severity 818111 minor
tag 818111 + patch pending confirmed
thanks
Satyam Zode dijo [Mon, Mar 14, 2016 at 12:54:50AM +0530]:
> While working on the “reproducible builds” effort [1], we have noticed
> that debian-keyring could not be built reproducibly.
>
> The attached patch fix the order of files in md5sums.
> Once applied, debian-keyring can be built reproducibly in our current
> experimental framework.
Hi,
Your patch has already been applied to our working tree, and will be
included in the next package upload. Do note we don't always upload a
new package when pushing a new keyring. You can verify the commit in
question at:
https://anonscm.debian.org/cgit/keyring/keyring.git/commit/?id=c4f9a490cc6d40c5dbe74ad253b2a21cceb1c060
However, even with this, the package is *not yet* built reproducibly:
There is still a source of noise for the source package creation
step. Maybe the answer would be to stop hand-building everything and
update our packaging format to dh-based or something like that? :)
Greetings,
