From 3c60bdebc346f234521ce5401158e8c33d9a21fa Mon Sep 17 00:00:00 2001
From: Dor Askayo <dor.askayo@gmail.com>
Date: Fri, 13 May 2022 12:45:23 +0300
Subject: [PATCH 1/2] Improve reproducibility of tarball packages

This ensures the user running the bootstrap and its umask don't
affect the permission metadata in the tar archive.
---
 sysa/SHA256SUMS.pkgs | 138 +++++++++++++++++++++----------------------
 sysa/helpers.sh      |  14 +++--
 2 files changed, 79 insertions(+), 73 deletions(-)

diff --git a/sysa/SHA256SUMS.pkgs b/sysa/SHA256SUMS.pkgs
index d04718da..dfeef4e3 100644
--- a/sysa/SHA256SUMS.pkgs
+++ b/sysa/SHA256SUMS.pkgs
@@ -1,135 +1,135 @@
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.12_0.links
-e100b17fdc78a84e58c5c9ccd3090d8bee10de2314236b99c96d17f199049e15  autoconf-2.12_0.tar.bz2
+2fde9f584a275efc5c8bf23adaa690e06ab6922ecbc35108731e87f565ddb2b6  autoconf-2.12_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.13_0.links
-19fcaf4a87b3cfec7a1331a7b0316b73bd8fda1495b3cecb00c626f320126d49  autoconf-2.13_0.tar.bz2
+40d88d4b1048ab70eaecf753fb77713dfcaa9c9c72252cd36459236034cdcdfd  autoconf-2.13_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.52_0.links
-0d4b980825d9f09d41a76939c8112b8bcc8ddde57d88fcaeffefcab76c4376b1  autoconf-2.52_0.tar.bz2
+38f0de4c816088c514dbfb1536779f2204426a95bd6f57fa87b83bffefcaa390  autoconf-2.52_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.52_1.links
-e7a1892fdfa482774dc60ec27c105bc2b7e010dfcba157d0ea7020e58891bbf5  autoconf-2.52_1.tar.bz2
+479627e99e33bbaed320dd569ab6c77867001ddafb08de02f172c6da1a73c4e1  autoconf-2.52_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.53_0.links
-faeaf0cf5d8cf2d1e9c5b84a64e4379f96aebec46698b3e47cf7fc3577842fa6  autoconf-2.53_0.tar.bz2
+b8e0f20ef47540b4a8e9532628bfc43d15f6b375c111cca3727b217019a5992f  autoconf-2.53_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.53_1.links
-faeaf0cf5d8cf2d1e9c5b84a64e4379f96aebec46698b3e47cf7fc3577842fa6  autoconf-2.53_1.tar.bz2
+b8e0f20ef47540b4a8e9532628bfc43d15f6b375c111cca3727b217019a5992f  autoconf-2.53_1.tar.bz2
 ad6c385e96d8c7ee9fa026e096b65821030adcc1c873547b4f6e3dc55e9d4669  autoconf-2.54_0.links
-c763a72b1e4704cbe0d5e4f71d052f100a4e564dd72e6be7b5a445a7b3af7bcb  autoconf-2.54_0.tar.bz2
+7c8a2655773c7a75109d8c6c9d0cd6a9dbf30a1373afcc171d5f044f9ac89414  autoconf-2.54_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.54_1.links
-c763a72b1e4704cbe0d5e4f71d052f100a4e564dd72e6be7b5a445a7b3af7bcb  autoconf-2.54_1.tar.bz2
+7c8a2655773c7a75109d8c6c9d0cd6a9dbf30a1373afcc171d5f044f9ac89414  autoconf-2.54_1.tar.bz2
 1fd322fa08bd65b9630b03983933dd6a85d32090d49e16029b2dae16f5f7208a  autoconf-2.55_0.links
-5a00907a3e0ba6effcaf420e6f2823c3e037c878a349869fa10eadc46e7c6ba5  autoconf-2.55_0.tar.bz2
+c43a6ce6caac9e6976c40eac0980ced477dd65f7d91ae6b9c92e0fea85e3a2b3  autoconf-2.55_0.tar.bz2
 a5910f038266cf25281f770f13486979543e1b4ecd3d8c3d929812f052167ed5  autoconf-2.57_0.links
-1f41a3ef73a5fbf015d7ee06fa2c4c47a5338c0c0e2408e4de207b1944f921ff  autoconf-2.57_0.tar.bz2
+4d01ea4ad2066551beaeaca957c1540743274b1a7c3c0cdc49b9159a0c2d65d4  autoconf-2.57_0.tar.bz2
 ba8ac111cb1ce8de6d35086e198541c620cbedb2525552b98d8f6c399b449ffa  autoconf-2.59_0.links
-fdce92fb2e2f80e630328da6df87c108372d473cb4483ba58813eaf5487653c8  autoconf-2.59_0.tar.bz2
+86b52120ed07b99d0a2ead4eaf57412519ce512ea82519b8d2fd78aad84623a9  autoconf-2.59_0.tar.bz2
 95c7b832abbc66673ec1d0a4254224d7ee4b8450c817121e67195ff8719229ef  autoconf-2.61_0.links
-8056ee37882cde6f6be51188983a8469c6e7f75e6bfca9d60a2b8d910e0dbecb  autoconf-2.61_0.tar.bz2
+5828698eb366b254fbaf306b767aca530d56c8dd02cb2727adc4a2502a627f5e  autoconf-2.61_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-2.61_1.links
-20f02b2e999db056c612207543ed02ef612d6fee9a523f5ba17f934fccd5a91b  autoconf-2.61_1.tar.bz2
+5302730ab0370f84b527333713bbcc79d4d2d32d7bbd1d28203acdbb969888e9  autoconf-2.61_1.tar.bz2
 48032a5174c2d346f43f43e00e82610cda23ca868c1202f001e241033d15a206  autoconf-2.64_0.links
-a6c4340135a23c3934ce1357c7ee21bf963ae56ab49a86d27e57af15437bfad9  autoconf-2.64_0.tar.bz2
+dca3cf43e50c3344ab974d1368847672a47baba62de07b7626de3f21ca35db92  autoconf-2.64_0.tar.bz2
 6c73d920d88a96d1f971f98afe04dbc456522383777a42bb758f765630019f26  autoconf-2.69_0.links
-308eec61edd4a3540a36511bd979e194bd44c3ebee31e5b58f57db8eb475bef7  autoconf-2.69_0.tar.bz2
+46c624d851d76ed594da4043e09fb6ba5ad3bdd8d7411df1137f2fddb25eaaf5  autoconf-2.69_0.tar.bz2
 d713ac1840e82250414ee4f7cd75c79ee44ecb4e8dfc659704eed3d75e7d348c  autoconf-2.71_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  autoconf-archive-2021.02.19_0.links
 6ff691e3ddd4f3d1796d28b07a2a96691dbd9801844c99ccbe660da59dabd74b  autoconf-archive-2021.02.19_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.10.3_0.links
-dc746d5275d8e256c6d734a90d48e9625475bd05b5c79ac59d1b32d0d1201c1a  automake-1.10.3_0.tar.bz2
+cf6b7bbdba1a58b0cc1e6dae36a82e3b28db8ee1e948225d72530accee32aaab  automake-1.10.3_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.11.2_0.links
-64c6c558e6ecef0a04f29c974696659b9d14c84e062c9ec1089ef00c0e4ec4e9  automake-1.11.2_0.tar.bz2
+4f1d2e278a3c62e2b78bb1f667dd91e025d6380e1fbeae778f440c32e59e0a40  automake-1.11.2_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.15.1_0.links
-45733d8275e049824caa0c0d5cea94a863e136b9766bb8bf72c5372b73fd6613  automake-1.15.1_0.tar.bz2
+e7dbcdf681bb27ed216e0b3acfc44b23e7e1039c98d06608fe991e75dcde7494  automake-1.15.1_0.tar.bz2
 708d854632c90e3706194a1a7555a3dc2fafb7ccae65872ad3420083f2781143  automake-1.16.3_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.4-p6_0.links
-6c50b053bf9c36d9fc524a435b07d7462d6177f2edb21807dcf272e777521ec9  automake-1.4-p6_0.tar.bz2
+51ef85383c0afe88c17a25f8b49c4dfdd77c1cc6aa81568ec09d45a15d580de8  automake-1.4-p6_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.6.3_0.links
-ce60572db606f3dcb882c274c9d1ccf2ad54f38a9d87c6bcdb8654692a0e34f9  automake-1.6.3_0.tar.bz2
+8ec3af09fd23256f89b27833a8311ed347caf93d611b1209232ce104bb6fb4ef  automake-1.6.3_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.6.3_1.links
-7801f7e1136d20bcbc132df84d8516ea91279255b44b6ef4e9c6978fbb097c05  automake-1.6.3_1.tar.bz2
+031119cb14859c8bf80d5df5e0bbc475cf67f04b645dc55c80bcabe1bb31a8cd  automake-1.6.3_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.6.3_2.links
-ae735743f1f6e522885b9b3d35acb83fe54717467dc7530f2526a943809918bf  automake-1.6.3_2.tar.bz2
+b2eab85c4a22060cc18945f6cb24cdf928fee370fff3fe12482e866a1cace586  automake-1.6.3_2.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.7.8_0.links
-be69e2f68afbcd8243cceb07ee2356c0e1464fe1a535ca7435f0d2bb901c7d0d  automake-1.7.8_0.tar.bz2
+ddd61cfdaea7a7a9b85eff7e2e597bf6c8af05215e34fd05a5c97f6afc5c31ef  automake-1.7.8_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.7_0.links
-725fe4a6ebc35219d672917800be8763315bab5dc3449f3b99cfa5396bb69daf  automake-1.7_0.tar.bz2
+8f8c29596333ddb8bf3d0e7ed5ee514e75cd248f06961f1ef666e6410e2d384c  automake-1.7_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.7_1.links
-725fe4a6ebc35219d672917800be8763315bab5dc3449f3b99cfa5396bb69daf  automake-1.7_1.tar.bz2
+8f8c29596333ddb8bf3d0e7ed5ee514e75cd248f06961f1ef666e6410e2d384c  automake-1.7_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.8.5_0.links
-c87030c3524d546de2e1b5a64fffe8e30a54a401cb5afd34d7f12223ac87423d  automake-1.8.5_0.tar.bz2
+d52aa64563e2a6fce48bb751fab9802a997772132d9e612ec77274e0e9bac3c9  automake-1.8.5_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.9.6_0.links
-8b417791bcd7ef38f2e685e1ff405e4549291a10f9c6c244eee6644ebc757782  automake-1.9.6_0.tar.bz2
+df5ab8ac7f13eb7aa5211ad4609578f0bb1ed4957ac5737cb78466f644760019  automake-1.9.6_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  automake-1.9.6_1.links
-8b417791bcd7ef38f2e685e1ff405e4549291a10f9c6c244eee6644ebc757782  automake-1.9.6_1.tar.bz2
+df5ab8ac7f13eb7aa5211ad4609578f0bb1ed4957ac5737cb78466f644760019  automake-1.9.6_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bash-5.1_0.links
-2dbdcd1861f89c010cb768c4c43dea3f47eb9d9506c051ae4c6a93cc2ab30cf2  bash-5.1_0.tar.bz2
+e180c61e3922b0546a6a3ee498abeba6dfdd404215ca850628a5277e5ede26e7  bash-5.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  binutils-2.14_0.links
-e6c462f70df90369d0471e04e347c68a5ff2e3b67543d44fa19657d83b9c4e35  binutils-2.14_0.tar.bz2
+a6190872c4daf1b55a1ad1f2fd2e34bd251f3808f750bb4a7920b66d672497a8  binutils-2.14_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bison-2.3_0.links
 f566a5cb99adc8f572659ebf4a778ff23acf62d90b13a9983f56488a493b15b2  bison-2.3_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bison-3.4.1_0.links
-a8d372a9ec4b39bb39f4d83dd689e6df75222c3d896dd25348070308bee9be7f  bison-3.4.1_0.tar.bz2
+87dae598915deabe95a4ee75ec6cfed3a6e6da1a655c3ad90ee60ec07a7d87fa  bison-3.4.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bison-3.4.1_1.links
-6458d3aea1c2daacbb7017a3c0732c38d81719fc1e523799252dfd819ad2efd1  bison-3.4.1_1.tar.bz2
+ae452f08ad9f7ab01f2a9bd882170e71ee6200a06f044f4aadb446cc68700016  bison-3.4.1_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bison-3.4.1_2.links
-48d93d34b21eb226c05f5b3eff78ad0666e4e4eb655bf8ebe88cade0fc51966d  bison-3.4.1_2.tar.bz2
+becc8ea1f24c531c35b520ce8bac9e8bf6e30e362fe77bf7833aed9d28af0ae6  bison-3.4.1_2.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  bison-3.4.2_0.links
 ee3e0367cecd84ebbb929c629413e069efa46806f82807abcee2fe79b21525de  bison-3.4.2_0.tar.bz2
 07fee627dcf30aaa9beab40ffeacc3bec7afe3488d2fbc7e8a72ae782a85869a  bzip2-1.0.8_0.links
 f4fad25a0e7a451ed906b76846efd6d2699a65b40795b29553addc35bf9a75c8  bzip2-1.0.8_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  coreutils-5.0_0.links
-61d64f999975ec0e2e7a85d7c983036ebc6b2af617c54135d6ef8247fd7c54f5  coreutils-5.0_0.tar.bz2
+da0336a795d1549155c5d84a05f9faa23d41acc2a25c1abfda25b468acf9429a  coreutils-5.0_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  coreutils-6.10_0.links
-0e24e09194ab37a62d4712b0925c4a0bb0467f08751bd3915d9e904c8fefffb5  coreutils-6.10_0.tar.bz2
+776ef3e13870fba6fc9cec64eaf40fb658abecc99c65724968013f8f8a177802  coreutils-6.10_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  coreutils-8.32_0.links
 b8992f675350658b106c3066cac0ee31440020bc9d6128bfc2fdf1fde60efd74  coreutils-8.32_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  diffutils-2.7_0.links
-bc0a9a1acce254db2833aa5ff9f56b0675b42fdebd9ab7d5a5f921757ed79667  diffutils-2.7_0.tar.bz2
+ca91a67d5d0c0ee46d064d9bf7c26efcafe712a9f86866991028478df3b34f21  diffutils-2.7_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  dist-3.5-236_0.links
 de6d9df33107ae63b8e0f30902fe9d00e42f78f44a60b256bb0b3c82ff75bd45  dist-3.5-236_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  findutils-4.2.33_0.links
-05e06133fb0235d0594d23e0df58760c9eb1865ba921124fe8a409a09d2abc14  findutils-4.2.33_0.tar.bz2
+f55c11b091361536774b436abe86b17f759cd7a66522cd20c7a2190da92db67a  findutils-4.2.33_0.tar.bz2
 865b57db33fc860abd00efc6b239366c3c1354ab4e699d8506e21a4316352863  flex-2.5.11_0.links
-4756e1eaf35ece7576f53286991e8c998a85066e2bd941b05a554c8489c0d52c  flex-2.5.11_0.tar.bz2
+83a953a2e9e4742b4edbfdfcc1198d31301fbe23de154e50e9717c0bf184696a  flex-2.5.11_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  flex-2.5.33_0.links
 33afd1c66c864b486df290e682883556787c61751b8c851deb2737f0b777ffd6  flex-2.5.33_0.tar.bz2
 a0ab924b46c0c11740a52958313d0543182053f476d42879128c57c52131a956  flex-2.6.4_0.links
-0a968380ccf663dbf1de12514367ed2f9444649b10a0f1c878d7c6d1d2156df1  flex-2.6.4_0.tar.bz2
+84169a5ce0a0d6f4182a9881e9ec4b67badea3f5efd97a6293af75cc9d7c24b5  flex-2.6.4_0.tar.bz2
 85c6ea124aa20e758ac334689782eeda694a35e32eacf320b588130be15d746a  gawk-3.0.4_0.links
-83cdb780d9603e318728aa1cbcb8ba0ed8ddc618913b4a333ab2c4934c6cae9c  gawk-3.0.4_0.tar.bz2
+44450c0224f9e22061e15713e8744754d9800ed48a94157f0fd4f8fca96a0608  gawk-3.0.4_0.tar.bz2
 95a787e432b40497b39909aa533a2b19c1b05a87bc3a289b338e4fec44e94f96  gc-8.0.4_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  gcc-4.0.4_0.links
-b6134fabf6f8eb98c63f0218281cc5fe0140094f0dc92415653b0de28e877ba0  gcc-4.0.4_0.tar.bz2
+07715a0c8bc13b80fc10ede20573f92e933b8d3dc6a5c8700f4289965ea8ec74  gcc-4.0.4_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  gcc-4.0.4_1.links
-c975e5ad2edd4a4133a7c99d351276b21b8cda0823620b28273f748179849f48  gcc-4.0.4_1.tar.bz2
+e7c678c71c51cd6e8ce6eae029503a661169e6994ba0f988ac15634254d1fadb  gcc-4.0.4_1.tar.bz2
 a27a062aa94cc8ff9b4f8bc0a609e3e401139217cac19516872521c5aa399c83  gcc-4.7.4_0.x86.xbps
 b5f6fe07a696751d2fc1d9cc3d96f09d89d6a637e1d8d0b250105b650e831600  gettext-0.21_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  gmp-6.2.1_0.links
 ed8b1b36fa558f594b3e4b5a958f1c31d97990abf84788f67ce5be7a593c4b9d  gmp-6.2.1_0.tar.bz2
 11940cfe5ea1c11f427932faecf054e1463f8b674a3dd99ef1569b245a370035  gperf-3.1_0.x86.xbps
 ae0b200220b4a6d40571764d065ddf35d9535e94582c6bdb2c95316d937c4dce  grep-2.4_0.links
-60f8b585dfbea490467baefa6445e79cbf691b6e88886baa433894fa001e000b  grep-2.4_0.tar.bz2
+5c5cfa3b1e4ba3f9b3f94b1df98774489c6a598f4985fbfdfc2f9cb2d15c7f53  grep-2.4_0.tar.bz2
 4c5ac95c3ca934d5cac5e05e13473a16ee1a616190217795438019f1e4fcc254  guile-3.0.7_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  help2man-1.36.4_0.links
-566d93b2c41ba4d61b3f34baa8a0e2af6ea568d15ca1be0ac483b74fcdbfe911  help2man-1.36.4_0.tar.bz2
+c2ac7da7915ffa5da0e0f130637fb5a6558bc273f916c9b948aecc41740b68b9  help2man-1.36.4_0.tar.bz2
 7eeeb832b400a11419e4ef14bf778b8177bbc6a77f5a37c0c0f2965f66ab4d51  kbd-1.15_0.links
-35f352136f9a074aac87b2e69f0c0d8844a6c80c0a1080bc30364d0f67bdabd7  kbd-1.15_0.tar.bz2
+0b501be69520a618eb9f83f66f4d9b30a624ac164bd602a92b3870be9740c2c5  kbd-1.15_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  kexec-tools-2.0.22_0.links
-30511a5ff9e3d492325d89c3a7abf59079bc0066f35ea348d55b592742f21f9f  kexec-tools-2.0.22_0.tar.bz2
+68c272b50a99e4d53cab57552337e7660020a47c06a0341efcdfa4f2441db187  kexec-tools-2.0.22_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  libarchive-3.5.2_0.links
 a4aa859bdb70b5c0c9b726fe8f1a34c08b5afc1fe1bc8d0d2be136c7f8b36d85  libarchive-3.5.2_0.tar.bz2
 a80d0ff829ab285e92d966b3664e390ce60b420eb22b1288211432fed880b4fe  libatomic_ops-7.6.10_0.x86.xbps
 b70fe8d9479ca4a3ad6fdbafbaf52a172c6a4a47ae8cf080beb9d25b97a7b205  libffi-3.3_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  libtool-1.4_0.links
-9b016f9550beb2a59a457c2b77de00f6d2fb7782068fe98993f3e24056f5c6a4  libtool-1.4_0.tar.bz2
+5001f8fdbba0db0ecf60263bfea97ed4b9174d06a447e98bee220548f973756a  libtool-1.4_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  libtool-2.2.4_0.links
-0a692e83e69484a4152e98fc4781493ea126399e8cdd9306e6b6e6c7b1e8c170  libtool-2.2.4_0.tar.bz2
+94d0f9d2f8fbc2b00fe4c0f479e5590fa70b7d856f0a643ad006787d963f99ee  libtool-2.2.4_0.tar.bz2
 9bf0aea34d1413640667645ef06947ec2c24d3fa4e4e10825a7560c6d2e3343b  libunistring-0.9.10_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  linux-4.9.10_0.links
-a575a37f05006915c532698500bcc6476c0d2e09ac447cb1b7aa9679e7b593c5  linux-4.9.10_0.tar.bz2
+1d07aaf7049be45853fd409340cdb52bb3a1b6dfa4dbc8b69358c1ee966cd67f  linux-4.9.10_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  linux-headers-5.10.41_0.links
-73a0ba95a62bf30c794c4025b36b73b3140371e2419b502937c5ce83a0febe5a  linux-headers-5.10.41_0.tar.bz2
+a878f140c5a5c2e40562800927b2281d33085c2a91479532a5220510a5926edb  linux-headers-5.10.41_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  m4-1.4.7_0.links
-557e9a7f6c169c9e7d988188f9e36f9c7084c8134148959ec5849eedcc464a6a  m4-1.4.7_0.tar.bz2
+5cda10550198e613c426e45c5fffe0f7e8761296e7339e9e9a1f9da995b4865a  m4-1.4.7_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  make-3.82_0.links
-4d5ba90c89a005d4ab6e45cd0f586b69c573ee0d81ddf8607d8c57206e3535e7  make-3.82_0.tar.bz2
+c4fc071e0911a01efae11b8735c8e69a8963d9a545befffd01486de7589b201a  make-3.82_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  make-4.2.1_0.links
 47470be468d66a85e71cbecbbf22038260c6e91408105ba0684c3ee61b39085f  make-4.2.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  mpc-1.2.1_0.links
@@ -137,48 +137,48 @@ e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  mpc-1.2.1_0.li
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  mpfr-4.1.0_0.links
 9ca09072cdee6ce6822840b9a5b66cea3e68150ce4875b2c7e760169601ab6de  mpfr-4.1.0_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  musl-1.1.24_0.links
-efce7a5526f51ebd5ca17eda488e60fd30cbde5370f7b4dbfbfa7b005f64b457  musl-1.1.24_0.tar.bz2
+5a36e7d798f43088d6a72fede0bd0f389a42d9e958013cd6c8df16ce2e090e1f  musl-1.1.24_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  musl-1.1.24_1.links
-ccc546868be7726effb6dab24a24af486bd305bfbf5a909e5b53f5d7f2cd52f2  musl-1.1.24_1.tar.bz2
+7f3251ee05aaa38e9803db41104acbfa399873a31591411c3580d181a6461d0c  musl-1.1.24_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  musl-1.1.24_2.links
-2a08a02bac1becb471ab18bb725da164631ab8f2acdd0b5d29542e79ff5bc8ba  musl-1.1.24_2.tar.bz2
+9f3d2b47634860cfd5f03fa3346ef9a60a6dab57164ee974578dbb7f4a45e16b  musl-1.1.24_2.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  musl-1.2.3_0.links
-25ce6ad3d4f2e26b1ff94e8391a3e9c96c45e6b06254041a29aca553adbe592f  musl-1.2.3_0.tar.bz2
+af949ecc98bdc3b94d0f74e5d38a3c3710712a029ddb6cf9b801390e1d626b3c  musl-1.2.3_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  openssl-1.1.1l_0.links
 df12820e27abfe07c4c27bb2f9abf2e0758b797d5d3036e29d6c57cfb5aa12d6  openssl-1.1.1l_0.tar.bz2
 189443aecea6e8435d1243071c2e46d7e4bb8f79f2929ae6a6c96eea40394a35  patch-2.7.6_0.x86.xbps
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl-5.000_0.links
-96f5f0c6c0aab29e9d4e316c704c862a4ceaf39f19cf4db7e76d3bf10ebc217a  perl-5.000_0.tar.bz2
+75fffc4bb14f14281bc1853455888d1d818b7027efc1e4014af1a755771a64e8  perl-5.000_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl-5.003_0.links
-c7cc7cfea620fcc9834844b6b69d59e39c64d70cdfe25c7387525d0b8eabcdfe  perl-5.003_0.tar.bz2
+3a709c914e7d01f5bfd12d8d859ac7135d9ac57528cb2e325448f91cfb4869b8  perl-5.003_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl-5.10.1_0.links
-86c9b7719464b3d75f0b1ec582b4eab2dd30efbd1194a578b9eb056dd4161a40  perl-5.10.1_0.tar.bz2
+4b79a1694c471663391793939f60c810aec65b03ef80f8dd811cea181f8e7fb2  perl-5.10.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl-5.32.1_0.links
-b9fe25eb5a49ba42382b321c5464a644f83e709cd984612c07df17bb375e2bec  perl-5.32.1_0.tar.bz2
+da3095776a4781c2c9523176d5522167ec303c582e150057c72a34ce06fb210a  perl-5.32.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl-5.6.2_0.links
-b5fce312b381d0135d44b1bd30089e89e17ce35e6cf5e326eac87baf6c554dd4  perl-5.6.2_0.tar.bz2
+9ceb09af82397f98e99e339cb4fd3abd9f61d222ea7e6a0920e2f3a7c316c70a  perl-5.6.2_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl5.004-05_0.links
-7b21b31997df44023070c122b613f555658cad8bd39a89ce834212833d6cedbc  perl5.004-05_0.tar.bz2
+23ea39db272dcbbeedf2ea6e758052228b0a764be462c0562339b58ae472d83d  perl5.004-05_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  perl5.005-03_0.links
-b418ef47a65ba1f52f0b79a96ce2ebf1bb1f4f2a78e3985fa512e6c41477f100  perl5.005-03_0.tar.bz2
+041aed738c039a8c437c6d29530fe44f55bd5fc9ac2bb54f793f6fe3a9df16fd  perl5.005-03_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  pkg-config-0.29.2_0.links
 c69e0197ebc1bf9f9fc68a06d4c649c934784077058c24a484da59a153132816  pkg-config-0.29.2_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  sed-4.0.9_0.links
-84777d6451b391ee5c16fcf05a38bace0db97d7761f383ff5920b00e65bc1144  sed-4.0.9_0.tar.bz2
+8a0248fbf8fe1764580698415cc3628585d4dd054ddf63040f400e18cbaef7a4  sed-4.0.9_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  tar-1.34_0.links
 1245905d8942a10cccf21850a521db19c9a65ab35cef4c6bbb72672773851048  tar-1.34_0.tar.bz2
 b69c042a33cbf18e5a2a5a886d675ebcced92f57eec95b0f47345df8f1e89cf0  tcc-0.9.27_0.links
-1086136d7bb8e0c3b4bba9aa3b0442412d58bdd3effa790015f85a723c9804e1  tcc-0.9.27_0.tar.bz2
+a8a0f175250ca39687804e023af877b1a4e7d742a304e84ef9743eb8235fa756  tcc-0.9.27_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  tcc-0.9.27_1.links
-d88a72f36e947462b5bea9b56ecf6c828b8ba7c363af00e2b02303095555cabe  tcc-0.9.27_1.tar.bz2
+db57c6ef39965f0562d2aefe3c06571df50ba1265446d97f2714d80518862cef  tcc-0.9.27_1.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  tcc-0.9.27_2.links
-733df9aae85fbf422aac26fe0354c48d035f7a5fb4f79b00e666e0763914aeca  tcc-0.9.27_2.tar.bz2
+e2014b844b1a79cda9142a38af0404efd242ae02f77aa286c968e4ad6ad87265  tcc-0.9.27_2.tar.bz2
 96dc08f4d01eddc04af107ffd313617af3fc455af38a82b850c4aca08cbd7e84  texinfo-6.7_0.x86.xbps
 970cc84444fecc225becb0db24671a186888a8a8d37daf3f40d827a907181a12  util-linux-2.19.1_0.links
-8c3fcbac2d2a5cee4449dc2283a78f43abc0805caaeda9212501a050d86dceec  util-linux-2.19.1_0.tar.bz2
+b909ae48764f3c7515346485d746c75fb38deb76723fa4a61701756304ed2c17  util-linux-2.19.1_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  xbps-0.59.1_0.links
 3f044d2aaa838c9df153d662f8e259c2393774d3d3a5e71e26b5d867dbb08107  xbps-0.59.1_0.tar.bz2
 ac8c7b186195ad29d86c2d1608b0c4ba37eeb12daff8f155d69d568239cae237  xz-5.0.5_0.links
-3ee2d9330c436217519f2470c2e16fd033504960ca2ceef9cae1e2c2dbc70c74  xz-5.0.5_0.tar.bz2
+16ec19a9c46ac6b22015582afc8c1369a9a57b9426a67e77402157225740d265  xz-5.0.5_0.tar.bz2
 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855  zlib-1.2.12_0.links
 bb1e34d0392fddf9718e025344af575c1c534fbc61a1e4476e0c7ae2614f57ca  zlib-1.2.12_0.tar.bz2
diff --git a/sysa/helpers.sh b/sysa/helpers.sh
index 8d0605b7..348f7bfe 100755
--- a/sysa/helpers.sh
+++ b/sysa/helpers.sh
@@ -261,17 +261,23 @@ create_tarball_pkg() {
     # If grep is unavailable, then tar --sort is unavailable.
     # So this does not need a command -v grep.
     if tar --help | grep ' \-\-sort' >/dev/null 2>&1; then
-        tar -C "${DESTDIR}" --sort=name --hard-dereference -cf "/usr/src/repo/${pkg}_${revision}.tar" .
+        tar -C "${DESTDIR}" --sort=name --hard-dereference \
+            --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
+            -cf "/usr/src/repo/${pkg}_${revision}.tar" .
     elif command -v find >/dev/null 2>&1 && command -v sort >/dev/null 2>&1; then
         cd "${DESTDIR}"
-        tar --no-recursion --null -T /tmp/filelist.txt -cf "/usr/src/repo/${pkg}_${revision}.tar"
+        tar --no-recursion --null -T /tmp/filelist.txt \
+            --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
+            -cf "/usr/src/repo/${pkg}_${revision}.tar"
         cd -
     else
         echo -n > /dev/null
-        tar -cf "/usr/src/repo/${pkg}_${revision}.tar" -T /dev/null
+        tar --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
+            -cf "/usr/src/repo/${pkg}_${revision}.tar" -T /dev/null
         cd "${DESTDIR}"
         for f in $(get_files .); do
-            tar -rf "/usr/src/repo/${pkg}_${revision}.tar" "${f}"
+            tar --numeric-owner --owner=0 --group=0 --mode=go=rX,u+rw,a-s \
+                -rf "/usr/src/repo/${pkg}_${revision}.tar" "${f}"
         done
         cd -
     fi

From d32d0f1d51ab7e29b0e6a46ca77c2ff851dc3015 Mon Sep 17 00:00:00 2001
From: Dor Askayo <dor.askayo@gmail.com>
Date: Fri, 13 May 2022 16:21:14 +0300
Subject: [PATCH 2/2] Improve reproducibility of XBPS packages

XBPS packages don't seem to have an option to manipulate file
permissions at package creation time.

So as a best effort, set the umask as soon as possible to ensure
file permissions are the same when running the bootstrap.

This is enough to allow reproducible XBPS packages when starting the
bootstrap with a umask different than 0022.
---
 sysc/run2.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sysc/run2.sh b/sysc/run2.sh
index 1b5d6b36..71035ed2 100755
--- a/sysc/run2.sh
+++ b/sysc/run2.sh
@@ -17,6 +17,8 @@ trap 'env - PATH=${PREFIX}/bin PS1="\w # " bash -i' EXIT
 
 trap bash EXIT
 
+umask 0022
+
 build xz-5.0.5
 
 build automake-1.11.2