reproducible builds without shm

fix #614 (closed)

I've determined the two source of nondeterminism in Arti builds are lzma-sys and zstd-sys.

There was a PR, zstd-rs!162, making zstd-sys reproducible. Sadly there isn't a release yet, so it's available by git dependency only.
I made a similar PR on xz2-rs, xz2-rs!102, to fix the same issue with lzma-sys. I was able to verify it indeed fix reproducibility issues. As of now, it's only available via git dependency too.

Merge request reports

Loading