Your message dated Mon, 24 Aug 2015 18:34:08 +0000
with message-id <[email protected]>
and subject line Bug#774463: fixed in tar 1.28-1
has caused the Debian Bug report #774463,
regarding tar: please stop recording current time when generating tar.1
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
774463: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=774463
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: tar
Version: 1.27.1-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that tar could not be built reproducibly.
The current time gets written to the tar.1 manpage. With the attached
patch, the time of the latest debian/changelog entry is used instead.
Once applied, the package can built reproducibly with our current
experimental framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
--
Lunar .''`.
[email protected] : :Ⓐ : # apt-get install anarchism
`. `'`
`-
From d7d8650b0ea2e2ca61f4b4c393e6e134fef21842 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=A9r=C3=A9my=20Bobbio?= <[email protected]>
Date: Sat, 3 Jan 2015 08:50:54 +0100
Subject: [PATCH] use date from debian/changelog in manpage
The current date and time were written to tar.1. This prevented tar from
building reproducibly. Instead, we now use the time of the latest entry
in debian/changelog. We also write the version of the package instead
of the full date and time as it becomes more meaningful in this context.
---
debian/tarman | 8 ++++++--
1 file changed, 6 insertions(+), 2 deletions(-)
diff --git a/debian/tarman b/debian/tarman
index 7016931..7ecb815 100644
--- a/debian/tarman
+++ b/debian/tarman
@@ -5,7 +5,11 @@
use strict;
-my $t = "".localtime(time);
+my $debian_version = `dpkg-parsechangelog | sed -n -e 's/^Version: //p'`;
+chomp $debian_version;
+my $debian_date = `date --date="\$(dpkg-parsechangelog | sed -n -e 's/^Date: //p')" +%s`;
+chomp $debian_date;
+my $t = "".localtime($debian_date);
my $datestr = substr($t,4,3)." ".substr($t,8,2).", ".substr($t,20,4);
@ARGV=qw(src/tar.c);
@@ -269,7 +273,7 @@ $function_letters =~ s/\n$//;
$option_letters =~ s/\n$//;
$env_variables =~ s/\n$//;
print <<".";
-.\\" generated by script on $t
+.\\" generated by script for $debian_version
.Dd $datestr
.Dt TAR 1
.Sh NAME
--
1.9.1
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: tar
Source-Version: 1.28-1
We believe that the bug you reported is fixed in the latest version of
tar, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Bdale Garbee <[email protected]> (supplier of updated tar package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 23 Aug 2015 19:56:52 +0200
Source: tar
Binary: tar tar-scripts
Architecture: source amd64
Version: 1.28-1
Distribution: unstable
Urgency: low
Maintainer: Bdale Garbee <[email protected]>
Changed-By: Bdale Garbee <[email protected]>
Description:
tar - GNU version of the tar archiving utility
tar-scripts - optional scripts for GNU version of the tar archiving utility
Closes: 774463 790415
Changes:
tar (1.28-1) unstable; urgency=low
.
* new upstream version
* patch from Reiner Herrman that sets timestamp in generated manpage to
latest changelog date to make building the package reproducible,
closes: #774463
* patch from Lunar adding --clamp-mtime option for reproducible builds,
closes: #790415
Checksums-Sha1:
594c51f1aa67c5c863a2b7ea0e85a80cd2f6a58e 1873 tar_1.28-1.dsc
a608c3260f90f06e8b66a7e6d2cd441ed9363a2d 1756440 tar_1.28.orig.tar.xz
803b781f31175b446512b0ae88f86eb09ae72ccc 34116 tar_1.28-1.debian.tar.xz
522408e7858416a910d859641f71369cfb58de55 20308 tar-scripts_1.28-1_amd64.deb
861595cdaeec062869438f3c6c5fa3da20cd6d51 708530 tar_1.28-1_amd64.deb
Checksums-Sha256:
9959fb13cf193719a3b3f0a1b6be37bc6280b5ffed4eb089b49557052faacb61 1873
tar_1.28-1.dsc
6da98f52fc469754dbde475c861581036ff2c83a1ef4f7250292935139f587d9 1756440
tar_1.28.orig.tar.xz
705028e30951b973c5572749d3f5e3dd7b5e1b7af65298005bb4c931b86ca65f 34116
tar_1.28-1.debian.tar.xz
39ed29e9bdbe7561f5daa20fa49b04f32a85c3257b2c9889c600dd67c0e05ce7 20308
tar-scripts_1.28-1_amd64.deb
c2978af542b346e2c3b804a8eb001260d0dce6cd113022694ebc9275945aeb07 708530
tar_1.28-1_amd64.deb
Files:
1a28680f4c0d47d3de4d2a0e4bc12bd8 1873 utils required tar_1.28-1.dsc
4b6de2ce7e49e320f1503528cd8f45e6 1756440 utils required tar_1.28.orig.tar.xz
0c7d62ff56f049930004eadd6c7839ed 34116 utils required tar_1.28-1.debian.tar.xz
da56427d8bb1d83863ce075f7e825242 20308 utils optional
tar-scripts_1.28-1_amd64.deb
4245f462154a92a401d9523e659df04a 708530 utils required tar_1.28-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=adxy
-----END PGP SIGNATURE-----
--- End Message ---
