Source: ruby-babosa Version: 2.0.0-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: buildpath X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
Hi, Whilst working on the Reproducible Builds effort [0], we noticed that ruby-babosa could not be built reproducibly. This is because the rendered .gemspec file expands the unreproducible __dir__ variable to be included in a "cert_chain" attribute. However, this is not needed in the package, and is probably only needed if you are making releases of the package (like the 'signing_key') attribute. A patch is attached that moves the assignment of cert_chain to match the conditional of signing_key, thereby excluding it from the binary package and thus making the package reproducible. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
--- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-build.patch 2023-07-24 09:03:51.786257737 +0100 @@ -0,0 +1,16 @@ +Description: Make the build reproducible +Author: Chris Lamb <la...@debian.org> +Last-Update: 2023-07-24 + +--- ruby-babosa-2.0.0.orig/babosa.gemspec ++++ ruby-babosa-2.0.0/babosa.gemspec +@@ -26,8 +26,8 @@ Gem::Specification.new do |s| + s.add_development_dependency "rubocop", ">= 0.93.0" + s.add_development_dependency "simplecov" + +- s.cert_chain = [File.expand_path("certs/parndt.pem", __dir__)] + if $PROGRAM_NAME.end_with?("gem") && ARGV.include?("build") && ARGV.include?(__FILE__) ++ s.cert_chain = [File.expand_path("certs/parndt.pem", __dir__)] + s.signing_key = File.expand_path("~/.ssh/gem-private_key.pem") + end + end --- a/debian/patches/series 2023-07-24 08:59:47.532270584 +0100 --- b/debian/patches/series 2023-07-24 09:03:50.114246613 +0100 @@ -1 +1,2 @@ remove-bundler.patch +reproducible-build.patch
_______________________________________________ Pkg-ruby-extras-maintainers mailing list Pkg-ruby-extras-maintainers@alioth-lists.debian.net https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-ruby-extras-maintainers