
f49aaf33f471ab153ed3a032b6f059d746ccda8a1c5c9f5568f469b9d490c01b guix-build-31f4d1ce83a5/output/x86_64-apple-darwin/bitcoin-31f4d1ce83a5-x86_64-apple-darwin.tar.gz
Concept ACK - looks like switching this to use CMakes default permissions, rather than ours, does fix the issue, but I guess could use more discussion given: #30815 (comment).
This change fixes reproducibility issue with macOS Guix builds.
Guix build (aarch64):
8eeb195889318631934b31746dcbd04b26c2312e2aa29dbd7be9de9581a8b805 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/SHA256SUMS.part
05c10866f6972aa58a379935dbc4eb39a8e2abc54a27aa4fa2ce06a7443593ba guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.tar.gz
f81ec9368bf068a373ec88428becdef08533e8984ad95a3b017f7f1a8cbbb5b1 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.zip
cb7b4febe1ccfa7ece2cefaf36dc022a433747045ff0545d9f9fea2f930187ca guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin.tar.gz
5b64fd3adb8b1f8541636517d7a2014323197753ae22b4f1596769a8c2208b90 guix-build-5ba03e7d35e1/output/dist-archive/bitcoin-5ba03e7d35e1.tar.gz
386c997bb64b79a59f06533c007f66b3739d640ef01b4faea23a2429bf876643 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/SHA256SUMS.part
50c4336a4904121aea252e4197f830bdaa1ca08d34ce35a22167725f686cd084 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.tar.gz
48b4331dc224bd578490b9576943fe41ae0e1ee725e3bd779578772ad744090d guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.zip
291b31673f14c98ab7641cb25a996b98663acae7c83fc2904f974d5e0357714f guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin.tar.gz
My Guix build (aarch64, for both umask=0002 and umask=0022):
8eeb195889318631934b31746dcbd04b26c2312e2aa29dbd7be9de9581a8b805 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/SHA256SUMS.part
05c10866f6972aa58a379935dbc4eb39a8e2abc54a27aa4fa2ce06a7443593ba guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.tar.gz
f81ec9368bf068a373ec88428becdef08533e8984ad95a3b017f7f1a8cbbb5b1 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.zip
cb7b4febe1ccfa7ece2cefaf36dc022a433747045ff0545d9f9fea2f930187ca guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin.tar.gz
5b64fd3adb8b1f8541636517d7a2014323197753ae22b4f1596769a8c2208b90 guix-build-5ba03e7d35e1/output/dist-archive/bitcoin-5ba03e7d35e1.tar.gz
386c997bb64b79a59f06533c007f66b3739d640ef01b4faea23a2429bf876643 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/SHA256SUMS.part
50c4336a4904121aea252e4197f830bdaa1ca08d34ce35a22167725f686cd084 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.tar.gz
48b4331dc224bd578490b9576943fe41ae0e1ee725e3bd779578772ad744090d guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.zip
291b31673f14c98ab7641cb25a996b98663acae7c83fc2904f974d5e0357714f guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin.tar.gz
UPD. Same hashes for x86_64.
Guix build (aarch64):
8eeb195889318631934b31746dcbd04b26c2312e2aa29dbd7be9de9581a8b805 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/SHA256SUMS.part
05c10866f6972aa58a379935dbc4eb39a8e2abc54a27aa4fa2ce06a7443593ba guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.tar.gz
f81ec9368bf068a373ec88428becdef08533e8984ad95a3b017f7f1a8cbbb5b1 guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin-unsigned.zip
cb7b4febe1ccfa7ece2cefaf36dc022a433747045ff0545d9f9fea2f930187ca guix-build-5ba03e7d35e1/output/arm64-apple-darwin/bitcoin-5ba03e7d35e1-arm64-apple-darwin.tar.gz
5b64fd3adb8b1f8541636517d7a2014323197753ae22b4f1596769a8c2208b90 guix-build-5ba03e7d35e1/output/dist-archive/bitcoin-5ba03e7d35e1.tar.gz
386c997bb64b79a59f06533c007f66b3739d640ef01b4faea23a2429bf876643 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/SHA256SUMS.part
50c4336a4904121aea252e4197f830bdaa1ca08d34ce35a22167725f686cd084 guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.tar.gz
48b4331dc224bd578490b9576943fe41ae0e1ee725e3bd779578772ad744090d guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin-unsigned.zip
291b31673f14c98ab7641cb25a996b98663acae7c83fc2904f974d5e0357714f guix-build-5ba03e7d35e1/output/x86_64-apple-darwin/bitcoin-5ba03e7d35e1-x86_64-apple-darwin.tar.gz
Concept ACK - looks like switching this to use CMakes default permissions, rather than ours, does fix the issue, but I guess could use more discussion given: #30815 (comment).
Continuation of the discussion:
ACK 5ba03e7d35e1b47ba864c9ae3c94af97cd3ae10b - I'm going to merge this now so we return to usable (comparable) guix builds.