Your message dated Sun, 02 Oct 2022 19:39:13 +0000
with message-id <[email protected]>
and subject line Bug#788000: fixed in libranlip 1.0-4.4
has caused the Debian Bug report #788000,
regarding libranlip: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
788000: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=788000
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libranlip
Version: 1.0-4.1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that libranlip could not be built reproducibly.
The attached patch removes extra timestamps from the gzip files and
sets the files mtime to a known value (last debian package changelog
date) before calling `dpkg --build` to generate the binary packages.
Once applied, libranlip can be built reproducibly in our current
experimental framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
--
Dhole
diff --git a/libranlip-1.0/Makefile.in b/libranlip-1.0/Makefile.in
index df35f5d..8225ad4 100644
--- a/libranlip-1.0/Makefile.in
+++ b/libranlip-1.0/Makefile.in
@@ -409,7 +409,7 @@ am__remove_distdir = \
|| { find $(distdir) -type d ! -perm -200 -exec chmod u+w {} ';' \
&& rm -fr $(distdir); }; }
-GZIP_ENV = --best
+GZIP_ENV = --best -n
distuninstallcheck_listfiles = find . -type f -print
distcleancheck_listfiles = find . -type f -print
diff --git a/libranlip-1.0/debian/rules b/libranlip-1.0/debian/rules
index 6ca7323..9f389e3 100755
--- a/libranlip-1.0/debian/rules
+++ b/libranlip-1.0/debian/rules
@@ -3,6 +3,7 @@
# Copyright (c) 2005 Juan Esteban Monsalve Tobon <[email protected]>
STRIP = strip --remove-section=.comment --remove-section=.note
+BUILD_DATE=$(shell dpkg-parsechangelog --show-field Date)
build:
$(checkdir)
@@ -54,7 +55,7 @@ binary-arch: checkroot build
cp -p debian/changelog
debian/libranlip1c2/usr/share/doc/libranlip1c2/changelog.Debian
cp -p docs/ranlip.ps debian/libranlip1c2/usr/share/doc/libranlip1c2/
cp -p examples/ranliptest* examples/makefile
debian/libranlip1c2/usr/share/doc/libranlip1c2/examples
- cd debian/libranlip1c2/usr/share/doc/libranlip1c2 && gzip -9
changelog.Debian ranlip.ps examples/*
+ cd debian/libranlip1c2/usr/share/doc/libranlip1c2 && gzip -9n
changelog.Debian ranlip.ps examples/*
ln -s libranlip1c2 debian/libranlip-dev/usr/share/doc/libranlip-dev
@@ -64,6 +65,8 @@ binary-arch: checkroot build
chown -R root.root debian/libranlip1c2
chmod -x debian/libranlip1c2/usr/lib/ranlip/*
chmod -R go=rX debian/libranlip1c2
+ find debian/libranlip1c2 -depth -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg --build debian/libranlip1c2 ..
dpkg-gencontrol -isp -plibranlip-dev -Pdebian/libranlip-dev
@@ -71,6 +74,8 @@ binary-arch: checkroot build
chown -R root.root debian/libranlip-dev
chmod -x debian/libranlip-dev/usr/lib/ranlip/libranlip.a
debian/libranlip-dev/usr/lib/ranlip/libranlip.la
chmod -R go=rX debian/libranlip-dev
+ find debian/libranlip-dev -depth -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg --build debian/libranlip-dev ..
define checkdir
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libranlip
Source-Version: 1.0-4.4
Done: Vagrant Cascadian <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libranlip, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Vagrant Cascadian <[email protected]> (supplier of updated
libranlip package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 22 Sep 2022 11:16:14 -0700
Source: libranlip
Architecture: source
Version: 1.0-4.4
Distribution: unstable
Urgency: medium
Maintainer: Juan Esteban Monsalve Tobon <[email protected]>
Changed-By: Vagrant Cascadian <[email protected]>
Closes: 788000 846975 1007137
Changes:
libranlip (1.0-4.4) unstable; urgency=medium
.
* Non-maintainer upload.
.
[ Dhole ]
* Makefile.in: Pass -n via GZIP_ENV to avoid embedding
timestamps. (Closes: #788000)
* debian/rules: Pass -n to gzip when compressing files.
(Closes: #788000)
* debian/rules: Use consistent date in packaged files. (Closes: #788000)
.
[ Valerie R Young ]
* debian/rules: Sort md5sums files. (Closes: #846975)
.
[ Vagrant Cascadian ]
* debian/rules: Use standard buildflags. (Closes: #1007137)
Checksums-Sha1:
4be4b507fc35d8e14fac20a27b0e290d4efa6722 1322 libranlip_1.0-4.4.dsc
92505b53263f871180fd7d40add7b5e3e8ebcc1e 4305 libranlip_1.0-4.4.diff.gz
Checksums-Sha256:
518b36f6fc928be030160214fea76e9c9e559ab22699b4b149146fd0afba119d 1322
libranlip_1.0-4.4.dsc
6d38ac3442a05494a426be392bd304a588b2690bbdd2b0dd679f111b3e05fb04 4305
libranlip_1.0-4.4.diff.gz
Files:
ea7b7f8fe6b61535ddf70fbfe0cf6bc9 1322 math optional libranlip_1.0-4.4.dsc
f0c16692f46d2b047a23b8f8c1d5a142 4305 math optional libranlip_1.0-4.4.diff.gz
-----BEGIN PGP SIGNATURE-----
iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYyynAiAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqh1fAP9rVK23VDHxc3Rk
qQyInH9GEHcENEhcO8Z3PjygvCStBAEA9mqtoKwN8eQtp1klZKjM8dqUxQxfUIJT
7nl/DvQFDQA=
=RFFV
-----END PGP SIGNATURE-----
--- End Message ---
