Your message dated Sun, 30 Aug 2015 23:03:21 +0000
with message-id <[email protected]>
and subject line Bug#797440: fixed in libavg 1.8.1-2
has caused the Debian Bug report #797440,
regarding libavg: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
797440: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=797440
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libavg
Version: 1.8.1-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps username hostname uname
X-Debbugs-Cc: [email protected]
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that libavg could not be built reproducibly.
The building username, hostname, platform and build time are embedded into
a binary.
The attached patch fixes this by using the date from the latest changelog entry
and replacing the username/hostname with a static value.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible_build.patch b/debian/patches/reproducible_build.patch
new file mode 100644
index 0000000..44e1f77
--- /dev/null
+++ b/debian/patches/reproducible_build.patch
@@ -0,0 +1,31 @@
+Author: Reiner Herrmann <[email protected]>
+Description: Use reproducible values for builder and buildtime
+
+Index: libavg-1.8.1/CreateVersionFile.py
+===================================================================
+--- libavg-1.8.1.orig/CreateVersionFile.py
++++ libavg-1.8.1/CreateVersionFile.py
+@@ -113,10 +113,7 @@ def getSvnBranch():
+ return (url, branch)
+
+ def getBuilder():
+- user = getpass.getuser()
+- hostname = socket.gethostname()
+-
+- return '%s@%s %s' % (user, hostname, platform.platform())
++ return "debian"
+
+ def extractComponentFromM4(text, component):
+ match = re.search(r'%s\s*\].*\[\s*([A-Za-z0-9\.]+)\s*\]' % component, text, re.M)
+@@ -142,7 +139,10 @@ def assembleVersionInfo(major, minor, mi
+ revision = getSvnRevision()
+ branchurl, branch = getSvnBranch()
+ builder = getBuilder()
+- buildtime = datetime.datetime.now().isoformat()
++ try:
++ buildtime = datetime.datetime.utcfromtimestamp(int(os.environ['SOURCE_DATE_EPOCH'])).isoformat()
++ except (KeyError, ValueError):
++ buildtime = datetime.datetime.now().isoformat()
+
+ if revision and branch:
+ fullVersion = '%s-%s/r%s' % (releaseVersion, branch, revision)
diff --git a/debian/patches/series b/debian/patches/series
index d3b650a..abe4148 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1 +1,2 @@
foreign.patch
+reproducible_build.patch
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libavg
Source-Version: 1.8.1-2
We believe that the bug you reported is fixed in the latest version of
libavg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dimitri John Ledkov <[email protected]> (supplier of updated
libavg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 30 Aug 2015 23:15:42 +0100
Source: libavg
Binary: python-libavg
Architecture: source
Version: 1.8.1-2
Distribution: unstable
Urgency: medium
Maintainer: Dimitri John Ledkov <[email protected]>
Changed-By: Dimitri John Ledkov <[email protected]>
Description:
python-libavg - High-level development platform for media-centric applications
Closes: 797440
Changes:
libavg (1.8.1-2) unstable; urgency=medium
.
* Apply patch from Reiner Herrmann for reproducible builds. (Closes: #797440)
Checksums-Sha1:
e116f69c8105d2848d75e5126cc890d585af97e5 1800 libavg_1.8.1-2.dsc
a3e458b32dfddd9fd629fc4f5a256622bc960800 9200 libavg_1.8.1-2.debian.tar.xz
Checksums-Sha256:
d43530e2d4f08abad995a68d4b1e79fdc5ad6688dc95bd448e4e6932e37cf7f2 1800
libavg_1.8.1-2.dsc
55c978fa85552d25270832d80636089b1eb071df28416eed5a304e573cc928de 9200
libavg_1.8.1-2.debian.tar.xz
Files:
c1286bc91ac0c85bf5c22367a83d1b17 1800 python optional libavg_1.8.1-2.dsc
2910edaa97fdc65598afc84957bc505e 9200 python optional
libavg_1.8.1-2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQEcBAEBCAAGBQJV44aWAAoJEMrC2LnNLKX5EhgH/2+PIGSxMYbo9/dMGRmJcDom
eol9FYzNLfmE7Cj55PtAR9x00AyD2Dd7m2xEXCukFi08JG0CzstO+AuX8k/ACBDG
PbeJq+rpWKOHjn5jW9odxmyX0dOTVuVghpWDsS+8nJixLRSNxPzQe8Vu890+BW5Y
V2ESTnOPHMc5T8pGfUrUbyaQBfepyflBCc3VRMrBhu35INnXzJNNVhnx/zaGF0jr
cahVUxEdE3C7xEepTR/INvCV7JeSdHeSzTFKk5sZDTiupj9Gm0MuhsraWNHh+x5J
MfPLKwzhX5E/Qq3LQWD7tiRwjxqyFJvHEXBZrtnX95YPiHHdcI8rFGGiuJogxiE=
=zu3q
-----END PGP SIGNATURE-----
--- End Message ---
