--- /srv/rebuilderd/tmp/rebuilderdkXX3sj/inputs/vmms-common_0.0.3_all.deb
+++ /srv/rebuilderd/tmp/rebuilderdkXX3sj/out/vmms-common_0.0.3_all.deb
├── file list
│ @@ -1,3 +1,3 @@
│  -rw-r--r--   0        0        0        4 2025-11-26 08:48:01.000000 debian-binary
│ --rw-r--r--   0        0        0    19620 2025-11-26 08:48:01.000000 control.tar.xz
│ --rw-r--r--   0        0        0    10620 2025-11-26 08:48:01.000000 data.tar.xz
│ +-rw-r--r--   0        0        0    19624 2025-11-26 08:48:01.000000 control.tar.xz
│ +-rw-r--r--   0        0        0    10624 2025-11-26 08:48:01.000000 data.tar.xz
├── control.tar.xz
│ ├── control.tar
│ │ ├── ./md5sums
│ │ │ ├── ./md5sums
│ │ │ │┄ Files differ
├── data.tar.xz
│ ├── data.tar
│ │ ├── file list
│ │ │ @@ -11,10 +11,10 @@
│ │ │  -rwxr-xr-x   0 root         (0) root         (0)      151 2025-11-26 08:48:01.000000 ./usr/bin/vmms-worker
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2025-11-26 08:48:01.000000 ./usr/share/
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2025-11-26 08:48:01.000000 ./usr/share/doc/
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2025-11-26 08:48:01.000000 ./usr/share/doc/vmms-common/
│ │ │  -rw-r--r--   0 root         (0) root         (0)      285 2025-11-26 08:48:01.000000 ./usr/share/doc/vmms-common/changelog.gz
│ │ │  -rw-r--r--   0 root         (0) root         (0)      932 2025-11-26 08:48:01.000000 ./usr/share/doc/vmms-common/copyright
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2025-11-26 08:48:01.000000 ./usr/share/vmms-common/
│ │ │ --rw-r--r--   0 root         (0) root         (0)    38968 2025-11-26 08:48:01.000000 ./usr/share/vmms-common/vmms.conf
│ │ │ +-rw-r--r--   0 root         (0) root         (0)    39055 2025-11-26 08:48:01.000000 ./usr/share/vmms-common/vmms.conf
│ │ │  drwxr-xr-x   0 root         (0) root         (0)        0 2025-11-26 08:48:01.000000 ./usr/share/vmms-common/workflows/
│ │ │  -rw-r--r--   0 root         (0) root         (0)      985 2025-11-26 08:48:01.000000 ./usr/share/vmms-common/workflows/migrate_vm_workflow.yaml.j2
│ │ ├── ./usr/share/vmms-common/vmms.conf
│ │ │ @@ -414,14 +414,26 @@
│ │ │  
│ │ │  # Config Section from which to load plugin specific options (string value)
│ │ │  #auth_section = <None>
│ │ │  
│ │ │  # Authentication URL (string value)
│ │ │  #auth_url = <None>
│ │ │  
│ │ │ +# OAuth Consumer ID/Key (string value)
│ │ │ +#consumer_key = <None>
│ │ │ +
│ │ │ +# OAuth Consumer Secret (string value)
│ │ │ +#consumer_secret = <None>
│ │ │ +
│ │ │ +# OAuth Access Key (string value)
│ │ │ +#access_key = <None>
│ │ │ +
│ │ │ +# OAuth Access Secret (string value)
│ │ │ +#access_secret = <None>
│ │ │ +
│ │ │  # Scope for system operations (string value)
│ │ │  #system_scope = <None>
│ │ │  
│ │ │  # Domain ID to scope to (string value)
│ │ │  #domain_id = <None>
│ │ │  
│ │ │  # Domain name to scope to (string value)
│ │ │ @@ -438,57 +450,22 @@
│ │ │  
│ │ │  # Domain name containing project (string value)
│ │ │  #project_domain_name = <None>
│ │ │  
│ │ │  # ID of the trust to use as a trustee use (string value)
│ │ │  #trust_id = <None>
│ │ │  
│ │ │ -# Identity Provider's name (string value)
│ │ │ -#identity_provider = <None>
│ │ │ -
│ │ │ -# Protocol for federated plugin (string value)
│ │ │ -#protocol = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Client ID (string value)
│ │ │ -#client_id = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Client Secret (string value)
│ │ │ -#client_secret = <None>
│ │ │ -
│ │ │ -# OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be
│ │ │ -# always specified. (string value)
│ │ │ -#scope = <None>
│ │ │ -
│ │ │ -# OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ -# by the server in the discovery document. (string value)
│ │ │ -#access_token_endpoint = <None>
│ │ │ -
│ │ │ -# OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the
│ │ │ -# authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │ -#discovery_endpoint = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │ -# introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │ -#access_token_type = <None>
│ │ │ -
│ │ │ -# OpenID Connect Redirect URL (string value)
│ │ │ -#redirect_uri = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Authorization Code (string value)
│ │ │ -# Deprecated group/name - [mistral]/authorization_code
│ │ │ -#code = <None>
│ │ │ -
│ │ │ -# User ID to login with (string value)
│ │ │ +# User's user ID (string value)
│ │ │  #user_id = <None>
│ │ │  
│ │ │  # Username (string value)
│ │ │  # Deprecated group/name - [mistral]/user_name
│ │ │  #username = <None>
│ │ │  
│ │ │ -# User's domain id (string value)
│ │ │ +# User's domain ID (string value)
│ │ │  #user_domain_id = <None>
│ │ │  
│ │ │  # User's domain name (string value)
│ │ │  #user_domain_name = <None>
│ │ │  
│ │ │  # Application credential auth secret (string value)
│ │ │  #application_credential_secret = <None>
│ │ │ @@ -507,73 +484,97 @@
│ │ │  
│ │ │  # Client credential ID for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │  #oauth2_client_id = <None>
│ │ │  
│ │ │  # Client secret for OAuth2.0 (string value)
│ │ │  #oauth2_client_secret = <None>
│ │ │  
│ │ │ -# Methods to authenticate with. (string value)
│ │ │ -#auth_methods = <None>
│ │ │ -
│ │ │ -# Tenant ID (string value)
│ │ │ -#tenant_id = <None>
│ │ │ -
│ │ │ -# Tenant Name (string value)
│ │ │ -#tenant_name = <None>
│ │ │ -
│ │ │ -# Token to authenticate with (string value)
│ │ │ -#token = <None>
│ │ │ -
│ │ │ -# User's password (string value)
│ │ │ -#password = <None>
│ │ │ +# Identity Provider's name (string value)
│ │ │ +#identity_provider = <None>
│ │ │  
│ │ │ -# The endpoint that will always be used (string value)
│ │ │ -#endpoint = <None>
│ │ │ +# Protocol for federated plugin (string value)
│ │ │ +#protocol = <None>
│ │ │  
│ │ │  # An Identity Provider URL, where the SAML2 authentication request will be sent. (string value)
│ │ │  #identity_provider_url = <None>
│ │ │  
│ │ │  # Service Provider's Endpoint (string value)
│ │ │  #service_provider_endpoint = <None>
│ │ │  
│ │ │  # Service Provider's SAML Entity ID (string value)
│ │ │  #service_provider_entity_id = <None>
│ │ │  
│ │ │ +# User's password (string value)
│ │ │ +#password = <None>
│ │ │ +
│ │ │ +# Tenant ID (string value)
│ │ │ +#tenant_id = <None>
│ │ │ +
│ │ │ +# Tenant Name (string value)
│ │ │ +#tenant_name = <None>
│ │ │ +
│ │ │  # Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │  # authentication. (string value)
│ │ │  #default_domain_id = <None>
│ │ │  
│ │ │  # Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │  # authentication. (string value)
│ │ │  #default_domain_name = <None>
│ │ │  
│ │ │ +# The token that will always be used (string value)
│ │ │ +#token = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Client ID (string value)
│ │ │ +#client_id = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Client Secret (string value)
│ │ │ +#client_secret = <None>
│ │ │ +
│ │ │ +# OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be
│ │ │ +# always specified. (string value)
│ │ │ +#scope = <None>
│ │ │ +
│ │ │ +# OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ +# by the server in the discovery document. (string value)
│ │ │ +#access_token_endpoint = <None>
│ │ │ +
│ │ │ +# OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the
│ │ │ +# authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │ +#discovery_endpoint = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │ +# introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │ +#access_token_type = <None>
│ │ │ +
│ │ │  # A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │  #idp_otp_key = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Access Token (string value)
│ │ │ -#access_token = <None>
│ │ │ +# The endpoint that will always be used (string value)
│ │ │ +# Deprecated group/name - [mistral]/url
│ │ │ +#endpoint = <None>
│ │ │  
│ │ │  # OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │  # by the server in the discovery document. (string value)
│ │ │  #device_authorization_endpoint = <None>
│ │ │  
│ │ │  # PKCE Challenge Method (RFC 7636) (string value)
│ │ │  #code_challenge_method = <None>
│ │ │  
│ │ │ -# OAuth Consumer ID/Key (string value)
│ │ │ -#consumer_key = <None>
│ │ │ +# OAuth 2.0 Access Token (string value)
│ │ │ +#access_token = <None>
│ │ │  
│ │ │ -# OAuth Consumer Secret (string value)
│ │ │ -#consumer_secret = <None>
│ │ │ +# OpenID Connect Redirect URL (string value)
│ │ │ +#redirect_uri = <None>
│ │ │  
│ │ │ -# OAuth Access Key (string value)
│ │ │ -#access_key = <None>
│ │ │ +# OAuth 2.0 Authorization Code (string value)
│ │ │ +# Deprecated group/name - [mistral]/authorization_code
│ │ │ +#code = <None>
│ │ │  
│ │ │ -# OAuth Access Secret (string value)
│ │ │ -#access_secret = <None>
│ │ │ +# Methods to authenticate with. (string value)
│ │ │ +#auth_methods = <None>
│ │ │  
│ │ │  # PEM encoded Certificate Authority to use when verifying HTTPs connections. (string value)
│ │ │  #cafile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate cert file (string value)
│ │ │  #certfile = <None>
│ │ │  
│ │ │ @@ -713,14 +714,26 @@
│ │ │  
│ │ │  # Config Section from which to load plugin specific options (string value)
│ │ │  #auth_section = <None>
│ │ │  
│ │ │  # Authentication URL (string value)
│ │ │  #auth_url = <None>
│ │ │  
│ │ │ +# OAuth Consumer ID/Key (string value)
│ │ │ +#consumer_key = <None>
│ │ │ +
│ │ │ +# OAuth Consumer Secret (string value)
│ │ │ +#consumer_secret = <None>
│ │ │ +
│ │ │ +# OAuth Access Key (string value)
│ │ │ +#access_key = <None>
│ │ │ +
│ │ │ +# OAuth Access Secret (string value)
│ │ │ +#access_secret = <None>
│ │ │ +
│ │ │  # Scope for system operations (string value)
│ │ │  #system_scope = <None>
│ │ │  
│ │ │  # Domain ID to scope to (string value)
│ │ │  #domain_id = <None>
│ │ │  
│ │ │  # Domain name to scope to (string value)
│ │ │ @@ -737,57 +750,22 @@
│ │ │  
│ │ │  # Domain name containing project (string value)
│ │ │  #project_domain_name = <None>
│ │ │  
│ │ │  # ID of the trust to use as a trustee use (string value)
│ │ │  #trust_id = <None>
│ │ │  
│ │ │ -# Identity Provider's name (string value)
│ │ │ -#identity_provider = <None>
│ │ │ -
│ │ │ -# Protocol for federated plugin (string value)
│ │ │ -#protocol = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Client ID (string value)
│ │ │ -#client_id = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Client Secret (string value)
│ │ │ -#client_secret = <None>
│ │ │ -
│ │ │ -# OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be
│ │ │ -# always specified. (string value)
│ │ │ -#scope = <None>
│ │ │ -
│ │ │ -# OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ -# by the server in the discovery document. (string value)
│ │ │ -#access_token_endpoint = <None>
│ │ │ -
│ │ │ -# OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the
│ │ │ -# authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │ -#discovery_endpoint = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │ -# introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │ -#access_token_type = <None>
│ │ │ -
│ │ │ -# OpenID Connect Redirect URL (string value)
│ │ │ -#redirect_uri = <None>
│ │ │ -
│ │ │ -# OAuth 2.0 Authorization Code (string value)
│ │ │ -# Deprecated group/name - [source_cloud]/authorization_code
│ │ │ -#code = <None>
│ │ │ -
│ │ │ -# User ID to login with (string value)
│ │ │ +# User's user ID (string value)
│ │ │  #user_id = <None>
│ │ │  
│ │ │  # Username (string value)
│ │ │  # Deprecated group/name - [source_cloud]/user_name
│ │ │  #username = <None>
│ │ │  
│ │ │ -# User's domain id (string value)
│ │ │ +# User's domain ID (string value)
│ │ │  #user_domain_id = <None>
│ │ │  
│ │ │  # User's domain name (string value)
│ │ │  #user_domain_name = <None>
│ │ │  
│ │ │  # Application credential auth secret (string value)
│ │ │  #application_credential_secret = <None>
│ │ │ @@ -806,73 +784,97 @@
│ │ │  
│ │ │  # Client credential ID for OAuth2.0 Mutual-TLS Authorization (string value)
│ │ │  #oauth2_client_id = <None>
│ │ │  
│ │ │  # Client secret for OAuth2.0 (string value)
│ │ │  #oauth2_client_secret = <None>
│ │ │  
│ │ │ -# Methods to authenticate with. (string value)
│ │ │ -#auth_methods = <None>
│ │ │ -
│ │ │ -# Tenant ID (string value)
│ │ │ -#tenant_id = <None>
│ │ │ -
│ │ │ -# Tenant Name (string value)
│ │ │ -#tenant_name = <None>
│ │ │ -
│ │ │ -# Token to authenticate with (string value)
│ │ │ -#token = <None>
│ │ │ -
│ │ │ -# User's password (string value)
│ │ │ -#password = <None>
│ │ │ +# Identity Provider's name (string value)
│ │ │ +#identity_provider = <None>
│ │ │  
│ │ │ -# The endpoint that will always be used (string value)
│ │ │ -#endpoint = <None>
│ │ │ +# Protocol for federated plugin (string value)
│ │ │ +#protocol = <None>
│ │ │  
│ │ │  # An Identity Provider URL, where the SAML2 authentication request will be sent. (string value)
│ │ │  #identity_provider_url = <None>
│ │ │  
│ │ │  # Service Provider's Endpoint (string value)
│ │ │  #service_provider_endpoint = <None>
│ │ │  
│ │ │  # Service Provider's SAML Entity ID (string value)
│ │ │  #service_provider_entity_id = <None>
│ │ │  
│ │ │ +# User's password (string value)
│ │ │ +#password = <None>
│ │ │ +
│ │ │ +# Tenant ID (string value)
│ │ │ +#tenant_id = <None>
│ │ │ +
│ │ │ +# Tenant Name (string value)
│ │ │ +#tenant_name = <None>
│ │ │ +
│ │ │  # Optional domain ID to use with v3 and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │  # authentication. (string value)
│ │ │  #default_domain_id = <None>
│ │ │  
│ │ │  # Optional domain name to use with v3 API and v2 parameters. It will be used for both the user and project domain in v3 and ignored in v2
│ │ │  # authentication. (string value)
│ │ │  #default_domain_name = <None>
│ │ │  
│ │ │ +# The token that will always be used (string value)
│ │ │ +#token = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Client ID (string value)
│ │ │ +#client_id = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Client Secret (string value)
│ │ │ +#client_secret = <None>
│ │ │ +
│ │ │ +# OpenID Connect scope that is requested from authorization server. Note that the OpenID Connect specification states that "openid" must be
│ │ │ +# always specified. (string value)
│ │ │ +#scope = <None>
│ │ │ +
│ │ │ +# OpenID Connect Provider Token Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │ +# by the server in the discovery document. (string value)
│ │ │ +#access_token_endpoint = <None>
│ │ │ +
│ │ │ +# OpenID Connect Discovery Document URL. The discovery document will be used to obtain the values of the access token endpoint and the
│ │ │ +# authentication endpoint. This URL should look like https://idp.example.org/.well-known/openid-configuration (string value)
│ │ │ +#discovery_endpoint = <None>
│ │ │ +
│ │ │ +# OAuth 2.0 Authorization Server Introspection token type, it is used to decide which type of token will be used when processing token
│ │ │ +# introspection. Valid values are: "access_token" or "id_token" (string value)
│ │ │ +#access_token_type = <None>
│ │ │ +
│ │ │  # A key to be used in the Identity Provider access token endpoint to pass the OTP value. E.g. totp (string value)
│ │ │  #idp_otp_key = <None>
│ │ │  
│ │ │ -# OAuth 2.0 Access Token (string value)
│ │ │ -#access_token = <None>
│ │ │ +# The endpoint that will always be used (string value)
│ │ │ +# Deprecated group/name - [source_cloud]/url
│ │ │ +#endpoint = <None>
│ │ │  
│ │ │  # OAuth 2.0 Device Authorization Endpoint. Note that if a discovery document is being passed this option will override the endpoint provided
│ │ │  # by the server in the discovery document. (string value)
│ │ │  #device_authorization_endpoint = <None>
│ │ │  
│ │ │  # PKCE Challenge Method (RFC 7636) (string value)
│ │ │  #code_challenge_method = <None>
│ │ │  
│ │ │ -# OAuth Consumer ID/Key (string value)
│ │ │ -#consumer_key = <None>
│ │ │ +# OAuth 2.0 Access Token (string value)
│ │ │ +#access_token = <None>
│ │ │  
│ │ │ -# OAuth Consumer Secret (string value)
│ │ │ -#consumer_secret = <None>
│ │ │ +# OpenID Connect Redirect URL (string value)
│ │ │ +#redirect_uri = <None>
│ │ │  
│ │ │ -# OAuth Access Key (string value)
│ │ │ -#access_key = <None>
│ │ │ +# OAuth 2.0 Authorization Code (string value)
│ │ │ +# Deprecated group/name - [source_cloud]/authorization_code
│ │ │ +#code = <None>
│ │ │  
│ │ │ -# OAuth Access Secret (string value)
│ │ │ -#access_secret = <None>
│ │ │ +# Methods to authenticate with. (string value)
│ │ │ +#auth_methods = <None>
│ │ │  
│ │ │  # PEM encoded Certificate Authority to use when verifying HTTPs connections. (string value)
│ │ │  #cafile = <None>
│ │ │  
│ │ │  # PEM encoded client certificate cert file (string value)
│ │ │  #certfile = <None>