Control: severity 961942 normal On 2024-03-31, James Addison wrote: > Currently, Debian's buildd and also the Reproducible Builds team's testing > infrastructure[1] both use a fixed build path when building binary packages. > > This means that your package will pass current reproducibility tests; however > we believe that varying the build path still produces undesirable changes in > the binary package output, making it more difficult than necessary for > independent consumers to check the integrity of those packages by rebuilding > them themselves.
Since this bug report was also caused by numerous other issues (timestamps, locale and username), not just build paths, I have switched the severity back to normal ... it still does not build reproducibly and would be nice to get this at least partially fixed. Again, it does not solve all reproducibility issues, but significantly reducing the diff would be really helpful to resolve the remaining issues. Given the lack of comment the last four years, I propose to NMU this soon. live well, vagrant
signature.asc
Description: PGP signature
