Your message dated Tue, 31 Jan 2017 17:49:03 +0000 with message-id <e1cycyb-000cmy...@fasolo.debian.org> and subject line Bug#852289: fixed in python-passlib 1.7.1-1 has caused the Debian Bug report #852289, regarding python-passlib: please make the build reproducible (timestamps) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 852289: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=852289 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: python-passlib Version: 1.7.0-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, While working on the "reproducible builds" effort [1], we have noticed that python-passlib could not be built reproducibly. The version string of the package includes a timestamp that is generated at build time. The attached patch fixes this by using SOURCE_DATE_EPOCH as the timestamp for the version string. Once applied, python-passlib can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- Dholediff -Nru python-passlib-1.7.0/debian/changelog python-passlib-1.7.0/debian/changelog --- python-passlib-1.7.0/debian/changelog 2016-11-28 17:31:28.000000000 +0100 +++ python-passlib-1.7.0/debian/changelog 2017-01-23 10:36:30.000000000 +0100 @@ -1,3 +1,11 @@ +python-passlib (1.7.0-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Use date from SOURCE_DATE_EPOCH for version number to make the build + reproducible. + + -- red <red@repro> Mon, 23 Jan 2017 10:36:30 +0100 + python-passlib (1.7.0-1) unstable; urgency=medium * Team upload. diff -Nru python-passlib-1.7.0/debian/patches/reproducible-version-name.patch python-passlib-1.7.0/debian/patches/reproducible-version-name.patch --- python-passlib-1.7.0/debian/patches/reproducible-version-name.patch 1970-01-01 01:00:00.000000000 +0100 +++ python-passlib-1.7.0/debian/patches/reproducible-version-name.patch 2017-01-23 10:36:30.000000000 +0100 @@ -0,0 +1,20 @@ +Description: Generate a reproducible version name + Use date from SOURCE_DATE_EPOCH for version number to make the build + reproducible. +Author: red <red@repro> + + +Index: python-passlib-1.7.0/setup.py +=================================================================== +--- python-passlib-1.7.0.orig/setup.py ++++ python-passlib-1.7.0/setup.py +@@ -58,7 +58,8 @@ if os.environ.get("PASSLIB_SETUP_TAG_REL + stamp = stamp.decode("ascii") + except (OSError, subprocess.CalledProcessError): + # fallback - just use build date +- stamp = time.strftime("%Y%m%d%H%M%S") ++ build_date = int(os.environ.get('SOURCE_DATE_EPOCH', time.time())) ++ stamp = time.strftime("%Y%m%d%H%M%S", time.gmtime(build_date)) + + # modify version + if version.endswith((".dev0", ".post0")): diff -Nru python-passlib-1.7.0/debian/patches/series python-passlib-1.7.0/debian/patches/series --- python-passlib-1.7.0/debian/patches/series 2016-11-28 17:31:28.000000000 +0100 +++ python-passlib-1.7.0/debian/patches/series 2017-01-23 10:36:30.000000000 +0100 @@ -1 +1,2 @@ 0001-Disable-Django-support.patch +reproducible-version-name.patch
--- End Message ---
--- Begin Message ---Source: python-passlib Source-Version: 1.7.1-1 We believe that the bug you reported is fixed in the latest version of python-passlib, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 852...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Barry Warsaw <ba...@debian.org> (supplier of updated python-passlib package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Tue, 31 Jan 2017 11:48:36 -0500 Source: python-passlib Binary: python-passlib python3-passlib Architecture: source all Version: 1.7.1-1 Distribution: unstable Urgency: medium Maintainer: Barry Warsaw <ba...@debian.org> Changed-By: Barry Warsaw <ba...@debian.org> Description: python-passlib - comprehensive password hashing framework python3-passlib - comprehensive password hashing framework Closes: 852289 Changes: python-passlib (1.7.1-1) unstable; urgency=medium . * Team upload. * New upstream release. (Closes: #852289) * d/patches/0001-Disable-Django-support.patch: Dropped as upstream issue should now be fixed. Checksums-Sha1: d08054c7801f3519012dabd243bfdce260b1154e 2200 python-passlib_1.7.1-1.dsc 1fccaee7a5a158ee04274e18f4927a6a603c6901 645724 python-passlib_1.7.1.orig.tar.gz 2cf8b62b20f6105de87ac0ebaeae6dbc595ed9e8 13724 python-passlib_1.7.1-1.debian.tar.xz bb819c5cfc1c63f3c873ae51775cbdb4fbc1af45 348248 python-passlib_1.7.1-1_all.deb f406a1905fa402c573b994872b30e6f3238995c6 5803 python-passlib_1.7.1-1_amd64.buildinfo b9d8a92bdb373d592256db58e31e4ed570c60887 347580 python3-passlib_1.7.1-1_all.deb Checksums-Sha256: c9c38982ffee05f8d3696674edaa2caab8bf9848fd9fe27275eae6e06e41e3a2 2200 python-passlib_1.7.1-1.dsc 3d948f64138c25633613f303bcc471126eae67c04d5e3f6b7b8ce6242f8653e0 645724 python-passlib_1.7.1.orig.tar.gz 67081dd31c183318cc4b660887cf872662ad385a76dc752903801cb407c5cfa4 13724 python-passlib_1.7.1-1.debian.tar.xz 7ef0e92215c20b4e771113f583b10e97e33e0c9c137669e13819d0e6582c0f7c 348248 python-passlib_1.7.1-1_all.deb 6e6cdbd444be50880666340ddfe96b2aa8899d95d37cfdef29bd19a4686e316d 5803 python-passlib_1.7.1-1_amd64.buildinfo cd398a4fa1cb4f57c2e6cc86b2ed93fa48d8324d266b7849427b78fc31dfd735 347580 python3-passlib_1.7.1-1_all.deb Files: 29e8f3aedc03934e9b7580952e2b5c87 2200 python extra python-passlib_1.7.1-1.dsc 254869dae3fd9f09f0746a3cb29a0b15 645724 python extra python-passlib_1.7.1.orig.tar.gz 6bc1d17c148e68860d4d5a723d7c828f 13724 python extra python-passlib_1.7.1-1.debian.tar.xz 4fa23afb983fb4b25309a29b24bf1de9 348248 python extra python-passlib_1.7.1-1_all.deb da7261ea83973c73a069268b175b38cd 5803 python extra python-passlib_1.7.1-1_amd64.buildinfo 6df9e7c408eecba7aff81e9578925958 347580 python extra python3-passlib_1.7.1-1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEhBcVftvnPZ6sHlObEm61Y6dLBr8FAliQyBgACgkQEm61Y6dL Br826A//cI+MguPCEzmNYIUnzhGVkZr5U5YNhjhxWcLsyxKgwX2ads36jMtu3PdN WRcUDxwrlDmjW4znzSnDS8nIasTm3JuytLrfI67ADjx77x2q1JKHMAA+swzWrt53 Z4k9MxpYetB7gqTnWy3lhdvDb/ZX3VuDmBC9kggotqulhsTUeYAbxQbHhna415cu Kzw/baAyDtNUYJPVqGULDu/SFnDXzRAQMArVtKSf9UwuHpUCJ0d4w8tBFoFdnlXr c4uXtAzNyqzEvabC8lEElTtdqBXQUspoKWt6pOiQHoOAZzVjaz+1EJBKYVGmaB/S ljbS6xZNTb1XMGMaiBw++M17E3bEMbVd9DoyRFNuZJX/9yfIw49/vjTPqyylHpUz Umtm+xf5YSOsuKDtLUAocGAk5iU5JZoBDUHi/n28wrhREV5Rw2F18zwILVN2aSUd ysXUrVdFco/yxlo/Qz2/qC3EsW2x7o7gPq/nv7NxFdWklUmj4ngUDFKwSEO40nft c+PbVDwyXP2wFmG+jRtvPZy7OG+kbBItGNh3F8u8aAeDXV0e1SiTIok0x6z6KQzV kRrgfyHB3O4QqvYCPRxNMYI5YNLactSFQttglrsA1CS7s+h0j8NxkBUGteWtroKo SjjVoh91bywoX2v50At/2NlD1AxO5qETsZKk+mjtz9ued3SXRg4= =NXVq -----END PGP SIGNATURE-----
--- End Message ---
_______________________________________________ Python-modules-team mailing list Python-modules-team@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/python-modules-team
