Your message dated Tue, 12 Jul 2022 22:55:33 +0200
with message-id <[email protected]>
and subject line Close bugs fixed in new upload of cxref
has caused the Debian Bug report #995886,
regarding cxref: reproducible builds: Embedded timestamps in .dvi and .ps files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
995886: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995886
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: cxref
Severity: normal
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
The build timestamp is embedded in various .dvi and .ps files:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/cxref.html
/usr/share/doc/cxref/README.ps.gz
%DVIPSSource:··TeX·output·2021.09.14:1340
vs.
%DVIPSSource:··TeX·output·2022.10.18:2205
The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.
https://reproducible-builds.org/docs/source-date-epoch/
There are other reproducibility issues for cxref(build paths and
usrmerge), so this patch alone will not make cxref reproducible, but
should reduce the overall reproducibility diff, making it easier to
troubleshoot remaining issues.
Thanks for maintaining cxref!
live well,
vagrant
From 404ab1548ba4d9a6c7cfb8974e1ff0497972b1c6 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Tue, 5 Oct 2021 05:44:26 +0000
Subject: [PATCH 1/2] debian/rules: Export FORCE_SOURCE_DATE=1 in order for
texlive to respect SOURCE_DATE_EPOCH when generating .dvi and .ps files.
https://reproducible-builds.org/docs/source-date-epoch/
---
debian/rules | 3 +++
1 file changed, 3 insertions(+)
diff --git a/debian/rules b/debian/rules
index 5a7bf13..d28ac30 100755
--- a/debian/rules
+++ b/debian/rules
@@ -16,6 +16,9 @@ VERS:=$(shell cat debian/changelog |grep ^cxref|head -n 1|cut -f2 -d\ |tr -d '()
DPKG_EXPORT_BUILDFLAGS=1
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
include /usr/share/dpkg/buildflags.mk
build: build-arch build-indep
--
2.30.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Version: 1.6e-4
This bug is closed by the upload of version 1.6e-4, thanks Camm!
OpenPGP_signature
Description: OpenPGP digital signature
--- End Message ---
