Your message dated Wed, 16 Jun 2021 22:33:38 +0000
with message-id <[email protected]>
and subject line Bug#989963: fixed in tclap 1.2.4-2
has caused the Debian Bug report #989963,
regarding tclap: reproducible-builds: Embeds build path, binary paths and SHELL
in example Makefiles
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
989963: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989963
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: tclap
Severity: normal
Tags: patch
User: [email protected]
Usertags: buildpath usrmerge shell
X-Debbugs-Cc: [email protected]
The build path, several binary paths, and the value of the SHELL
variable are embedded in example Makefiles shipped in the package:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/i386/diffoscope-results/tclap.html
/usr/share/doc/libtclap-dev/docs/Makefile.gz
AUTOMAKE·=·${SHELL}·'/build/1st/tclap-1.2.4/config/missing'·automake-1.16
vs.
AUTOMAKE·=·${SHELL}·'/build/2/tclap-1.2.4/2nd/config/missing'·automake-1.16
GREP·=·/bin/grep
vs.
GREP·=·/usr/bin/grep
SHELL·=·/bin/bash
vs.
SHELL·=·/bin/sh
Since these values may differ with the installed system, in order to use
the example Makefiles, a person would have to regenerate them from
Makefile.am or Makefile.in, which are also provided.
The attached patch removes the Makefiles in debian/rules.
If that is somehow not an option, an alternate option would be to
sanitize the Makefiles stripping the build path (or replacing with
/usr/src?), and possibly passing various variables to configure
(e.g. GREP=/bin/grep, SHELL=/bin/sh, ...).
Thanks for maintaining tclap!
live well,
vagrant
From 08de495eeae4305e7e68486e69b8b830e39e4797 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Wed, 16 Jun 2021 20:21:30 +0000
Subject: [PATCH] debian/rules: Remove example Makefiles for reproducible
builds.
The shipped Makefiles embed build paths, the content of the SHELL
variable, and paths to various binaries (e.g. /bin/grep
vs. /usr/bin/grep).
---
debian/rules | 3 +++
1 file changed, 3 insertions(+)
diff --git a/debian/rules b/debian/rules
index 4c64ef9..b849adf 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,6 +9,9 @@ override_dh_installdocs:
dh_installdocs
# edd 10 Jun 2011 prune CVS directory
find debian/ -name CVS -type d | xargs rm -rf
+ # Remove example Makefiles for reproducible builds as they
+ # embed the build path, SHELL and various paths to utilities
+ find debian/ -name Makefile -type f | xargs rm -f
override_dh_auto_test:
echo "Skipping checks for now"
--
2.20.1
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: tclap
Source-Version: 1.2.4-2
Done: Dirk Eddelbuettel <[email protected]>
We believe that the bug you reported is fixed in the latest version of
tclap, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Dirk Eddelbuettel <[email protected]> (supplier of updated tclap package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 16 Jun 2021 16:40:41 -0500
Source: tclap
Architecture: source
Version: 1.2.4-2
Distribution: experimental
Urgency: medium
Maintainer: Dirk Eddelbuettel <[email protected]>
Changed-By: Dirk Eddelbuettel <[email protected]>
Closes: 989963
Changes:
tclap (1.2.4-2) experimental; urgency=medium
.
* debian/rules: Remove Makefile(s) to help reproducible builds (with
thanks to Vagrant Cascadian) (Closes: #989963)
Checksums-Sha1:
9adb41e5fabadda420996ac0593fc456ec3f3614 1759 tclap_1.2.4-2.dsc
44dd8b17f0a008f11fc08a948ac72e37ad076ef1 3188 tclap_1.2.4-2.debian.tar.xz
41fbdf094a1d5623fa44f1486def949edf82f778 5382 tclap_1.2.4-2_amd64.buildinfo
Checksums-Sha256:
0098b35421fe4a6f88b757f2de2c586adc34831b446556e40d4e334e3c2eec5c 1759
tclap_1.2.4-2.dsc
8b2afd9f8a1938688f96bd6d4dd4253b058dcd24b68e167c2355a402ed531101 3188
tclap_1.2.4-2.debian.tar.xz
a9f796c73d622b2da171c23977ce0a4e7d84db9a49f19cf9470e062f1c1d28a0 5382
tclap_1.2.4-2_amd64.buildinfo
Files:
b23c3468132a9eb175416c2cba13b860 1759 devel optional tclap_1.2.4-2.dsc
3146486e5c983e9a395cae3743c61bc6 3188 devel optional
tclap_1.2.4-2.debian.tar.xz
43271f0139eff5e73f88eac648160e60 5382 devel optional
tclap_1.2.4-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIVAwUBYMp2haFIn+KrmaIaAQiNNw/+J5beaSMP9Irir9S0RXG4aLj0fUPVoCZJ
rvQDPM58TqE0NhQJ5yuVq4ZlRs28lYWmHZY2tn26c+bjJR3Yctyp6bdRL2o5OAaD
xSJ2N8kvK0laS3Ly9ki0WU4xPHM1xWH+/ou5xpDYCkjLCPrQZxPID8XQyni88p+N
LVrBIMcl1Jx+s0oqxr4qElWnmyYB6iJN0GHRQLbhvEb885ATr7Ry6VjIK70YM6Od
0yWGVUvgHBHgTQ5fUTpN658UTBGRIfOmCXSVzHGxg01iCxypNK+tx/TTk9lW+LyJ
N3nOXmAOr8CDV5KIfH6ltiMGrYdvVu51y900MUkiseu4iYU1tZz2Nx6EZsboeKir
muIkWOKGvgPnEKN0+19T4kwnVHOf7e6tw82cF08/JiKeHgIddGnyKkn1d3fizjxa
qq3/7rK0Ka1bOkpNSmu6XB1B9L9p+x+WER7PgDEVbcq9CvOnfgdMTwKCNNQcguRn
9+wxTMf4ToAwV+zRE0DnJE77duo7kr9luJUSDODHaf/tXolxDlzyPTDrvPCyai1r
4460KD673l9ASTJU9nl5yCcfLpM0Iks+j0CVR+vFrqByjduzymK7tZ4NrgFRM3LA
Vmf0GJV6I0ZhUdjtUGdALOswsb73KLTow2daW1w6zHA32GZOPDxHrYBnS8ydUpjH
RaITrwoq0dk=
=Lo8A
-----END PGP SIGNATURE-----
--- End Message ---