Your message dated Sun, 15 Mar 2020 12:50:50 +0000
with message-id <[email protected]>
and subject line Bug#916078: fixed in varnish 6.2.1-3
has caused the Debian Bug report #916078,
regarding varnishd: make default cc_command reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
916078: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916078
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: varnish
Version: 6.1.1-1
Tags: patch
User: [email protected]
Usertags: rebootstrap
varnish embeds the detected compiler and build flags into the varnishd
binary for the variable cc_command. Given that the default build flags
include -fdebug-prefix-map, this embeds the varnish's build path and
makes varnish unreproducible. Also using "gcc" is not what varnish
wants: When installed for a foreign architecture, the created objects
will fail to load. varnish must use a triplet-prefixed compiler here.
The latter happens to break cross compilation. Please consider applying
the attached patch to get a correct and reproducible default for
cc_command.
Helmut
diff --minimal -Nru varnish-6.1.1/debian/changelog
varnish-6.1.1/debian/changelog
--- varnish-6.1.1/debian/changelog 2018-12-01 13:44:50.000000000 +0100
+++ varnish-6.1.1/debian/changelog 2018-12-09 21:02:45.000000000 +0100
@@ -1,3 +1,10 @@
+varnish (6.1.1-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Make cc_command reproducible. (Closes: #-1)
+
+ -- Helmut Grohne <[email protected]> Sun, 09 Dec 2018 21:02:45 +0100
+
varnish (6.1.1-1) unstable; urgency=medium
* Imported new upstream version 6.1.1
diff --minimal -Nru varnish-6.1.1/debian/rules varnish-6.1.1/debian/rules
--- varnish-6.1.1/debian/rules 2018-12-01 13:44:50.000000000 +0100
+++ varnish-6.1.1/debian/rules 2018-12-09 21:02:45.000000000 +0100
@@ -4,16 +4,12 @@
export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/architecture.mk
include /usr/share/dpkg/buildflags.mk
# List of architectures where jemalloc is not available
DISABLE_JEMALLOC_ARCH_LIST := hppa m68k
-# Explicitly initialize a variable to select architecture, unless it has been
-# defined before. This is compared against the DISABLE_*_LIST variables later
-# in this makefile
-DEB_HOST_ARCH ?= $(shell dpkg-architecture -qDEB_HOST_ARCH)
-
# Set local state dir for FHS
LOCAL_CONFIGURE_FLAGS = --localstatedir=/var/lib
@@ -39,6 +35,13 @@
# https://github.com/varnishcache/varnish-cache/issues/1875
CFLAGS += -fexcess-precision=standard
+# Disable reproducible cflags as embedding them in to the binary makes the
+# build unreproducible.
+export VCC_CC=exec \
+ $(DEB_HOST_GNU_TYPE)-gcc \
+ $(shell DEB_BUILD_MAINT_OPTIONS="$(DEB_BUILD_MAINT_OPTIONS)
reproducible=-all" dpkg-buildflags --get CFLAGS) \
+ -Werror -Wno-error=unused-result -pthread -fpic -shared -Wl,-x -o %o %s
+
# Main build rule, leave everything to debhelper
%:
dh $@
--- End Message ---
--- Begin Message ---
Source: varnish
Source-Version: 6.2.1-3
Done: Stig Sandbeck Mathisen <[email protected]>
We believe that the bug you reported is fixed in the latest version of
varnish, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stig Sandbeck Mathisen <[email protected]> (supplier of updated varnish package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 15 Mar 2020 12:51:54 +0100
Source: varnish
Architecture: source
Version: 6.2.1-3
Distribution: unstable
Urgency: medium
Maintainer: Varnish Package Maintainers <[email protected]>
Changed-By: Stig Sandbeck Mathisen <[email protected]>
Closes: 916078
Changes:
varnish (6.2.1-3) unstable; urgency=medium
.
[ Helmut Grohne ]
* Make cc_command reproducible. (Closes: #916078)
.
[ Stig Sandbeck Mathisen ]
* Update standards version to 4.4.1, no changes needed.
* Set debhelper-compat version in Build-Depends.
* Set fields Upstream-Name, Upstream-Contact in debian/copyright.
* Remove obsolete field Contact from debian/upstream/metadata (already
present in machine-readable debian/copyright).
Checksums-Sha1:
7482b4a848c4983996d5a00afadd6213ff61dc00 2545 varnish_6.2.1-3.dsc
130ee98720b95cdc7fc5ab7c1da530584eb41b75 24096 varnish_6.2.1-3.debian.tar.xz
Checksums-Sha256:
f86aab6b50f0a0c2c26e8df9cc3d995d3d64918c4c6a8f9b475522b451f81a2c 2545
varnish_6.2.1-3.dsc
1c0649c07c4bb047c98e4296af050c0773dcad26e4ba314293fa1b5f17ba39fb 24096
varnish_6.2.1-3.debian.tar.xz
Files:
90e01b30c6ad56fdde75ea3444c478f1 2545 web optional varnish_6.2.1-3.dsc
f580f69d0ec9e914eb45fd295216f338 24096 web optional
varnish_6.2.1-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=uYpB
-----END PGP SIGNATURE-----
--- End Message ---
