Your message dated Sun, 01 Jan 2017 23:18:30 +0000
with message-id <[email protected]>
and subject line Bug#793004: fixed in debdelta 0.56
has caused the Debian Bug report #793004,
regarding debdelta: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
793004: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793004
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: debdelta
Version: 0.55
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that debdelta could not be built reproducibly.
The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata.
Cheers,
akira
[1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru debdelta-0.55/debian/changelog debdelta-0.55+nmu1/debian/changelog
--- debdelta-0.55/debian/changelog 2014-11-30 18:31:13.000000000 +0100
+++ debdelta-0.55+nmu1/debian/changelog 2015-07-17 17:14:11.000000000 +0200
@@ -1,3 +1,10 @@
+debdelta (0.55+nmu1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <[email protected]> Fri, 17 Jul 2015 17:13:55 +0200
+
debdelta (0.55) unstable; urgency=medium
* update git location
diff -Nru debdelta-0.55/debian/rules debdelta-0.55+nmu1/debian/rules
--- debdelta-0.55/debian/rules 2014-11-30 18:31:13.000000000 +0100
+++ debdelta-0.55+nmu1/debian/rules 2015-07-17 17:13:52.000000000 +0200
@@ -5,6 +5,8 @@
D = debian/debdelta
+BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date)
+
docdir = $(D)/usr/share/doc/$(package)
mandir = $(D)/usr/share/man/man1/
@@ -58,6 +60,8 @@
# build package
dpkg-gencontrol -Pdebian/debdelta-doc -pdebdelta-doc
chown -R root:root $(D2)
+ find debian/debdelta-doc -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg-deb --build $(D2) ..
binary-arch: checkroot build
@@ -102,6 +106,8 @@
dpkg-shlibdeps $(D)/usr/lib/debdelta/minigzip
$(D)/usr/lib/debdelta/minibzip2
dpkg-gencontrol -Pdebian/debdelta -pdebdelta
chown -R root:root $(D)
+ find debian/debdelta -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg-deb --build $(D) ..
define checkdir
--- End Message ---
--- Begin Message ---
Source: debdelta
Source-Version: 0.56
We believe that the bug you reported is fixed in the latest version of
debdelta, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
A Mennucc1 <[email protected]> (supplier of updated debdelta package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 01 Jan 2017 23:58:49 +0100
Source: debdelta
Binary: debdelta debdelta-doc
Architecture: source all amd64
Version: 0.56
Distribution: unstable
Urgency: medium
Maintainer: A Mennucc1 <[email protected]>
Changed-By: A Mennucc1 <[email protected]>
Description:
debdelta - diff and patch utilities which work with Debian packages
debdelta-doc - diff and patch utilities which work with Debian packages
Closes: 710398 735142 740552 777730 793004 845173
Changes:
debdelta (0.56) unstable; urgency=medium
.
* sets the mtimes of built files, for reproducible metadata,
thanks Maria Valentina Marin (Closes: 793004)
* use gzip -n for reproducible builds,
thanks Chris Lamb (Closes: #777730)
* Add timeout option to debdelta-upgrade,
thanks Mert Dirik (Closes: 735142)
* Allow applying patches to unpacked .debs in locations other than /.
thanks Colin Watson (Closes: 710398)
* support i386 packages in amd64 hosts,
Thanks Carlos Maddela (Closes: #740552)
* Fix guessing of xz parameters for files compressed in parallel,
Thanks Carlos Maddela (Closes: #845173)
* merge server git branch and client git branch
* new 2017 signing gpg key
Checksums-Sha1:
097530d3fe8dfb7a9b2735d01def556e4d156008 1531 debdelta_0.56.dsc
2c34667aaca4ab5914b38fededc113c66162d45e 299127 debdelta_0.56.tar.gz
b256492d94a376cd7054bc6b2b12bfc5650acea2 135440 debdelta-doc_0.56_all.deb
77dc418bb4240f5f7be4216489c43caac06b8736 102904 debdelta_0.56_amd64.deb
Checksums-Sha256:
d0184b810580276a65b01bd5cb609a485e8204ed453423adcbf9d65075680f48 1531
debdelta_0.56.dsc
1c1a8a6b5b374b4c40e87d081ccf4c4f4256ac337467637dcdda1539aea15a42 299127
debdelta_0.56.tar.gz
82a0be4a54d44a0c1aaee73cb129257b3e4d99523795ab561e2cff1c0a39bf63 135440
debdelta-doc_0.56_all.deb
5023bb221009ad597b8819f623afa81adb641b4291be8ca693c1d2607ed95d97 102904
debdelta_0.56_amd64.deb
Files:
a698aa4761d1cffaa28d0732194ca021 1531 devel optional debdelta_0.56.dsc
468d0e71800c6ac9aed97c4bc1da8a7e 299127 devel optional debdelta_0.56.tar.gz
62f8bf636c9d5891fecbbbc73d3516e5 135440 doc optional debdelta-doc_0.56_all.deb
1ec02f9068df1cbcdd98bae7841e0c19 102904 devel optional debdelta_0.56_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=/0+7
-----END PGP SIGNATURE-----
--- End Message ---
