Groups > linux.debian.maint.python > #8414

Re: CPython hash randomization makes some Python packages unreproducible

Path	csiph.com!aioe.org!bofh.it!news.nic.it!robomod
From	Barry Warsaw <barry@debian.org>
Newsgroups	linux.debian.maint.python
Subject	Re: CPython hash randomization makes some Python packages unreproducible
Date	Mon, 11 Apr 2016 20:20:03 +0200
Message-ID	<rmOBl-1DU-45@gated-at.bofh.it> (permalink)
References	<rm4RQ-8vg-11@gated-at.bofh.it> <rm5Ee-LN-5@gated-at.bofh.it>
X-Original-To	debian-python@lists.debian.org
X-Mailbox-Line	From debian-python-request@lists.debian.org Mon Apr 11 18:16:03 2016
Old-Return-Path	<barry@debian.org>
X-Amavis-Spam-Status	No, score=-6.9 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, FOURLA=0.1, LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
X-Policyd-Weight	NOT_IN_SBL_XBL_SPAMHAUS=-1.5 BL_NJABL=SKIP(-1.5) CL_IP_EQ_HELO_IP=-2 (check from: .debian. - helo: .mail.wooz. - helo-domain: .wooz.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=0; rate: -5
Organization	The Organization of Unorganized Woozalists
X-Mailer	Claws Mail 3.13.2 (GTK+ 2.24.30; x86_64-pc-linux-gnu)
MIME-Version	1.0
Content-Type	text/plain; charset=US-ASCII
Content-Transfer-Encoding	7bit
X-Mailing-List	<debian-python@lists.debian.org> archive/latest/13741
List-ID	<debian-python.lists.debian.org>
List-URL	<https://lists.debian.org/debian-python/>
List-Archive	https://lists.debian.org/msgid-search/20160411141544.037550c3@subdivisions.wooz.org
Approved	robomod@news.nic.it
Lines	16
Sender	robomod@news.nic.it
X-Original-Date	Mon, 11 Apr 2016 14:15:44 -0400
X-Original-Message-ID	<20160411141544.037550c3@subdivisions.wooz.org>
X-Original-References	<1460222739.5012.44.camel@gmail.com> <20160409181140.GD2889@betterave.cristau.org>
Xref	csiph.com linux.debian.maint.python:8414

Show key headers only | View raw

On Apr 09, 2016, at 08:11 PM, Julien Cristau wrote:

>FWIW I think that's a bad idea.  A number of packages run their test
>suite at build time, and running the tests with hash randomization
>enabled seems to me like something we shouldn't give up.

Completely agreed.  Although we're in the long tail now, during the bulk of
the Python 3 transition, we found real bugs when hash randomization was
enabled.

>Couldn't packages where the binary packages contents depend on the hash seed
>just set one themselves?

+1

-Barry

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

CPython hash randomization makes some Python packages unreproducible Cara <ceridwen.mailing.lists@gmail.com> - 2016-04-09 19:30 +0200
  Re: CPython hash randomization makes some Python packages  unreproducible Julien Cristau <jcristau@debian.org> - 2016-04-09 20:20 +0200
    Re: CPython hash randomization makes some Python packages  unreproducible Barry Warsaw <barry@debian.org> - 2016-04-11 20:20 +0200

csiph-web