Your message dated Wed, 16 Sep 2015 09:24:19 +0000
with message-id <[email protected]>
and subject line Bug#792986: fixed in uruk 20150916-1
has caused the Debian Bug report #792986,
regarding uruk: please make the mtimes reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
792986: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=792986
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: uruk
Version:20150401-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that uruk could not be built reproducibly.
The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Once applied, uruk can be
built reproducibly in our current experimental framework.
Cheers,
akira
[1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru uruk-20150401/debian/changelog uruk-20150401/debian/changelog
--- uruk-20150401/debian/changelog 2015-05-12 21:21:41.000000000 +0200
+++ uruk-20150401/debian/changelog 2015-07-14 15:07:03.000000000 +0200
@@ -1,3 +1,10 @@
+uruk (20150401-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <[email protected]> Tue, 14 Jul 2015 15:06:27 +0200
+
uruk (20150401-1) unstable; urgency=low
* New upstream release: The Gorp en Roovert Release (missed: uruk version
diff -Nru uruk-20150401/debian/rules uruk-20150401/debian/rules
--- uruk-20150401/debian/rules 2015-05-12 21:21:41.000000000 +0200
+++ uruk-20150401/debian/rules 2015-07-14 15:03:38.000000000 +0200
@@ -17,6 +17,8 @@
package=uruk
docdir = debian/$(package)/usr/share/doc/$(package)
+BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date)
+
define checkdir
test -f debian/rules
endef
@@ -89,6 +91,8 @@
done
chown -R root.root debian/$(package)
chmod -R go=rX debian/$(package)
+ find debian/$(package) -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg --build debian/$(package) ..
binary-arch: checkroot build
--- End Message ---
--- Begin Message ---
Source: uruk
Source-Version: 20150916-1
We believe that the bug you reported is fixed in the latest version of
uruk, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Joost van Baal-Ilić <[email protected]> (supplier of updated uruk package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Wed, 16 Sep 2015 10:30:36 +0200
Source: uruk
Binary: uruk
Architecture: source all
Version: 20150916-1
Distribution: unstable
Urgency: low
Maintainer: Joost van Baal-Ilić <[email protected]>
Changed-By: Joost van Baal-Ilić <[email protected]>
Description:
uruk - Very small firewall script, for configuring iptables
Closes: 792986
Changes:
uruk (20150916-1) unstable; urgency=low
.
* New upstream release: The ᎠᏍᎦᏯ ᎩᎦᎨᏱ; Release
.
uruk (20150825-1) unstable; urgency=low
.
* New upstream release: The Прибој Release.
.
uruk (20150810-1) unstable; urgency=low
.
* New upstream release: The Гoрњи Милановац Release (missed uruk version
20150608 - The Oude Leije Release).
* debian/rules: explicitly set timestamps on all files installed by package.
Now uruk can (really!) be built reproducibly in the current experimental
Debian ReproducibleBuilds framework. Thanks Maria "akira" Valentina Marin
and Jérémy "lunar" Bobbio e.a. for the patch. Closes: #792986
* debian/rules: honor DPKG_DEB_OPTS for specific builds. We now can "easily"
build a .deb for Debian lenny, which does not support xz-compressed .deb's.
Thanks Casper Gielen for bugreport.
Checksums-Sha1:
8720b0694170c779d76c2a7ccd46a5604ba664ba 1379 uruk_20150916-1.dsc
f15a6c80f53b330c1ccb790c53ec4ab59402974f 237680 uruk_20150916.orig.tar.gz
b67fd6c6c0fadb49cde3c7d5e41a250ff1b945d0 11264 uruk_20150916-1.debian.tar.xz
7970bcee7c4d4329acf6eadcc29d5100cc962daa 97922 uruk_20150916-1_all.deb
Checksums-Sha256:
8e8cb800f05a65e30011eed7bc4317a8b48e6214e41213ca292c12a339685b8d 1379
uruk_20150916-1.dsc
398c7ce79f9e4c01ae85758a7cfcad46a6d9af5679404d83050018ce7a240b2d 237680
uruk_20150916.orig.tar.gz
e9c65cd32a4478dd988763a954d0783f7ec5ed0deeab830bbde3d3db48a98a09 11264
uruk_20150916-1.debian.tar.xz
e92e3d03f8964337af6a16a5cb2fce48a91c611cea35e82329bd67ed7c0dce32 97922
uruk_20150916-1_all.deb
Files:
0c428219a76f3e43685aa4ecb9c008e0 1379 net optional uruk_20150916-1.dsc
f67379b4d16ea8e3a5bb21eae2f6aeac 237680 net optional uruk_20150916.orig.tar.gz
ea7205204546181d5fe278ab71eda374 11264 net optional
uruk_20150916-1.debian.tar.xz
0c5cd4bd18c3c7c781c8e1d68887c4af 97922 net optional uruk_20150916-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJV+S9kAAoJEDNRenKl5rDIkuAH/iG/6CvR68PYdG1pZAY18zmx
shdGAthx7YdxchFQDn0OTH+XQYt7c4YHegQ16bgxP+QV23lXUeVfGUPEnq89aO42
55p3Wgdw9mPh9zBdQAit3li2j8bUFbtTeOG2fJrB5x7XfsbJqYYt4MIRQ8/UpBM7
M8ZDXMdnfInTL3VfhBAU894K2KPZjGUPhqC86qsh4nP4B3iHvv4cFO/fXB0x8MMU
tHQTp7qpx8Whe54OTH+3I9rXE0h41w46lvRmlLDQF9gTvzoYqgFQbjaBcx8Gtt7q
meKGfNNZC1v2RPX03804y2NnUaW285JN32U/FJE+47t/pEg2LpTpbNOHs+M55XQ=
=+JnP
-----END PGP SIGNATURE-----
--- End Message ---
