Hi, I wonder if it was stripped out. I also opened a bug with the patch.
I'm trying to re-attach here. Thanks! -Santiago. On Mon, Dec 04, 2017 at 10:33:02PM -0500, Christian Robert wrote: > I see no patch attached. > > Xtian. > > On 2017-12-04 17:53, Santiago Torres-Arias wrote: > > Hi, > > > > I'm a member of the Arch Linux Security team working on the reproducible > > builds initiative. Right now, apl compiles almost reproducibly, with the > > only caveat of embedding some time-based information into a header file. > > It would be nice if this could be overriden with an environment variable > > (or stripped out whatsoever). > > > > I'm attaching a patch on how I believe this could be achieved. > > > > Thanks! > > -Santiago. > >
--- apl-1.7/src/buildtag 2017-03-17 10:46:53.000000000 -0400
+++ apl-1.7.new/src/buildtag 2017-11-30 11:53:00.173223737 -0500
@@ -15,8 +15,15 @@ if [ -x ./config.status ]
then
CONFIGURE_OPTS=`../config.status -V | grep "with options" | sed
's/[^"]*//'`
fi
-BUILD_DATE=`date -u "+%F %R:%S %Z"`
-BUILD_OS=`uname -s -r -m`
+
+if [ -n "$SOURCE_DATE_EPOCH" ]
+then
+ BUILD_DATE=`date -u "%F %R:%S %Z" --date=@$SOURDCE_DATE_EPOCH`
+ BUILD_OS=""
+else
+ BUILD_DATE=`date -u "+%F %R:%S %Z"`
+ BUILD_OS=`uname -s -r -m`
+fi
BUILD_TAG="\" / $SVNINFO\", \"$BUILD_DATE\", \"$BUILD_OS\",
\"$CONFIGURE_OPTS\""
# write buildtag.hh
signature.asc
Description: PGP signature
