Bug#971418: jhbuild: Missing dependency on python3-distuils
Hi Simon, > > Patch attached (although it might mean some Python substvar apparatus > > is not working as expected). > > I don't think it's expected to work automatically in this case: I think > hard-coding the dependency, as in your patch, is likely to be the only > solution. Sounds eminently reasonable — I should have added more of a "I have not checked this is the case at all, just throwing it out there just in case it rings a bell" spin to my comment. I would agree wholeheartedly with your later sentiments regarding the reliability of said mechanism. -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#971427: lintian: false positive package-contains-documentation-outside-usr-share-doc for SNMP MIB files
tags 971427 + moreinfo thanks Hi Ferenc, > SNMP MIB files are generally /usr/share/snmp/mibs/*.txt, though > these text files aren't documentation. Please make them exempt > from package-contains-documentation-outside-usr-share-doc. Totally ACK that these are false-positives. However, I am not sure that this is a general or widespread issue which would warrant an exception being made in Lintian itself. As in, compared to adding a Lintian override in your specific package. -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#971420: jhbuild: please make the build reproducible
Source: jhbuild Version: 3.38.0-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: buildpath X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that jhbuild could not be built reproducibly. This is because the /usr/bin/jhbuild binary embedded the absolute build to get it's "source" directory. A patch is attached that imports the jhbuild module and determines this location programmatically instead. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk ` a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build.patch 2020-09-30 10:43:22.718738954 +0100 @@ -0,0 +1,22 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-30 + +--- jhbuild-3.38.0.orig/scripts/jhbuild.in jhbuild-3.38.0/scripts/jhbuild.in +@@ -20,13 +20,10 @@ if USE_CHECKOUT_SRC: + else: + pkgdatadir = "@pkgdatadir@" + datadir = "@datadir@" +-srcdir = "@srcdir@" + if '@pythondir@' not in sys.path: + sys.path.insert(0, '@pythondir@') +-try: +-import jhbuild +-except ImportError: +-sys.path.insert(0, srcdir) ++import jhbuild ++srcdir = os.path.abspath(os.path.dirname(jhbuild.__file__)) + + builtins.__dict__['PKGDATADIR'] = pkgdatadir + builtins.__dict__['DATADIR'] = datadir --- a/debian/patches/series 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/series 2020-09-30 10:28:50.211458738 +0100 @@ -0,0 +1 @@ +reproducible-build.patch
Bug#971418: jhbuild: Missing dependency on python3-distuils
Package: jhbuild Version: 3.38.0-1 Severity: serious Tags: patch Hi, This package is missing a binary dependency on python3-distutils: $ jhbuild Traceback (most recent call last): File "/usr/bin/jhbuild", line 29, in import jhbuild.main File "/usr/lib/python3/dist-packages/jhbuild/main.py", line 28, in import jhbuild.config File "/usr/lib/python3/dist-packages/jhbuild/config.py", line 31, in from jhbuild.environment import setup_env, setup_env_defaults, addpath File "/usr/lib/python3/dist-packages/jhbuild/environment.py", line 24, in from distutils.sysconfig import get_python_lib ModuleNotFoundError: No module named 'distutils.sysconfig' Installing python3-distutils resolves this issue. Patch attached (although it might mean some Python substvar apparatus is not working as expected). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-diff --git a/debian/control b/debian/control index e7a8882..7d18b97 100644 --- a/debian/control +++ b/debian/control @@ -22,7 +22,8 @@ Package: jhbuild Architecture: all Depends: ${shlibs:Depends}, ${misc:Depends}, - ${python3:Depends} + ${python3:Depends}, +python3-distuils, Recommends: git-core, patch, wget | curl,
Bug#971131: diffoscope: FTBFS: dh_auto_test: error: pybuild --test --test-pytest -i python{version} -p 3.8 returned exit code 13
forcemerge 970901 971131 affects 971131 diffoscope thanks > Source: diffoscope > Version: 160 > Severity: serious > Justification: FTBFS on amd64 […] > > File "", line 219, in > > _call_with_frames_removed > > File "/usr/lib/python3/dist-packages/black/__init__.py", line 65, in > > > > from _black_version import version as __version__ > > ModuleNotFoundError: No module named '_black_version' This is #970901 in black. I actually provided a patch for this issue a few days ago, but no response from the maintainer yet. -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#970901: black: cannot run, "ModuleNotFoundError: No module named '_black_version'"
tags 970901 + patch thanks Hi, > black: cannot run, "ModuleNotFoundError: No module named '_black_version'" The following patch works for me, but there is likely a cleaner solution; seems like the Black package maintainers are doing special things with the version handling and I am missing some nuance. --- a/debian/rules +++ b/debian/rules @@ -16,6 +16,8 @@ export VERSION=$(shell dpkg-parsechangelog -S Version|cut -d- -f1) %: echo "version = '$(VERSION)'" > _black_version.py + mkdir -p src + cp _black_version.py src/ dh $@ --with sphinxdoc,python3 --buildsystem=pybuild override_dh_auto_build: Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-diff --git a/debian/rules b/debian/rules index 09908f4..1a70969 100755 --- a/debian/rules +++ b/debian/rules @@ -16,6 +16,8 @@ export VERSION=$(shell dpkg-parsechangelog -S Version|cut -d- -f1) %: echo "version = '$(VERSION)'" > _black_version.py + mkdir -p src + cp _black_version.py src/ dh $@ --with sphinxdoc,python3 --buildsystem=pybuild override_dh_auto_build:
Bug#923696: lintian: Bad examples in Lintian::Tutorial::TestSuite
Hi Louis-Philippe, > I was told `private/build-test-packages && private/runtests` is what one > should now run, but it would be great if the CONTRIBUTING.md > documentation could be updated to make external contributions easier. I've pushed a change to CONTRIBUTING.md that should make this more prominent: https://salsa.debian.org/lintian/lintian/commit/32a564d3e8e35c18a19cb8d3db82a9f191002ea7 Hopefully this should be enough to finally close this issue. In addition to trying to keep this up-to-date I suggest that, however helpful that we think it might be in the moment, documenting useful behaviour on bug reports or in Salsa merge request (both of which will in-practice get lost) is distinctly sub-optimal and reduces the number and level of contributions over time. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#970908: smartdns: please make the build reproducible
Source: smartdns Version: 33+dfsg-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that smartdns could not be built reproducibly. A fairly invasive patch is attached that drops a bunch of references to __DATE__ and __TIMESTAMP__, etc. Not sure about the removal of the cache version/date routines, but this did not feel very reliable to begin with... but I am not in the best position to know. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk ` a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build.patch 2020-09-25 10:47:38.001506633 +0100 @@ -0,0 +1,103 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-25 + +--- smartdns-33+dfsg.orig/src/smartdns.c smartdns-33+dfsg/src/smartdns.c +@@ -77,10 +77,7 @@ static void _show_version(void) + const char *ver = SMARTDNS_VERION; + snprintf(str_ver, sizeof(str_ver), "%s", ver); + #else +- struct tm tm; +- get_compiled_time(); +- snprintf(str_ver, sizeof(str_ver), "1.%.4d%.2d%.2d-%.2d%.2d", tm.tm_year + 1900, tm.tm_mon + 1, tm.tm_mday, +- tm.tm_hour, tm.tm_min); ++ snprintf(str_ver, sizeof(str_ver), "(unknown)"); + #endif + printf("smartdns %s\n", str_ver); + } +@@ -266,8 +263,7 @@ static int _smartdns_init(void) + tlog_setlogscreen(verbose_screen); + tlog_setlevel(dns_conf_log_level); + +- tlog(TLOG_NOTICE, "smartdns starting...(Copyright (C) Nick Peng , build:%s %s)", __DATE__, +- __TIME__); ++ tlog(TLOG_NOTICE, "smartdns starting...(Copyright (C) Nick Peng )"); + + if (_smartdns_init_ssl() != 0) { + tlog(TLOG_ERROR, "init ssl failed."); +@@ -359,10 +355,10 @@ static void _sig_error_exit(int signo, s + arch = "mips"; + #endif + tlog(TLOG_FATAL, +- "process exit with signal %d, code = %d, errno = %d, pid = %d, self = %d, pc = %#lx, addr = %#lx, build(%s " +- "%s %s)\n", ++ "process exit with signal %d, code = %d, errno = %d, pid = %d, self = %d, pc = %#lx, addr = %#lx, build(" ++ "%s)\n", +signo, siginfo->si_code, siginfo->si_errno, siginfo->si_pid, getpid(), PC, (unsigned long)siginfo->si_addr, +- __DATE__, __TIME__, arch); ++ arch); + + sleep(1); + _exit(0); +--- smartdns-33+dfsg.orig/src/util.c smartdns-33+dfsg/src/util.c +@@ -929,25 +929,6 @@ static int parse_server_name_extension(c + return -2; + } + +-void get_compiled_time(struct tm *tm) +-{ +- char s_month[5]; +- int month, day, year; +- int hour, min, sec; +- static const char *month_names = "JanFebMarAprMayJunJulAugSepOctNovDec"; +- +- sscanf(__DATE__, "%5s %d %d", s_month, , ); +- month = (strstr(month_names, s_month) - month_names) / 3; +- sscanf(__TIME__, "%d:%d:%d", , , ); +- tm->tm_year = year - 1900; +- tm->tm_mon = month; +- tm->tm_mday = day; +- tm->tm_isdst = -1; +- tm->tm_hour = hour; +- tm->tm_min = min; +- tm->tm_sec = sec; +-} +- + int is_numeric(const char *str) + { + while (*str != '\0') { +--- smartdns-33+dfsg.orig/src/util.h smartdns-33+dfsg/src/util.h +@@ -96,8 +96,6 @@ int create_pid_file(const char *pid_file + */ + int parse_tls_header(const char *data, size_t data_len, char *hostname, const char **hostname_ptr); + +-void get_compiled_time(struct tm *tm); +- + int is_numeric(const char *str); + + int has_network_raw_cap(void); +--- smartdns-33+dfsg.orig/src/dns_cache.c smartdns-33+dfsg/src/dns_cache.c +@@ -581,11 +581,6 @@ int dns_cache_load(const char *file) + goto errout; + } + +- if (strncmp(cache_file.version, __TIMESTAMP__, DNS_CACHE_VERSION_LEN) != 0) { +- tlog(TLOG_WARN, "cache version is different, skip load cache."); +- goto errout; +- } +- + if (_dns_cache_read_record(fd, cache_file.cache_number) != 0) { + goto errout; + } +@@ -665,7 +660,6 @@ int dns_cache_save(const char *file) + struct dns_cache_file cache_file; + memset(_file, 0, sizeof(cache_file)); + cache_file.magic = MAGIC_NUMBER; +- safe_strncpy(cache_file.version, __TIMESTAMP__, DNS_CACHE_VERSION_LEN); + cache_file.cache_number = 0; + + if (lseek(fd, sizeof(cache_file), SEEK_SET) < 0) { --- a/debian/patches/series 2020-09-25 10:34:16.368518837 +0100 --- b/debian/patch
Bug#963124: python-pyqtgraph: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#970851: check-pgbackrest: please make the build reproducible
Source: check-pgbackrest Version: 1.9-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that check-pgbackrest could not be built reproducibly. While it uses SOURCE_DATE_EPOCH when generating the manpage, the output depended on the build system's local timezone. A patch is attached that uses UTC. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- --- a/debian/rules 2020-09-24 10:19:23.432519587 +0100 --- b/debian/rules 2020-09-24 10:20:16.804429572 +0100 @@ -3,7 +3,7 @@ include /usr/share/dpkg/pkg-info.mk override_dh_auto_build: - pod2man --center '' --release $(DEB_VERSION_UPSTREAM) --date $(shell date +%F -d @$(SOURCE_DATE_EPOCH)) check_pgbackrest > check_pgbackrest.1 + pod2man --center '' --release $(DEB_VERSION_UPSTREAM) --date $(shell date -u +%F -d @$(SOURCE_DATE_EPOCH)) check_pgbackrest > check_pgbackrest.1 %: dh $@
Bug#963688: neovim-qt: please make the build reproducible
Chris Lamb wrote: > Source: neovim-qt > Version: 0.2.7-3 > Tags: patch Gentle ping on the above? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#970431: wxwidgets3.0: Links in documentation points to build path, not installed path
Hi Scott, > Fixed upstream: > https://github.com/doxygen/doxygen/commit/dfc82af001c56254c6fde0affd009f80e19b1548 Thanks for the update, although I'm not sure "fixed" is quite right just yet as I see that issue #8037 [0] is still open. But let's wait a bit and see what happens. [0] https://github.com/doxygen/doxygen/issues/8037 Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#963600: critcl: please make the teapot.txt files reproducible
Hi Andrew, > Source: critcl > Version: 3.1.17+dfsg-1 > Tags: patch There hasn't seem to be any update on this bug in 90 days. Would you consider applying this patch and uploading? Having reproducible teapot.txt files has, of course, always been a priority for Debian. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#963119: petitboot: please make the build reproducible
Dear Maintainer, > Source: petitboot > Version: 13.05.29.14.00-g4dc604b-1 > Tags: patch There hasn't seem to be any update on this bug in 94 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#963533: python-stem: please make the build reproducible
Dear Maintainer, > Source: python-stem > Version: 1.2.2-1.1 > Tags: patch There hasn't seem to be any update on this bug in 90 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#970498: libiio: please make the manpages reproducible
Source: libiio Version: 0.19-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that libiio could not be built reproducibly. This is because it uses the current build time in the generated manpages. Patch attached that uses SOURCE_DATE_EPOCH [1]. [0] https://reproducible-builds.org/ [1] https://reproducible-builds.org/docs/source-date-epoch/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk ` a/debian/patches/reproducible-build2.patch 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build2.patch 2020-09-17 10:46:35.259968017 +0100 @@ -0,0 +1,25 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-17 + +--- libiio-0.19.orig/man/CMakeLists.txt libiio-0.19/man/CMakeLists.txt +@@ -1,9 +1,15 @@ + if (WITH_MAN) + find_program(BASH_EXECUTABLE bash) + find_program(DATE_EXECUTABLE date) +- execute_process( +- COMMAND ${DATE_EXECUTABLE} "+%d %B %Y" +- OUTPUT_VARIABLE CMAKE_DATE OUTPUT_STRIP_TRAILING_WHITESPACE) ++ if (DEFINED ENV{SOURCE_DATE_EPOCH}) ++ execute_process( ++ COMMAND ${DATE_EXECUTABLE} "-u" "-d" "@$ENV{SOURCE_DATE_EPOCH}" "+%d %B %Y" ++ OUTPUT_VARIABLE CMAKE_DATE OUTPUT_STRIP_TRAILING_WHITESPACE) ++ else () ++ execute_process( ++ COMMAND ${DATE_EXECUTABLE} "+%d %B %Y" ++ OUTPUT_VARIABLE CMAKE_DATE OUTPUT_STRIP_TRAILING_WHITESPACE) ++ endif () + execute_process( + COMMAND ${BASH_EXECUTABLE} "-c" "${CMAKE_CURRENT_SOURCE_DIR}/make_man.sh > ${CMAKE_BINARY_DIR}/libiio.3.in" + ) --- a/debian/patches/series 2020-09-17 10:40:36.959203553 +0100 --- b/debian/patches/series 2020-09-17 10:46:33.979951070 +0100 @@ -9,3 +9,4 @@ 0009-usb-Add-trigger-support-to-the-USB-backend.patch reproducible-build.patch python-setup-libiio +reproducible-build2.patch
Bug#970431: wxwidgets3.0: Links in documentation points to build path, not installed path
Package: wxwidgets3.0 Version: 3.0.5.1+dfsg-2 Severity: normal User: reproducible-bui...@lists.alioth.debian.org Usertags: buildpath X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, It looks like a number of internal references in the documentation point to their build-time location. For example: For more information on socket events see wxSocketFlags . This is incorrect because it links to under /build/1st, or whatever directory the package was built from. As this directory will not exist when the package is installed, the links cannot resolve. (The exact path in the Debian archive will differ from the above, but the same problem will be there.) This was found during reproducibility testing. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#968603: memcached should enable TLS by default
Hi Tomas, > I believe it is a race condition because most issues with this suite are. > I created vm with 4 virtual cpus and unstable debian to simulate your > environment but again the suite did not hang. Can you please change > the "-j" options value passed to make to 1? I just tried this and the testsuite has now passed four times in a row. Thanks for the tip, I think you got it. Uploading this change to Debian now in order to see how it works on the official build machines, although I will limit the parallelization to 1 CPU only when running the tests; no need to do this in the build/configure stages, after all. -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#970383: evince: please make the build reproducible
Source: evince Version: 3.38.0-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: buildpath X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that evince could not be built reproducibly. This is because it generates .h header files that contain the absolute build path via the @filename@ placeholder. Patch attached that uses @basename@ instead — these are comments, after all. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build.patch 2020-09-15 11:37:46.690300213 +0100 @@ -0,0 +1,48 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-15 + +--- evince-3.38.0.orig/libdocument/ev-document-type-builtins.c.template evince-3.38.0/libdocument/ev-document-type-builtins.c.template +@@ -6,7 +6,7 @@ + /*** END file-header ***/ + + /*** BEGIN file-production ***/ +-/* enumerations from "@filename@" */ ++/* enumerations from "@basename@" */ + #include "@filename@" + /*** END file-production ***/ + +--- evince-3.38.0.orig/libdocument/ev-document-type-builtins.h.template evince-3.38.0/libdocument/ev-document-type-builtins.h.template +@@ -14,7 +14,7 @@ G_BEGIN_DECLS + + /*** BEGIN file-production ***/ + +-/* enumerations from "@filename@" */ ++/* enumerations from "@basename@" */ + /*** END file-production ***/ + + /*** BEGIN value-header ***/ +--- evince-3.38.0.orig/libview/ev-view-type-builtins.c.template evince-3.38.0/libview/ev-view-type-builtins.c.template +@@ -6,7 +6,7 @@ + /*** END file-header ***/ + + /*** BEGIN file-production ***/ +-/* enumerations from "@filename@" */ ++/* enumerations from "@basename@" */ + #include "@filename@" + /*** END file-production ***/ + +--- evince-3.38.0.orig/libview/ev-view-type-builtins.h.template evince-3.38.0/libview/ev-view-type-builtins.h.template +@@ -14,7 +14,7 @@ G_BEGIN_DECLS + + /*** BEGIN file-production ***/ + +-/* enumerations from "@filename@" */ ++/* enumerations from "@basename@" */ + /*** END file-production ***/ + + /*** BEGIN value-header ***/ --- a/debian/patches/series 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/series 2020-09-15 11:37:45.722292124 +0100 @@ -0,0 +1 @@ +reproducible-build.patch
Bug#968603: memcached should enable TLS by default
Hi Tomas, > debian unstable. But unfortunately i do not have a powerful > debian machine so maybe i do not encounter some race condition > that you do. (Out of interest, why do you believe it is a race condition?) Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#968603: memcached should enable TLS by default
Hi Tomas, > I can show you a test log from Fedora Rawhide where we have 1.6.7. > https://tkorbar.fedorapeople.org/test.log Thanks. Replying quickly, but I notice that "your" log does not say: Running basic tests with TLS This comes from upstream's Makefile.am. Are you sure you are building and running the tests with SSL mode? The lack of this message would suggest not and could be the reason why you are not seeing the same crash/hang. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#970278: smartlist: please make the build reproducible
Source: smartlist Version: 3.15-25 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: environment X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that smartlist could not be built reproducibly. This is because the choplist binary contains the current user via the LISTID define. Given that has been the build user's username for many years (?), I suspect it makes no difference what value this actually has, but patch attached that sets it to "list" (ie. to match the name of uid 38). [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- --- a/debian/patches/reproducible-build 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build 2020-09-14 10:51:03.215780208 +0100 @@ -0,0 +1,15 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-14 + +--- smartlist-3.15.orig/SmartList/install.sh2 smartlist-3.15/SmartList/install.sh2 +@@ -26,7 +26,7 @@ hfile=targetdir.h + + cat >$hfile <
Bug#970277: bookworm: manpage contains debugging information from runing binary
Package: bookworm Version: 1.1.2+git20200823-1 Severity: normal User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, The manpage contains (useless/distracting) debugging output from the binary: .\" DO NOT MODIFY THIS FILE! It was generated by help2man 1.47.16. .TH COM.GITHUB.BABLUBOY.BOOKWORM "1" "September 2020" "com.github.babluboy.bookworm 1.1.2+git20200823-1" "User Commands" .SH NAME com.github.babluboy.bookworm \- bookworm .SH DESCRIPTION (process:6854): GLib\-GIO\-DEBUG: 21:16:55.242: _g_io_module_get_default: Found default implementation local (GLocalVfs) for ?gio\-vfs? ** (process:6854): DEBUG: 21:16:55.244: bookworm.vala:128: Bookworm Install Directory: \fI\,/usr/share\/\fP ** (process:6854): DEBUG: 21:16:55.244: bookworm.vala:129: Bookworm Install Tasks Scripts Directory: \fI\,/usr/share/com.github.babluboy.bookworm/scripts/tasks\/\fP ** (process:6854): DEBUG: 21:16:55.244: bookworm.vala:130: Bookworm Install Mobi Scripts Directory: \fI\,/usr/share/com.github.babluboy.bookworm/scripts/mobi_lib\/\fP ** (process:6854): DEBUG: 21:16:55.244: bookworm.vala:131: Bookworm User Data Directory: /home/lamby/.local/share/com.github.babluboy.bookworm Usage: I tried to remove this by setting G_DEBUG= to various values as well as passing --info as well, but no dice. I suspect it will be easier to resolve for someone who knows Vala / Glib. This is also preventing the build from being reproducible. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#920792: ansible: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 536 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#941716: gobject-introspection: please make the build reproducible
Dear Maintainer, > Source: gobject-introspection > Version: 1.40.0-1ubuntu0.2 > Tags: patch There hasn't seem to be any update on this bug in 344 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#864082: fontconfig: please make the cache files reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#940013: apophenia: please make the build reproducible
Dear Maintainer, > Source: apophenia > Version: 0.999b+ds3-2 > Tags: patch There hasn't seem to be any update on this bug in 367 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#929208: xorg-gtest: please make the build reproducible
Dear Maintainer, > Source: xorg-gtest > Version: 0.7.1-5 > Tags: patch There hasn't seem to be any update on this bug in 481 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#884402: sonic-pi: please make the documentation build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 932 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#831587: stressapptest: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#891073: clblas: please make the build reproducible
Dear Maintainer, > Source: clblas > Version: 2.10-2 > Tags: patch There hasn't seem to be any update on this bug in 933 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#885326: flask-peewee: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 991 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#834016: ddd: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#776938: sendfile: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777185: cli-common-dev: please make the debhelper script additions reproducible
Dear Maintainer, > Source: cli-common > Version: 0.8.2 > Tags: patch There hasn't seem to be any update on this bug in 1283 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777413: mailto: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#838713: python-xlib: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#970130: bluez-source: Contains bluez-source-tmp directory
Package: bluez-source Version: 5.54-1 Severity: normal Hi, I think there are problems with the construction of /usr/src/bluez.tar.bz2 in the bluez-source package: $ tar xfj usr/src/bluez.tar.bz2 $ tree -d . ├── bluez-source-tmp <<<<<<<<<<<<<<<<<<<<<<<<<<<<<< │ ├── android │ │ ├── audio_utils │ │ ├── client │ │ ├── compat │ │ │ └── readline │ │ ├── cutils │ │ ├── hardware │ │ └── system │ ├── attrib │ ├── autom4te.cache │ ├── btio │ ├── client │ ├── completion │ │ └── zsh │ ├── doc │ ├── emulator │ ├── gdbus │ ├── gobex │ ├── lib │ │ └── bluetooth │ ├── mesh │ ├── monitor │ ├── obexd │ │ ├── client │ │ ├── plugins │ │ └── src │ ├── peripheral │ ├── plugins │ ├── profiles │ │ ├── audio │ │ ├── battery │ │ ├── cups │ │ ├── deviceinfo │ │ ├── gap │ │ ├── health │ │ ├── iap │ │ ├── input │ │ ├── midi │ │ ├── network │ │ ├── sap │ │ └── scanparam │ ├── src │ │ └── shared │ ├── test │ ├── tools │ │ ├── mesh │ │ ├── mesh-gatt │ │ └── parser │ └── unit .. In addition, this file is not reproducible as it varies on the build umask, and it also contains symlinks back to the original build tree, but this might all be a symptom of a larger problem. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#952493: xavs2: please make the build reproducible
Dear Maintainer, > Source: xavs2 > Version: 1.3-1~exp2 > Tags: patch There hasn't seem to be any update on this bug in 198 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#953071: ndisc6: please make the build reproducible
Dear Maintainer, > Source: ndisc6 > Version: 1.0.3-3 > Tags: patch There hasn't seem to be any update on this bug in 190 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#955783: netgen-lvs: please make the build reproducible
Dear Maintainer, > Source: netgen-lvs > Version: 1.5.118-1 > Tags: patch There hasn't seem to be any update on this bug in 158 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#960591: mistral: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#968603: memcached should enable TLS by default
Hi Moises, > We run the tests afterward on a dedicated machine.. The question here is not when or where these tests are run - can you reproduce these test failures at all on this other machine? I can reproduce them locally here (NB. with TLS enabled during the build). If you can/cannot, sharing the test log would be a good next step. > ...we do not run memcacheds test suite during build because it is cpu > load dependent and not stable enough for us to rely on it during build. As an unrelated remark, if the tests are CPU-load dependent (and therefore non-deterministic) I would suggest you file that as an upstream issue. A randomly-failing testsuite is, as I am sure you are aware, not good software engineering practice. Thanks for looking into this so far. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#960607: python-watcherclient: please make the build reproducible
Dear Maintainer, > Source: python-watcherclient > Version: 0.25.1-1 > Tags: patch There hasn't seem to be any update on this bug in 118 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#946331: gtk-doc: please make the output reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 261 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#956591: gpick: please make the build reproducible
Dear Maintainer, > Source: gpick > Version: 0.2.5-2 > Tags: patch There hasn't seem to be any update on this bug in 149 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#953646: node-nodedbi: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 182 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#886277: [Pkg-javascript-devel] Bug#886277: node-promise: please make the build reproducible
Hi Xavier, > > Friendly ping on this? > > Hi, according to > https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/node-promise.html, > version 8.1.0-1 fixed this bug. Do you agree ? Yep; looks great. Thank you. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#970024: cif2cell: please make the build reproducible
Source: cif2cell Version: 2.0.0a1+dfsg-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] we noticed that cif2cell could not be built reproducibly. This is because it iterated over a set in non-deterministic order to generate its documentation. Patch attached. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.0 +0100 --- b/debian/patches/reproducible-build.patch 2020-09-10 11:36:20.876397860 +0100 @@ -0,0 +1,15 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2020-09-10 + +--- cif2cell-2.0.0a1+dfsg.orig/binaries/cif2cell cif2cell-2.0.0a1+dfsg/binaries/cif2cell +@@ -61,7 +61,7 @@ vcaprograms = set(["castep","vasp"]) + # + setupallprogs = set(["vasp","pwscf","quantum-espresso","rspt","mopac"]) + setupallstring = "" +-for p in setupallprogs: ++for p in sorted(setupallprogs): + setupallstring += p+", " + setupallstring = setupallstring.rstrip(", ") + # --- a/debian/patches/series 2020-09-10 11:11:34.294233658 +0100 --- b/debian/patches/series 2020-09-10 11:36:20.028393989 +0100 @@ -1,2 +1,3 @@ shebang.patch tests.patch +reproducible-build.patch
Bug#886277: node-promise: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#945105: intel-gpu-tools: please make the build reproducible
Dear Maintainer, > Source: intel-gpu-tools > Version: 1.2-1 > Tags: patch There hasn't seem to be any update on this bug in 294 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#945105: intel-gpu-tools: please make the build reproducible
Dear Maintainer, > Source: intel-gpu-tools > Version: 1.2-1 > Tags: patch There hasn't seem to be any update on this bug in 294 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#907929: taopm: please re-autoreconf make the build reproducible (again)
Dear Maintainer, > Source: taopm > Version: 1.0-4 > Tags: patch There hasn't seem to be any update on this bug in 736 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#936452: rust-fs-extra: please make the build reproducible
Dear Maintainer, > Source: rust-fs-extra > Version: 1.1.0-1 > Tags: patch There hasn't seem to be any update on this bug in 376 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#945822: liblopsub: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 281 days now (!). As you mention, you may have already fixed it. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#866945: tinymux: please make the build reproducible
Dear Maintainer, > Source: tinymux > Version: 2.10.1.14-1 > Tags: patch There hasn't seem to be any update on this bug in 1164 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#860972: cyclades-serial-client: please make the build reproducible
Dear Maintainer, > Source: cyclades-serial-client > Version: 0.92 > Tags: patch There hasn't seem to be any update on this bug in 1235 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#942009: stgit: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#860470: libccrtp: please make the build reproducible
Dear Maintainer, > Source: libccrtp > Version: 2.0.9-2.3build1 > Tags: patch There hasn't seem to be any update on this bug in 1240 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#831585: tcpreen: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#909782: libinput: please make the build reproducible
Hi Julien, > The patch doesn't seem quite right, so I don't think we should apply it > as-is. It seems to me LIBINPUT_QUIRKS_SRCDIR shouldn't be in the > shipped packages at all, so a patch that fixes that and can be sent > upstream would be better. I would agree. I blame "2018 lamby" for his shortsightedness. Hopefully someone can step up and write/submit this patch. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#968603: memcached should enable TLS by default
Hi Moises, > memcached should enable TLS by default I released this in memcached version 1.6.6-2. However, I continue to experience a number of build failures. For example: https://buildd.debian.org/status/fetch.php?pkg=memcached=amd64=1.6.7%2Bdfsg-1=1599310749=0 NB. the "Signal handled: Terminated." line — I think the other error messages are a consequence of this. Is this something you could look into? Otherwise, I may have to revert TLS support for the time being. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#969958: haskell-haskell-gi-base: please make the build reproducible (non-deterministic enumeration values)
Source: haskell-haskell-gi-base Version: 0.23.0-1 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0] I noticed that haskell-haskell-gi-base could not be built reproducibly. I believe this occurs because the value of gtypeError in Data/GI/Base/GType.hsc appears to be non-deterministic. It is actually easier to see in the generated documentation, but it is reflected in the code/binaries itself, and then in the varying interface hashes and even the varying "Provides" of the binary package itself: │ │ │ │ -Provides: libghc-haskell-gi-base-dev-0.24.2-9bec6 │ │ │ │ +Provides: libghc-haskell-gi-base-dev-0.24.2-19256 Again, this is just a downstream effect of the root cause; simply fixing or removing this is fixing the wrong thing. This may even be demonstrating a larger problem in the package as you might not be able to link (??) against the package as it will always have a different interface hash. Alas, I'm not a GHC person. Poking around, the following comment in GType.hsc appears to be highly relevant: 32 {-| [Note: compile-time vs run-time GTypes] 33 34 Notice that there are two types of GType's: the fundamental ones, 35 which are created with G_TYPE_MAKE_FUNDAMENTAL(n) and always have the 36 same runtime representation, and the ones that are registered in the 37 GObject type system at runtime, and whose `CGType` may change for each 38 program run (and generally does). 39 40 For the first type it is safe to use hsc to read the numerical values 41 of the CGType at compile type, but for the second type it is essential 42 to call the corresponding _get_type() function at runtime, and not use 43 the value of the corresponding "constant" at compile time via hsc. 44 -} Hopefully this should be straightforward for something steeped in GLib lore to understand and fix. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#926298: adms: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 504 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#881259: soundmodem: please make the build reproducible
Dear Maintainer, > Source: soundmodem > Version: 0.20-5 > Tags: patch There hasn't seem to be any update on this bug in 1033 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#891075: clfft: please make the build (partly) reproducible
Dear Maintainer, > Source: clfft > Version: 2.12.2-1 > Tags: patch There hasn't seem to be any update on this bug in 929 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#836609: nostalgy: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#890312: desmume: please make the build reproducible
Dear Maintainer, > Source: desmume > Version: 0.9.10-2 > Tags: patch There hasn't seem to be any update on this bug in 938 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777009: debian-builder: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#969753: diffoscope: autopkgtest failures
Hi Gianfranco, > Hello, autopkgtests looks sad, pytest-with-recommends works, while > pytest doesn't, because of missing pgpdump > > I did add some @skip_unless_tools_exist("pgpdump") around the failing > tests (attached the diff), however I don't know > if this is the right solution, or something better has to be > implemented. Thanks. Adding the decorator in test_pgp.py looks fine at a first glance, but needing PGP support to diff two directories (!) is a symptom of a deeper problem with pgpdump integration. Will investigate. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#952694: snapd-glib: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 182 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#944782: python-sybil: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 287 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#935362: gdbm: please make the build (slightly more..) reproducible
Dear Maintainer, > Source: gdbm > Version: 1.8.3-13 > Tags: patch There hasn't seem to be any update on this bug in 379 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#911757: zsh-antigen: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#887987: zorp: please make the build reproducible
Dear Maintainer, > Source: zorp > Version: 3.9.5-4 > Tags: patch There hasn't seem to be any update on this bug in 955 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#926421: netcdf-parallel: please make the build reproducible
Dear Maintainer, > Source: netcdf-parallel > Version: 1:4.7.3-2build1 > Tags: patch There hasn't seem to be any update on this bug in 518 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#969526: negotiate_kerberos_auth: Kerberos auth helper broken with error: "Invalid base64 token" after upgrade from 3.5.23-5+deb9u1 to 3.5.23-5+deb9u3
Hi Joel K., > I've checked the changelog and the diff for version deb9u3. For me it > looks like the following patch broke the auth helper. > > This patch changed the negotiate_kerberos_auth code. Also the debug > error message I've received was added "ERROR: Invalid base64 token". > > * Improve patch for CVE-2019-12529 and replace more base64 code with code > from Nettle's crypto library. > > patches/CVE-2019-12529.patch > > My C knowledge is way too bad to find the problem in the code. Sorry :) No problem, thank you for your investigation regardless. I haven't looked at this issue myself, but what I've done here is added Markus to the CC of this bug as they prepared the +deb9u2 and +deb9u3 updates and may not see this message otherwise (not quite sure who is on the recipient list of this mail): squid3 (3.5.23-5+deb9u3) stretch-security; urgency=high * Non-maintainer upload by the LTS team. * Fix regression when parsing icap and ecap protocols. Do not return PROTO_NONE anymore and prevent an assertion. (Closes: #965012) * Improve patch for CVE-2019-12529 and replace more base64 code with code from Nettle's crypto library. * Enable the test suite by default now. Fix test failures. -- Markus Koschany Sat, 08 Aug 2020 20:51:51 +0200 squid3 (3.5.23-5+deb9u2) stretch-security; urgency=medium * Non-maintainer upload by the LTS team. * Fix CVE-2018-19132, CVE-2019-12519, CVE-2019-12520, CVE-2019-12521, CVE-2019-12523, CVE-2019-12524, CVE-2019-12525, CVE-2019-12526, CVE-2019-12528, CVE-2019-12529, CVE-2019-13345, CVE-2019-18676, CVE-2019-18677, CVE-2019-18678, CVE-2019-18679, CVE-2019-18860, CVE-2020-11945, CVE-2020-8449 and CVE-2020-8450. Several security vulnerabilites were discovered in squid3. Due to incorrect input validation and URL request handling it was possible to bypass access restrictions which allowed access to restricted HTTP servers and to cause a denial-of-service. -- Markus Koschany Fri, 10 Jul 2020 21:58:09 +0200 Hopefully the solution will be obvious/straightforward to Markus. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#930814: node-d3-hierarchy: please make the build reproducible
Dear Maintainer, > Source: node-d3-hierarchy > Version: 1.1.8-1 > Tags: patch There hasn't seem to be any update on this bug in 440 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#892425: node-package-preamble: please make the output reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#955341: gucharmap: please make the build reproducible
Dear Maintainer, > Source: gucharmap > Version: 1:3.14.1-1 > Tags: patch There hasn't seem to be any update on this bug in 157 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#951573: javatools: please make the build reproducible
Dear Maintainer, > Source: javatools > Version: 0.75 > Tags: patch There hasn't seem to be any update on this bug in 198 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#882580: ruby-mmap2: please make the build reproducible
Dear Maintainer, > Source: ruby-mmap2 > Version: 2.2.7-1 > Tags: patch There hasn't seem to be any update on this bug in 1014 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777410: freecdb: please make the build reproducible
tags 777410 - patch thanks Hi Sudip, > > Friendly ping on this? > > This is an orphan package and anyone can make a QA upload. Ah, I did not spot it was a QA package. (*) > And can you please check again if it still has the problem? > d/rules has been completely rewritten with 0.76 version and so the > patch will not apply anymore. Rechecking.. okay, so there is now a different set of problem or problems that I can't immediately resolve, so I am removing the "patch" tag for now. Thanks for the quick reply. :) (*) Well, actually UDD is returning me out of date "maintainer_name" and "maintainer_email" values in the "bugs" table; the BTS webpages are is correctly displaying this as a QA/orphaned package. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#831031: boolector: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#860200: poti: please make the build reproducible
Chris Lamb wrote: > Would you consider applying this patch and uploading? Friendly ping on this? Seems like there hasn't been any update on this bug in 1233 days now (!). Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#835259: quvi: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#828066: gsmlib: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#805773: keylaunch: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777326: cuyo: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#776933: maildirsync: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#858220: ns2: please make the build reproducible
Dear Maintainer, > Source: ns2 > Version: 2.35+dfsg-2ubuntu1 > Tags: patch There hasn't seem to be any update on this bug in 1262 days, in which time the Reproducible Builds effort has come on a long way. Would you consider applying this patch and uploading? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#834279: phpldapadmin: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#926242: [rb-general] Bug#926242: jenkins.debian.org: Please test reproducibility status of Debian Installer images
Chris Lamb wrote: > > I've made an initial step of taking my patch from: > > > > https://bugs.debian.org/926242#127 > > > > … and submitting it as a MR on salsa here: > > > > > > https://salsa.debian.org/installer-team/debian-installer/-/merge_requests/13 > > May I make a gentle request to get this MR merged? It's been open for > about 5 months now, only affects the build system and is only to > handle cases where we have the stranger [foo=bar] arguments in > sources.list(5) entries, which is unlikely to be the case for any > official builds. It has been a little disheartening to go through a large number of minor revisions to this MR, only for it to then go unacknowledged for almost half a year. Please let me know if debian-boot has an alternative or preferred method of performing reviews of this kind — I would, of course, be more than willing to follow that if pointed in the right direction. Without that, however, I remain at a loss at how I can effectively contribute to this project. Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-
Bug#834945: libquvi: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777483: jargon: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#778946: madlib: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#834776: uhub: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#777428: libtnt: please make the build reproducible
Chris Lamb wrote: > [..] Friendly ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#776955: elida: please make the build reproducible
Chris Lamb wrote: > [..] Gentle ping on this? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
Bug#834050: libpam-ldap: please make the build reproducible
Hi Lucas, > I'm little busy this days, > > If someone could make patch, please make a NMU. I think I will personally refrain from doing an NMU for such an important security-related package for this issue, but thank you for the 'go ahead'. Indeed, given the importance of this package, is it ridiculous to suggest seeking a co-maintainer on debian-devel? Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org chris-lamb.co.uk `-