Your message dated Mon, 08 Feb 2016 11:20:04 +0000
with message-id <[email protected]>
and subject line Bug#794225: fixed in libsyncml 0.5.4-2.3
has caused the Debian Bug report #794225,
regarding libsyncml: please make the build reproducible (timestamps)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
794225: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794225
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libsyncml
Version: 0.5.4-2.2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that libsyncml could not be built reproducibly since it suffers from
timestamps in manpages generated by doxygen [2].
The reproducible builds team is building packages using a version of
doxygen which has been patched to honour the environment variable
$SOURCE_DATE_EPOCH [3]. This results in doxygen using the last date in
debian/changelog as the timestamp for its man page output which causes
packages to become reproducible [4].
During our tests $SOURCE_DATE_EPOCH is exported by the debhelper from
our experimental git repository which we have patched such that packages
using dh (debhelper >= 9) in debian/rules become automatically reproducible.
This unfortunately does not make the package libsyncml reproducible
because it does not use dh in debian/rules but instead classic
debhelper.
There are two solutions for libsyncml:
1. To rewrite debian/rules to use dh
2. To implement the attached patch which exports $SOURCE_DATE_EPOCH in
debian/rules.
Kind Regards,
akira
[1] https://wiki.debian.org/ReproducibleBuilds/About
[2]
https://reproducible.debian.net/issues/unstable/timestamps_in_manpages_generated_by_doxygen_issue.html
[3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal
[4] https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain#doxygen
Cheers,
akira
diff -u libsyncml-0.5.4/debian/changelog libsyncml-0.5.4/debian/changelog
--- libsyncml-0.5.4/debian/changelog
+++ libsyncml-0.5.4/debian/changelog
@@ -1,3 +1,11 @@
+libsyncml (0.5.4-2.3) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible
+ timestamps in manpage output
+
+ -- akira <[email protected]> Fri, 31 Jul 2015 11:21:17 +0200
+
libsyncml (0.5.4-2.2) unstable; urgency=medium
* Non-maintainer upload.
diff -u libsyncml-0.5.4/debian/rules libsyncml-0.5.4/debian/rules
--- libsyncml-0.5.4/debian/rules
+++ libsyncml-0.5.4/debian/rules
@@ -11,6 +11,8 @@
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1
-SDate)" +%s)
+
CFLAGS = -Wall -g
ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
CFLAGS += -O0
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libsyncml
Source-Version: 0.5.4-2.3
We believe that the bug you reported is fixed in the latest version of
libsyncml, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Mattia Rizzolo <[email protected]> (supplier of updated libsyncml package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sat, 06 Feb 2016 13:05:59 +0000
Source: libsyncml
Binary: libsyncml2 libsyncml-utils libsyncml-dev libsyncml-doc libsyncml2-dbg
Architecture: all source
Version: 0.5.4-2.3
Distribution: unstable
Urgency: medium
Maintainer: Michael Banck <[email protected]>
Changed-By: Mattia Rizzolo <[email protected]>
Closes: 794225 811300
Description:
libsyncml2-dbg - Debug symbols for libsyncml2
libsyncml2 - SyncML protocol library
libsyncml-dev - SyncML protocol development library
libsyncml-doc - SyncML protocol library documentation
libsyncml-utils - SyncML protocol library utilities
Changes:
libsyncml (0.5.4-2.3) unstable; urgency=medium
.
* Non-maintainer upload.
.
[ Nobuhiro Iwamatsu ]
* Fix FTBFS with libopenobex2-dev. Closes: #811300
Add patches/fix_build_with_libopenobex2.patch.
* Change B-D from libopenobex1-dev to libopenobex2-dev.
.
[ Maria Valentina Marin ]
* Export environment variable SOURCE_DATE_EPOCH to produce reproducible
timestamps in manpage output. Closes: #794225
Checksums-Sha1:
32a00d0efbe4a029fbc3b5944fc835739e35a88e 2037 libsyncml_0.5.4-2.3.dsc
9964eb3537218271b7854a0f45579cdf17479dd8 6640 libsyncml_0.5.4-2.3.diff.gz
0c4faf5f80d6f3397847cac199ca8aee7326bfe6 521994 libsyncml-doc_0.5.4-2.3_all.deb
Checksums-Sha256:
eaaf6ac831c5f1fdccf2f5dfe0198d7ab9542962ea3ee3b2c797ea28255d3472 2037
libsyncml_0.5.4-2.3.dsc
88aa91b638a08138b362934c9e491c44ce05f327aabb14c19399973de56f8473 6640
libsyncml_0.5.4-2.3.diff.gz
ff94596cb58ec8a0a677732e6d759f2bb5da5a8c3598f943ea7baa262bae23d2 521994
libsyncml-doc_0.5.4-2.3_all.deb
Files:
8cbd300f8e3bf81a6e0f59ad31e8f828 2037 libs optional libsyncml_0.5.4-2.3.dsc
5bfed0f12e7329fb2c9f1b876e030440 6640 libs optional libsyncml_0.5.4-2.3.diff.gz
81a3657d91cba67d0a417774d43b6cbd 521994 doc optional
libsyncml-doc_0.5.4-2.3_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=jQNf
-----END PGP SIGNATURE-----
--- End Message ---
