Package: graphviz
Version: 2.42.2-7+b3
Severity: normal
X-Debbugs-Cc: d...@darkboxed.org

Hi Laszlo,

my package yosys uses `dot` as part of it's documentaion build, I've
been battling reproducibility issues in that part of the packaging for
a while now and I think I've finally tracked it down to a problem in
graphviz.

dot appears to embed CreationDate in the pdf and this cannot be
controlled with SOURCE_DATE_EPOCH.

Repro:

    $ echo 'digraph { a -> b }' > test.dot
    $ SOURCE_DATE_EPOCH=60 dot -Tpdf test.dot -o test.pdf
    $ dumppdf -adt test.pdf 2>/dev/null | grep '<key>CreationDate' -A1
    <key>CreationDate</key>
    <value><string size="22">D:20231018173926+02&#39;00</string></value>

Note: dumppdf is from python3-pdfminer.

Thanks,
--Daniel

-- System Information:
Debian Release: 12.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'proposed-updates-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.5.0-2-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages graphviz depends on:
ii  libann0        1.1.2+doc-9+b1
ii  libc6          2.36-9+deb12u3
ii  libcdt5        2.42.2-7+b3
ii  libcgraph6     2.42.2-7+b3
ii  libexpat1      2.5.0-1
ii  libgcc-s1      12.2.0-14
ii  libgd3         2.3.3-9
ii  libglib2.0-0   2.74.6-2
ii  libgts-0.7-5   0.7.6+darcs121130-5+b1
ii  libgvc6        2.42.2-7+b3
ii  libgvpr2       2.42.2-7+b3
ii  liblab-gamut1  2.42.2-7+b3
ii  libstdc++6     12.2.0-14
ii  libx11-6       2:1.8.4-2+deb12u1
ii  libxaw7        2:1.0.14-1
ii  libxmu6        2:1.1.3-3
ii  libxt6         1:1.2.1-1.1

Versions of packages graphviz recommends:
ii  fonts-liberation2  2.1.5-1

Versions of packages graphviz suggests:
pn  graphviz-doc  <none>
ii  gsfonts       2:20200910-7

-- no debconf information

Reply via email to