Hi, very "nice" find, josch!
On Thu, May 30, 2024 at 11:16:48AM +0200, Johannes Schauer Marin Rodrigues
wrote:
> This example with bash is especially problematic since bash is Essential:yes
> so
> there will now be a large portion of buildinfo files where it is not possible
> to figure out with which of the two differing bash packages the sources were
> compiled.
I've checked all .buildinfo files to see how big the impact of this problem
is:
holger@ionos7-amd64:/var/ …
tent/reproducible/debian/ftp-master.debian.org/buildinfo $ for i in amd64 arm64
armel armhf i386 mips64el ppc64el riscv64 s390x ; do echo -n "$i: " ; grep -c
"$i.buildinfo: bash" ~/dak-bug-1072205 ; done
holger@ionos7-amd64:/var/ …
tent/reproducible/debian/ftp-master.debian.org/buildinfo $ for i in amd64 arm64
armel armhf i386 mips64el ppc64el riscv64 s390x ; do echo -n "$i: " ; grep -c
"$i.buildinfo: bash" ~/dak-bug-1072205 ; done
amd64: 1322
arm64: 22
armel: 0
armhf: 0
i386: 10
mips64el: 0
ppc64el: 1
riscv64: 92
s390x: 0
holger@ionos7-amd64:/var/ …
tent/reproducible/debian/ftp-master.debian.org/buildinfo 1 $
So, not too bad. And luckily all of these can be fixed with binNMUs.
--
cheers,
Holger
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄
The people who refer to the pandemic in the past tense and climate change in
the future tense are the reason everything is going to shit.
signature.asc
Description: PGP signature
