Package: netmrg Version: 0.20-7.2 Severity: important Tags: patch Dear Maintainer,
While working on Reproducible Builds effort[0], I found that netmrg could not be built reproducibly because in the var/lib/rrd/Makefile.am, rrdtool is picking current time to create the database. So, in order to make it reproducible, need to pass '--start' argument with value as 'SOURCE_DATE_EPOCH'[1] to the rrdtool. Please find attached patch below for the changes in the Makefile.am. But the changes can be implemented only if netmrg is upgraded to follow latest debian/rules and debian/compat because currently it won't pick any changes in the Makefile as it's following old debian rules and debian/compat(i.e. equal to 5) and so it gets the Makefile shipped in the tarball. So, once the debian/rules and debian/compat (>=10) are upgraded to work with latest debhelper, dh-autoreconf can function and regenerate Makefile on every build and therefore, the changes in the patch(given below) can be implemented and can work towards making netmrg reproducible. Please let me know if you have any questions regarding this. [0] https://reproducible-builds.org/ [1] https://reproducible-builds.org/specs/source-date-epoch/ Thank you Snahil Singh ===================== begin patch ========================== --- netmrg-0.20.orig/var/lib/rrd/Makefile.am +++ netmrg-0.20/var/lib/rrd/Makefile.am @@ -11,7 +11,7 @@ netmrg_var_lib_DATA = $(RRDS) $(RRDS) : @echo " RRD $@" - @$(RRDTOOL) create zero.rrd DS:mon_25:GAUGE:600:U:U RRA:AVERAGE:0:1:1 RRA:LAST:0:1:1 RRA:MAX:0:1:1 + @$(RRDTOOL) create --start $(SOURCE_DATE_EPOCH) zero.rrd DS:mon_25:GAUGE:600:U:U RRA:AVERAGE:0:1:1 RRA:LAST:0:1:1 RRA:MAX:0:1:1 ============================================================ -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.9.93-linuxkit-aufs (SMP w/2 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=C (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /usr/bin/dash Init: unable to detect Versions of packages netmrg depends on: ii adduser 3.118 pn apache2 | httpd <none> ii debconf [debconf-2.0] 1.5.69 pn default-mysql-client | virtual-mysql-client <none> ii libc6 2.27-7 ii libgcc1 1:8.2.0-9 ii libmariadbclient18 1:10.1.35-1 ii libsnmp30 5.7.3+dfsg-4+b1 ii libstdc++6 8.2.0-9 ii libxml2 2.9.4+dfsg1-7+b1 pn php | php-cgi <none> pn php-cli <none> pn php-mysql <none> ii rrdtool 1.7.0-1+b3 pn wwwconfig-common <none> ii zlib1g 1:1.2.11.dfsg-1 netmrg recommends no packages. Versions of packages netmrg suggests: pn default-mysql-server | virtual-mysql-server <none>
