Another option is building with faketime. I've had good luck with a couple of C builds using faketime to freeze time entirely during the whole make process. But I think the reproducible work in Debian so far has avoided using faketime.
signature.asc
Description: OpenPGP digital signature