On Fri, Jul 10, 2020 at 10:38:59AM +0100, Chris Lamb wrote: > Source: gem2deb > Version: 1.1 > Severity: wishlist > Tags: patch > User: reproducible-bui...@lists.alioth.debian.org > Usertags: toolchain buildpath > X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org > > Hi, > > Whilst working on the Reproducible Builds effort [0] we noticed that > gem2deb was generating Debian packages that were not reproducible. > > For example, ruby-enumerable-statistics was installing a mkmf.log file > that contained various absolute build paths, which will make the package > not reproducible. > > I note that there is code already in gem2deb that attempts to not > install these (?), but it does not appear to be working.
That's a different code path that this package and others that use --gem-install don't hit. > Patch > attached, although this is just a proof of concept and/or to > demonstrate the problem a little more. I'll apply your patch, thanks.
signature.asc
Description: PGP signature
