Bug#801329: dpkg: scripts/t/mk.t uses system modules to compute reference values

Source: dpkg Version: 1.18.3 Severity: normal Tags: patch Hi! scripts/t/mk.t will shell out to dpkg-architecture.pl and dpkg-buildpackage.pl. Both scripts are called from the current development tree. But they will use Perl modules to compute some of their values. As PERL5LIB is not set, system

Bug#801092: [Pkg-mozext-maintainers] Bug#801092: xul-ext-https-everywhere: xul-ext-httpseverywhere still shows it is unsigned

shirish शिरीष: > Iceweasel still shows the extension unsigned, this should not happen, > corect ? I don't know what you are talking about. Could you give me more input, please? -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#780628: [Pkg-privacy-maintainers] Bug#780628: parcimonie: support gpg2

clone 780628 -1 reassign -1 gnupg2 retitle -1 gnupg2: please add support for reaching out to keyservers through Tor tags -1 + upstream block 780628 by -1 thanks Daniel Kahn Gillmor: > > That said, it seems Werner is thinking about this problem upstream, by > > adding --use-tor and --force-tor

Bug#798325: the tag on github for the new release.

shirish शिरीष: > I am able to see this tag > > https://github.com/EFForg/https-everywhere/releases/tag/5.1.1 > > What more is needed, can anybody share ? All previous tags were pushed on git.torproject.org. This situation is annoying. I'll see if I can make an upload from this tag. -- Lunar

Bug#799690: file: regression in MIME encoding lookups

Package: file Version: 1:5.25-1 Severity: important Hi! The latest upload of file broke diffoscope test suite. With file/1:5.24-2: $ file --mime-encoding tests/data/binary1 tests/data/binary1: binary With file/1:5.25-1: $ file --mime-encoding tests/data/binary1

Bug#774274: fontforge: please allow scripts to set the font modification time

Jérémy Bobbio: > For font compilation to be deterministic, we need a way to set the font > modification time to a defined value instead of the current time. > > We thus add a new function “SetModificationTime” to the scripting language. > It takes a single string argument looking l

Bug#774148: Reported upstream

Nathan Willis: > I've reported this upstream at > https://github.com/fontforge/fontforge/issues/2490 Thanks! I'm glad to see this moving forward. :) -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism

Bug#783152: kmod: please make the build reproducible

Control: block -1 by 791815 Control: tag -1 + patch Hi! Marco d'Itri: > On Apr 23, Jérémy Bobbio <lu...@debian.org> wrote: > > The attached patch sets a revision date for each manpage to avoid the > > current date to be captured. Once applied, kmod can be built > >

Bug#795056: SOURCE_DATE_EPOCH

Camm Maguire: > Greetings! Following the link you reference, it appears that I do not > need to export this variable, right? Debhelper is at a later version in > unstable. The documentation was a bit confusing. Thanks: I've just fixed it. SOURCE_DATE_EPOCH will only be exported for packages

Bug#778681: Add Recommends dep (ruby-redcarpet) for rendering README

Hi Rowan, First, I owe you big apologies for taking so long to reply to your patches. I shall buy you a $BEVERAGE if we meet one day. Rowan Thorpe: > Following on from the patches I provided for bug #774859 and then for #774944 > this patch just adds ruby-redcarpet as a Recommends, as it is used

Bug#778754: Add defaults file, improve init script

Hi! Rowan Thorpe: > This is another patchset following from patches I provided for #774859 and > then > #774944. The first patch adds a defaults file with "VERBOSE='yes'", handling > in > the init script for defaults overrides, and extra typical initscript > sanity-checking and instructional

Bug#798325: new upstream (5.1.1)

Daniel Baumann: > it would be nice if you could upgrade to the current upstream version > (5.1.1). Upstream has still not pushed the tag on the Git repository. I'm asking again. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#798359: lintian: list of autopkgtest restrictions is not up-to-date

Package: lintian Version: 2.5.36.1 Hi! It seems that the list of known restrictions for debian/tests/control is not up-to-date. Several packages raise unknown-runtime-tests-restriction [1] despite using restrictions properly listed in the reference documentation [2]. [1]:

Bug#798386: ITP: ruby-network-interface -- Ruby library to get network interface information

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio <lu...@debian.org> * Package name: ruby-network-interface Version : 0.0.1 Upstream Author : Brandon Turner, Lance Sanchez * URL : https://github.com/rapid7/network_interface * License : Expat Progr

Bug#798384: strip-nondeterminism: should preserve file permissions

Package: strip-nondeterminism Severity: important Hi! I'm opening a bug report to track the following issue discussed on the reproducible-builds mailing list: Eugene Zhukov: > On Mon, Sep 7, 2015 at 8:11 PM, Andrew Ayer wrote: > > On Mon, 7 Sep 2015 19:49:56 +0300 > >

Bug#798224: (no subject)

Control: tag -1 moreinfo > Subject: florence: exits when zoom in/out, does not show up when clicking > into any text box, no tray icon etc Sorry but I can't work with so little information. Could you fill in the template? > *** Reporter, please consider answering these questions, where

Bug#798224: (no subject)

colosist...@gmail.com: > Sorry for the too short report. This was the first time I used the > command line bug reporter as a necessary package is not installrd on > Debian for the GUI version. So I missed something. I will install that > and send a new report with more data. Using a different

Bug#798088: linux: /proc/sys/kernel/random/write_wakeup_threshold can be set too an unreachable amount of entropy

Package: linux-image-4.1.0-2-amd64 Severity: normal Hi! I was reported #740117 on haveged. The bug is basically that when the entropy watermark is set too high, haveged will busy loop like hell. I've worked around the issue in haveged the same way rngd does, but I believe the problem is in the

Bug#797560: diffoscope: option to treat absent files as empty

Control: tag -1 + pending Jakub Wilk: > I'd like an option for treating absent files as if they were empty, similar > to "diff -N". This has not been easy, but this will be in the next release (--new-file is the switch). -- Lunar.''`. lu...@debian.org

Bug#797525: [Reproducible-builds] Bug#797525: diffoscope: multiarch mode

Control: retitle -1 diffoscope: provide a way to ignore all differences in control.tar Jérémy Bobbio: > Jakub Wilk: > > I want to use diffoscope to compare two "Multi-Arch: same" debs of the same > > version but different architecture, to see differences that will

Bug#788364: libmagic1: misdetect some Coreboot images as text

retitle 788364 diffoscope: garbled output when comparing some Coreboot images clone 788364 -1 reassign -1 libmagic1 severity -1 libmagic1 normal retitle -1 libmagic1: misdetect Coreboot images as text files thanks Hi Christoph, diffoscope is the tool that we have created as part of the

Bug#797759: [Reproducible-builds] Bug#797759: Bug#797759: diffoscope: tar.gz and tar.bz2 archives compared wrongly

Michele Alessandrini: > Il 02/09/2015 14:38, Jérémy Bobbio ha scritto: > >Control: retitle -1 diffoscope: implement fuzzy-matching across containers > >Control: severity -1 wishlist > > > >Michele Alessandrini: > >>When comparing tar.gz or tar.bz2 archives cont

Bug#797759: [Reproducible-builds] Bug#797759: diffoscope: tar.gz and tar.bz2 archives compared wrongly

Control: retitle -1 diffoscope: implement fuzzy-matching across containers Control: severity -1 wishlist Michele Alessandrini: > When comparing tar.gz or tar.bz2 archives containing text files, some > of which different, the output is a binary diff. Perhaps it only > applies decompression and

Bug#795984: [Pkg-postgresql-public] Bug#795984: postgresql-plproxy: please make the build reproducible

Peter Eisentraut: > Well, nothing is mandatory for building a Debian package, since you can > just assemble the archives manually. But you could say, if you want a > reproducible build, you need to use dpkg-buildpackage. We want to provide ways to reproduce an initial build. I don't consider

Bug#797525: [Reproducible-builds] Bug#797525: diffoscope: multiarch mode

clone 797525 -1 retitle -1 diffoscope: provide option to disable fuzzy-matching thanks Hi! Jakub Wilk: > I want to use diffoscope to compare two "Multi-Arch: same" debs of the same > version but different architecture, to see differences that will cause > co-installation conflicts. > > This

Bug#797297: RM: zope-quotafolder -- ROM; dead upstream

Package: ftp.debian.org Severity: normal Hi! There has been no new releases of zope-quotafolder since 2002. I'm not even sure it can still be used in any ways. Please remove it from Debian. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get

Bug#797218: O: openbgpd

Package: wnpp Severity: normal Having openbgpd in Debian was a pretty fun experiment to show that kFreeBSD could be useful, but I actually never used it and stop caring a while ago. I'll probably ask for removal before stretch if nobody takes over. -- Lunar.''`.

Bug#783210: glibc: please make the package build reproducibly

Aurelien Jarno: I have just applied the part concerning point 1. For the 2 other points, from what I have understood there are now patches for gcc to define __DATE__ and __TIME__. So the question is should we still want to get this changes in the glibc? In that case I would try to get these

Bug#795984: [Pkg-postgresql-public] Bug#795984: postgresql-plproxy: please make the build reproducible

Hi Peter, Peter Eisentraut: On 8/18/15 9:15 AM, Dhole wrote: The attached patch sets the timezone to UTC before calling asciidoc to avoid timezone differences in the generated docs. Once applied, postgresql-plproxy can be built reproducibly in our current experimental framework. Stupid

Bug#796316: RM: torbutton -- ROM; deprecated upstream as standalone extension

Package: ftp.debian.org Severity: normal Hi! Please remove torbutton from the Debian archive. The extension has long since been unsupported by upstream as a standalone Firefox extension. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get

Bug#796264: RM: debbindiff -- ROM; renamed to diffoscope

Package: ftp.debian.org Severity: normal Dear FTP masters, Please remove the debbindiff source package from the archive. The software has been renamed to diffoscope and the new package has already entered the archive. ♥ -- Lunar.''`. lu...@debian.org

Bug#796039: diffoscope: please recognize big-endian Haskell .hi files

Package: diffoscope Severity: normal diffoscope currently doesn't know how to parse Haskell .hi files written on big-endian architectures as such. This should be fixed. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism

Bug#795064: python-libarchive-c: Invalid test dependencies

with an invalid format: Depends: python-libarchive-c python-pytest python3-libarchive-c python3-pytest These need to be comma separated, just like for debian/control. It would be great if Lintian could get a test to ensure others and myself will not make the same mistake! :) -- Jérémy

Bug#794892: autogen: please make the build reproducible (cpu, locale, timestamps)

Bruce Korb: Obviously, I can make no changes to Debian rules, but I have now added a working --enable-timeout=$WHATEVER configure option: http://autogen.sourceforge.net/data/autogen-5.18.6pre11.tar.xz Thanks Bruce. I believe this is going to be of interest to all binary distributions.

Bug#794096: squashfs-tools: please add --numeric-uid-gid to unsquashfs

Hi! Maria Valentina Marin: On Thu, 30 Jul 2015 15:38:37 +0200 =?iso-8859-1?B?Suly6W15?= Bobbio lu...@debian.org wrote: Adding a `--numeric-uid-gid` (like cpio) or `--numeric-owner` (like Tar) option would be greatly appreciated. `- Attached patch

Bug#794456: icedove-dev: ABI defined by ical.h changes at every build

Package: icedove-dev Version: 38.0.1-1 Severity: important User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness Hi! During a build reproducibility test, it was found that the `ical.h` header provided by the icedove-dev package defines an ABI that changes with every build. That

Bug#794219: ITP: tlsh -- fuzzy hashing library

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio lu...@debian.org * Package name: tlsh Version : 3.2.1 Upstream Author : Trend Micro * URL : https://github.com/trendmicro/tlsh * License : Apache-2 Programming Lang: C++, Python Description : fuzzy

Bug#794096: squashfs-tools: please add --numeric-uid-gid to unsquashfs

Package: squashfs-tools Version: 4.2+20130409-2 Severity: wishlist Hi! My understanding is that squashfs stores a numeric UID and GID for each files. When called with `-lls`, unsquashfs will then try to resolve these numeric values to the corresponding system user and group (using getpwuid(3)

Bug#793755: ITP: python-libarchive-c -- Python interface to libarchive

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio lu...@debian.org * Package name: python-libarchive-c Version : 2.1 Upstream Author : Changaco * URL : https://github.com/Changaco/python-libarchive-c * License : LGPL-2+ Programming Lang: Python

Bug#791823: debhelper: set SOURCE_DATE_EPOCH env var for reproducible builds

Hi! Dhole: Also, in order to help reproducible builds, a fixed timezone is exported (TZ=UTC). I am not convinced this change is a good idea. While reviewing new uploads to the Debian archive, I have at least spotted these lines in exim4/4.86~RC4-1 changelog [1]: * unexport/undefine TZ in

Bug#791455: [Pkg-anonymity-tools] Bug#791455: obfs4proxy: Unable to install/configure obfs4proxy

Control: reassign -1 adequate shirish: I dunno if this is related or not to #777245 but was unable to install it on a client machine. […] E: Problem executing scripts DPkg::Post-Invoke 'adequate --help /dev/null 21 || exit 0; DEBIAN_FRONTEND=readline exec adequate --debconf --user nobody

Bug#791533: python-lmdb: typo in package description

Package: python-lmdb Version: 0.86-1 Severity: minor Hi! The package description reads “Python binding for LMDB Lightning Memory-Mapped Database”. Meanwhile, the first line of the extended description contains “Lighting Memory-Mapped Database (LMDB)”. I guess either there's an extra 'n' or one

Bug#790868: [Reproducible-builds] Bug#790868: sbuild: Please allow sbuild to use a deterministic build path to build packages

Hi! Maria Valentina Marin: The attached patch allows users to specify a deterministic build path by using the new command line option --build-path or the configuration variable $build_path in the ~/.sbuilrc. I don't know enough of sbuild to comment on the patch, but: +.BR

Bug#790415: tar: please add --clamp-mtime to only update mtimes after a given time

Package: tar Version: 1.27.1-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain timestamps Hi! Within the “reproducible builds” effort [1], we are always trying to find better solutions to make it either to create determenistic build systems.

Bug#790490: python-rpm: fail to load when rpm-common is not installed

Package: python-rpm Version: 4.12.0.1+dfsg1-2 Severity: serious Hi! python-rpm is unusable when rpm-common is not installed: # pbuilder --login # apt-get install python-rpm # python Python 2.7.10 (default, Jun 1 2015, 16:21:46) [GCC 4.9.2] on linux2 Type help, copyright, credits or license

Bug#789715: simgrid: please make the build reproducible

Martin Quinson: On Wed, Jun 24, 2015 at 11:09:47AM +0200, marivalen wrote: Using `GZIP=-9n cmake -E tar` does not work. It seems that cmake does not pass environment variables to the command it runs. This explains the introduction of the env cmake command. What about patching the cmake

Bug#719845: [PATCH] Deterministic file order for control and data archives

Jérémy Bobbio: Jérémy Bobbio: Here are four patches based on the current master (1e059955) that will write files in deterministic order in the control and data archives. File names are sorted by forking `sort` before being piped to `tar`. Attached are the patch based on current master

Bug#782905: [Reproducible-builds] Bug#782905: seabios: please make seabios build reproducible

Control: tag -1 - patch Holger Levsen: On Sonntag, 19. April 2015, Lunar wrote: While working on the “reproducible builds” effort [1], we have noticed that seabios could not be built reproducibly. upstream is working on fixing this, see

Bug#788568: [Reproducible-builds] Bug#788568: debbindiff: leaves temporary files under /tmp

Hi! Mattia Rizzolo: In jenkins.d.n i can see this: mattia@jenkins ~ % find /tmp -maxdepth 1 -name tmp*debbindiff | xargs ls -ld drwx-- 2 jenkins jenkins 4096 Jun 8 12:02 /tmp/tmp114lHtdebbindiff drwx-- 2 jenkins jenkins 4096 Jun 4 17:58 /tmp/tmp12TNVEdebbindiff drwx-- 2

Bug#788505: [Python-modules-team] Bug#788505: python-pypump: [PATCH] please make the build reproducible

(Cc'ing the reproducible builds mailing list instead of specific team members.) W. Martin Borgert: while I'm all in favour of reproducible builds, I'm not happy with messing up hundreds of packages debian/rules files. Why not change the defaults of sphinx or dh or whatever and just rebuild

Bug#787980: dpkg: please normalize file permissions when creating control.tar

Jérémy Bobbio: The attached patch is based on the available master branch. I apologize. Here it is. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism

Bug#787980: dpkg: please normalize file permissions when creating control.tar

Package: dpkg Version: 1.18.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: umask toolchain Hi! As part of the “reproducible builds” effort, we are curretly trying to have Debian package build identically despite being built under different umasks.

Bug#787126: nis: please make the build reproducible

Mark Brown: On Thu, May 28, 2015 at 11:09:13PM +0200, Dhole wrote: + find $(DEBDIR) -depth -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' This looks very odd, why is this not part of dpkg? See https://bugs.debian.org/719844#30

Bug#787501: golang-go.crypto: please package new upstream version

Source: golang-go.crypto Version: 0.0~hg190-1 Severity: important Hi! At least obfs4proxy now FTBFS with the version of go.crypto currently in unstable. Upstream has moved and is now at: https://golang.org/x/crypto Thanks! -- Lunar.''`. lu...@debian.org

Bug#786959: python3.5: please make the build reproducible

Matthias Klose: On 05/27/2015 11:26 AM, Jérémy Bobbio wrote: --- python3.5-3.5.0~b1/debian/rules2015-05-26 02:07:36.0 +0200 +++ python3.5-3.5.0~b1/debian/rules2015-05-27 09:28:58.0 +0200 @@ -23,6 +23,17 @@ PKGSOURCE := $(call vafilt,$(CHANGELOG_VARS

Bug#786959: python3.5: please make the build reproducible

Jérémy Bobbio: Matthias Klose: As you submit more of this kind of patches for other packages, please keep these patches as local as possible. And these flags are usually called CPPFLAGS, not CCPFLAGS. Sorry but I don't understand your last two sentences. The latter one especially

Bug#786965: [Reproducible-builds] Bug#786965: python3.4: please make the build reproducible

diff -Nru python3.4-3.4.3/debian/rules python3.4-3.4.3/debian/rules --- python3.4-3.4.3/debian/rules 2015-04-30 13:58:06.0 +0200 +++ python3.4-3.4.3/debian/rules 2015-05-27 10:35:12.0 +0200 @@ -23,6 +23,17 @@ PKGSOURCE := $(call vafilt,$(CHANGELOG_VARS),Source)

Bug#786959: python3.5: please make the build reproducible

--- python3.5-3.5.0~b1/debian/rules 2015-05-26 02:07:36.0 +0200 +++ python3.5-3.5.0~b1/debian/rules 2015-05-27 09:28:58.0 +0200 @@ -23,6 +23,17 @@ PKGSOURCE := $(call vafilt,$(CHANGELOG_VARS),Source) PKGVERSION := $(call vafilt,$(CHANGELOG_VARS),Version)

Bug#786965: python3.4: please make the build reproducible

to match the latest debian/changelog entry. +- Pass time of latest debian/changelog entry to sphinx via SPHINXOPTS. +- Do not store a timestamps when compressing devhelp. + + -- Jérémy Bobbio lu...@debian.org Wed, 27 May 2015 10:15:54 +0200 + python3.4 (3.4.3-6) unstable; urgency=medium

Bug#786959: python3.5: please make the build reproducible

Jérémy Bobbio: Tags: patch For real. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- diff -Nru python3.5-3.5.0~b1/debian/changelog

Bug#786978: python2.7: please make the build reproducible

the build reproducible: +- Create a datetime.h header with DATE and TIME macros set to match the + latest debian/changelog entry. +- Pass time of latest debian/changelog entry to sphinx via SPHINXOPTS. +- Do not store a timestamps when compressing devhelp. + + -- Jérémy Bobbio lu

Bug#786959: python3.5: please make the build reproducible

Source: python3.5 Version: 3.5.0~b1-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that python3.5 could not be built reproducibly. The attached patch fixes several

Bug#786846: [Reproducible-builds] Bug#786846: alt-ergo: [PATCH] please make the build reproducible - set build date

Juan Picca: --- a/Makefile.users +++ b/Makefile.users @@ -1,4 +1,5 @@ ARCH = $(shell uname -m) +BUILD_DATE = $(shell LANG=en_US; date) I would use `?=` instead of `=` here to highlight that it can be preset. I'm actually suprised that it works like this, but tests confirmed it. But hey,

Bug#782878: [Reproducible-builds] Bug#782878: Bug#782878: [debhelper-devel] Bug#782879 + Bug#782878: lib{test-log4perl, scalar-defer}-perl: please make the build reproducible

Steven Chamberlain: * run it on a directory before generating a .deb; might make the data.tar.xz reproducible in some cases even without patching dpkg yet? We are doing that in `dh_builddeb`. An extra 20% of the archive became reproducible when we moved the fix here instead of a

Bug#786755: [Reproducible-builds] Bug#786755: devscripts: please include a reproducible builds script

user reproducible-bui...@lists.alioth.debian.org usertag 786755 + infrastructure thanks Antonio Terceiro: Please include a script that will take a source package and build it twice in a row in a way that is as similar as possible to the way it is done by the Reproducible Builds initiative.

Bug#786396: [reproducible-builds] Classify issue by toolchain or package fix needed

Christoph Berg: An open question would be what to do for issues that need action on both sides, like the toolchain needs some reproducible option implemented, but then the package would need to invoke it as well, like it was the case for the doxygen html timestamps. (Though that very example

Bug#786568: linux-minidisc: please make the build reproducible

the build reproducible: +- Add a patch to use the time of the latest debian/changelog entry as the + build date. + + -- Jérémy Bobbio lu...@debian.org Fri, 22 May 2015 21:18:45 + + linux-minidisc (0.9.13-1) unstable; urgency=medium * New upstream release. diff -Nru linux-minidisc

Bug#786637: nvidia-settings: please make the build reproducible

Source: nvidia-settings Version: 340.46-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps username hostname Hi! While working on the “reproducible builds” effort [1], we have noticed that nvidia-settings could not be built reproducibly. The

Bug#786568: linux-minidisc: please make the build reproducible

Source: linux-minidisc Version: 0.9.13-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that linux-minidisc could not be built reproducibly. The attached patch sets

Bug#781782: iceweasel crashes when trying to go to https://mentors.debian.net/python-wget

Control: tag 781782 + confirmed forwaded-upstream Axel Beckert: shirish शिरीष wrote: Iceweasel crashed when I clicked on https://mentors.debian.net/package/python-wget as shared at https://lists.debian.org/debian-python/2015/04/msg2.html . I can confirm that. For me, conkeror using

Bug#774498: closed by Santiago Vila sanv...@debian.org (Bug#774498: fixed in base-files 9.1)

Santiago Vila: On Sat, May 16, 2015 at 12:38:50AM +0200, Jérémy Bobbio wrote: Sorry but since we are now testing umask variations as well, the new version is not considered reproducible. The attached patch will fix the issue. Oh my FSM. This is the neverending story. Kinda, kinda

Bug#774498: closed by Santiago Vila sanv...@debian.org (Bug#774498: fixed in base-files 9.1)

. * The package should now build reproducibly. Closes: #774498. Thanks to Jérémy Bobbio lu...@debian.org. Sorry but since we are now testing umask variations as well, the new version is not considered reproducible. The attached patch will fix the issue. Thanks! -- Lunar

Bug#783475: texi2html: [PATCH] Allow make the build of documentation reproducible adding the use-date flag.

Juan Picca: The attached patch adds the flag use-date that allows use the given string for the date, instead the generated timestamps. After review, the patch is either unneeded or incomplete. @@ -1910,6 +1911,8 @@ sub set_date() } $Texi2HTML::THISDOC{'today'} =

Bug#774498: base-files: please make the build reproducible

Hi! Santiago Vila: I'm thinking about the minimal find command which does the trick. The proposed line says this: + find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' Why -depth? If I were to

Bug#784538: file-rc: please make the package build reproducible

-0.8.16.0~reproducible1/debian/changelog 2015-05-06 13:43:38.0 + @@ -1,3 +1,10 @@ +file-rc (0.8.16.0~reproducible1) UNRELEASED; urgency=low + + * Use `sed -i` to keep permisions when modifying conffiles list. +This makes the result identical with different umasks. + + -- Jérémy Bobbio

Bug#784541: yasm: please make the package build reproducible

-2.0~reproducible1) UNRELEASED; urgency=low + + * Make the package build reproducible: +- 110_remove_build_date.diff: remove compilation date from + version strings. + + -- Jérémy Bobbio lu...@debian.org Wed, 06 May 2015 14:00:31 + + yasm (1.3.0-2) unstable; urgency=medium

Bug#784335: libapache2-mod-perl2: please make the package build reproducible

/debian/changelog @@ -1,3 +1,10 @@ +libapache2-mod-perl2 (2.0.9~1624218-2.0~reproducible1) UNRELEASED; urgency=low + + * Set PERL_HASH_SEED=0 when running configure to generate +identical code accross builds. + + -- Jérémy Bobbio lu...@debian.org Tue, 05 May 2015 16:13:37 +0200 + libapache2-mod

Bug#784325: kde-workspace: please make the package build reproducible

/sort_kdm_confproc_keys.diff @@ -0,0 +1,34 @@ +Description: sort keys in kdm confproc.pl + In order to get the same output accross builds, we + now sort keys in confproc.pl. +Author: Jérémy Bobbio lu...@debian.org + +--- kde-workspace-4.11.13.orig/kdm/confproc.pl kde-workspace-4.11.13/kdm/confproc.pl +@@ -85,7 +85,7

Bug#784254: ooniprobe: fails to purge: rmdir: failed to remove '/var/lib/ooni': No such file or directory

Iain R. Learmonth: The attached patch fixes this, and will also remove the log directory if it is empty. Thanks! + [ -f /etc/default/ooniprobe ] rm -f /etc/default/ooniprobe The test is not needed: $ rm -f /nonexististant echo No big deal No big deal -- Lunar

Bug#784318: gnome-desktop3: please make the build reproducible

to + be able to predefine GNOME_DATE. +- Set GNOME_DATE to the latest debian/changelog entry in + debian/rules. + + -- Jérémy Bobbio lu...@debian.org Tue, 05 May 2015 09:24:28 + + gnome-desktop3 (3.14.1-1) unstable; urgency=medium [ Tim Lunn ] diff -Nru gnome-desktop3-3.14.1/debian/patches

Bug#774347: closed by Clint Adams cl...@debian.org (Bug#774347: fixed in sed 4.2.2-5)

Control: reopen -1 Hi! Changes: sed (4.2.2-5) unstable; urgency=medium . [ Jérémy Bobbio ] * Fix mtimes before building binary packages. closes: #774347. * Stop recording current time when using gzip. Sorry Clint. This is not enough as we've introduced umask variations

Bug#774504: debianutils: please make the build reproducible

Hi! The attached patches make several small changes to debian/rules. Once applied, debianutils can be built reproducibly on our current experimental framework. This was merged in debianutils/4.5 but since umask variations are now considered, this is not enough. The attached patch should do

Bug#774422: perl: please make perl builds reproducible

Hi! Here's an update after rebasing my patches on 5.20.2-4. Niko Tyni: - the build system also embeds information about the build host, at least the kernel version and hostname. Those need to be stripped too. From 'perl -V': osname=linux, osvers=3.16.0-4-amd64,

Bug#784267: mpv: please make the build reproducible

Source: mpv Version: 0.9.1-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that foo could not be built reproducibly. The attached patch disable recording the build

Bug#784147: tracker.debian.org: please specify Content-Type and charset when serving changelogs

Package: tracker.debian.org Severity: minor Tags: newcomer Hi! Changelogs are currently served without any Content-Type specified. This means non-ascii characters are displayed wrong in browsers. HEAD https://tracker.debian.org/media/packages/p/pkg-perl-tools/changelog-0.20 | grep ^Content

Bug#781517: [Reproducible-builds] Bug#781517: tracker.d.o: please don't link ftbfs issues on reproducible.d.n

Holger Levsen: On Montag, 30. März 2015, Paul Wise wrote: These seem like FTBFS that should be reported, so the package maintainers patch out usage of the macros, especially as the plan was to enable warnings for them by default eventually. yes, they should be reported. thats why they

Bug#783647: win32-loader: please make the build reproducible

master—fixes timestamps related variations from the build system. Once applied, win32-loader can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds -- Jérémy Bobbio.''`. jeremy.bob...@irq7.fr

Bug#783515: memtest86+: please make package build reproducibly

Source: memtest86+ Version: 5.01-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Control: block -1 by 783513 Hi! While working on the “reproducible builds” effort [1], we have noticed that memtest86+ could not be built reproducibly. The

Bug#783515: memtest86+: please make package build reproducibly

Jérémy Bobbio: The attached patch […] For real, this time. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- diff -Nru memtest86+-5.01

Bug#783290: [Reproducible-builds] Bug#783290: rkward: Please make build reproducible

Philip Rinn: +# set built-time of GNUR packages to time of created binary package based on stamp in changelog +builttime = $(shell dpkg-parsechangelog -l$(CURDIR)/debian/changelog | awk -F': ' '/Date/ {print $$2}') Tips: In Jessie and beyond you can simply use `dpkg-parsechangelog -S Date`

Bug#783239: kexec-tools: please make the package build reproducibly

. + + -- Jérémy Bobbio lu...@debian.org Fri, 24 Apr 2015 13:46:29 +0200 + kexec-tools (1:2.0.7-5.1) unstable; urgency=medium * Non-maintainer upload. diff -Nru kexec-tools-2.0.7/debian/patches/allow-external-build-date.patch kexec-tools-2.0.7/debian/patches/allow-external-build-date.patch --- kexec

Bug#783255: debconf: please make the package build reproducibly

. + [ Jérémy Bobbio ] + * Use UTC when running xgettext for build reproducibility. + -- Colin Watson cjwat...@debian.org Thu, 19 Mar 2015 10:42:49 + debconf (1.5.56) unstable; urgency=medium diff --git a/po/Makefile b/po/Makefile index 515a562..357e1cf 100644 --- a/po/Makefile +++ b/po

Bug#783210: glibc: please make the package build reproducibly

running ./configure. + This is then used in nscd. +- Set the previously mentioned build date to the latest debian/changelog + entry. +- Create source tarball in a deterministic manner: adjust file + modification time, user, group, permissions, and file order. + + -- Jérémy Bobbio

Bug#783210: glibc: please make the package build reproducibly

Jérémy Bobbio: 3. nscd uses the date and time of the build as a version marker. So a patch is added to allow the build date to be set externally. The date of the latest debian/changelog entry will be used instead of the current time for Debian. Reiner Herrmann noticed that the patch

Bug#783131: dracut: please make the package build reproducibly

the package build reproducibly: +- Add revision date to manpages. + + -- Jérémy Bobbio lu...@debian.org Wed, 22 Apr 2015 17:52:09 + + dracut (040+1-1) unstable; urgency=low * new upstream, Closes: #739794, #758655, #754062, #755271 diff --git a/debian/patches/0001-Add-revision-date

Bug#783136: readline6: plese make the build reproducible

:25.0 + @@ -1,3 +1,11 @@ +readline6 (6.3-8.0~reproducible1) UNRELEASED; urgency=low + + * Make the package build reproducibly: +- Call dh_fixperms for arch-indep packages to avoid variations due to + umask. + + -- Jérémy Bobbio lu...@debian.org Wed, 22 Apr 2015 19:13:35 +

Bug#783149: shadow: please make the build reproducible

/changelog +++ b/debian/changelog @@ -19,6 +19,11 @@ shadow (1:4.2.1-1) UNRELEASED; urgency=low [ Laurent Bigonville ] * Move pam_selinux open call higher in the session stack. Closes: #747313 + [ Jérémy Bobbio ] + * Make the package build reproducibly: +- Add a patch to allow manpage

Bug#783151: mailman: please make the build reproducibly

Source: mailman Version: 2.1.18-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: umask Hi! While working on the “reproducible builds” effort [1], we have noticed that mailman could not be built reproducibly. The attached patch fix one occurence where

Bug#783151: [Reproducible-builds] Bug#783151: mailman: please make the build reproducibly

build reproducibly: +- Use install instead of cp for qmail-to-mailman.py to avoid + umask variations. + + -- Jérémy Bobbio lu...@debian.org Wed, 22 Apr 2015 21:54:14 + + mailman (1:2.1.18-2) unstable; urgency=high * Fix security issue: path traversal through local_part. diff -Nru

Bug#783152: kmod: please make the build reproducible

the package build reproducibly: +- Add revision date extracted from Git to manpages in order + to make them stable one build to another. + + -- Jérémy Bobbio lu...@debian.org Wed, 22 Apr 2015 22:06:45 + + kmod (20-1) unstable; urgency=medium * New upstream release. diff --git

<    1   2   3   4   5   6   7   8   9   10   >