Bug#716916: [DRE-maint] Bug#716916: ruby-gettext: rxgettext doubles the backslashes in newline '\n' characters

Control: tag -1 + upstream Hi Francesco, Francesco Poli (wintermute): > First of all, thanks a lot for fixing the bugs I have previously > reported (#684182, #684184, and #692487)! And thanks for your reports! :) > I noticed something new in rxgettext, and it looks like a newly > introduced bug

Bug#719844: dpkg-source: Make compresing of {data,control}.tar.gz a deterministic process

Hi! Guillem Jover: > I've been thinking about this, and I think you might be trying to > solve the problem in the wrong place(s), and possibly there's a need > to step back and ponder about what do you really want out of all this, > to know where or how to best fix it. > […] My ideal scenario is

Bug#719845: [PATCH] t-deterministic-file-order: new test case

In order to make the build reproducible, we ensure that the files are written to the .deb in a deterministic file order. --- Here is a test case for pkg-tests that should ensure that files are always written in the same order in the control and data tarball, despite what readdir() says. t-determ

Bug#719845: [PATCH] t-deterministic-file-order: new test case

Guillem Jover: > On Tue, 2013-08-27 at 23:12:34 +0200, Jérémy Bobbio wrote: > > In order to make the build reproducible, we ensure that the files are > > written to the .deb in a deterministic file order. > > --- > > > > Here is a test case for pkg-tests

Bug#719844: dpkg-source: Make compresing of {data,control}.tar.gz a deterministic process

Jérémy Bobbio: > Guillem Jover: > > The timestamp on the ar member let's you know when the package got > > built. > > I don't believe this add much value: we have this information in the > .changes files already. > > Anyway, I was thinking of adding a `-

Bug#721179: lintian: Please update autopkgtest known restrictions

Package: lintian Version: 2.5.17 Severity: minor Tags: patch Hi dear Lintian maintainers, Could you please update the list of known restrictions for autopkgtest? It looks like `allow-stderr` is missing. I believe the attached patch written against the master branch will do the trick. Thanks! --

Bug#719844: dpkg-source: Make compresing of {data,control}.tar.gz a deterministic process

Jonathan Nieder: > > I disagree that this is important information. Most packages that I have > > seen so far do not propagate timestamps when copying a file from source. > > Could you give me an example of one that would do so? > > See http://www.debian.org/doc/debian-policy/ch-source.html#s-times

Bug#719844: dpkg-source: Make compresing of {data,control}.tar.gz a deterministic process

Jérémy Bobbio: > Jonathan Nieder: > > > I disagree that this is important information. Most packages that I have > > > seen so far do not propagate timestamps when copying a file from source. > > > Could you give me an example of one that would do so? > > >

Bug#721574: ruby-gettext: undefined method force_encoding... during apt-listbugs

Ivan Sergio Borgonovo: > calling aptitude [] runs apt-listbugs that fails with > > /usr/lib/ruby/vendor_ruby/gettext/mo.rb:46: undefined method > `force_encoding' for "\225\004\022\336":String (NoMethodError) > from /usr/lib/ruby/vendor_ruby/gettext/text_domain.rb:16:in > `require'

Bug#432200: Ruby 1.8 is going away

Control: severity -1 serious Hi! Ruby 1.8 is unsupported upstream and should not be part of Jessie. Please update apt-listbugs to make it works with newer Ruby versions. See also: Thanks! -- Lunar

Bug#721618: Ruby 1.8 is going away

Package: schleuder Version: 2.2.1-3 Severity: serious Justification: unsuitable for release Hi! schleuder currently depends on ruby1.8. Ruby 1.8 is unsupported upstream and unsuitable for release. We would like to remove it from the archive soon. See:

Bug#721703: RM: ruby-pcap -- ROM; dead upstream, alternative exists

Package: ftp.debian.org Hi! Please remove ruby-pcap from the archive. It has no reverse dependencies. Upstream is inactive for years. Other developers resumed work around a pcap binding for ruby in the pcaprub project. The later library entered the archive as ruby-pcaprub today. Thanks! -- Lun

Bug#690572: localization takes $LANG into account, but ignores $LC_MESSAGES

Hleb Valoshka: > > The bug really lies in ruby-gettext which does not currently parse > > LC_MESSAGES at all. It should, just like GNU gettext. > > Are you sure? GNU gettext uses LC_MESSAGES only indirectly, calling > _nl_locale_name (see intl/dcigettext.c), but it never checks its value by > itse

Bug#716796: [Pkg-javascript-devel] Bug#716796: Bug#716796: jQuery needs updating

Hi Raphael, Raphael Hertzog: > On Sun, 28 Jul 2013, Marcelo Jorge Vieira wrote: > > There is a big problem, Grunt depends on the JSHint and it is not > > DFSG-compatible (Crockford's license). > > > > Please read this: > > http://lists.alioth.debian.org/pipermail/pkg-javascript-devel/2013-Februar

Bug#721811: Florence does not release keys when terminated

Control: forwaded -1 f.agr...@gmail.com Hi Michael, Michael Billington: > If florence is killed/terminated, any keys which are down will remain down. > I think that the program should release anything it's holding when it is > closed. Thanks for your report. I have forwarded your suggestion to F

Bug#708223: pu: package ruby-tmail/1.2.7.1-3

not break anything else. Thanks, -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- diff -Nru ruby-tmail-1.2.7.1/debian/chang

Bug#708224: pu: package schleuder/2.2.1-2deb7u1

only addresses these 3 issues with the minimum amount of changes. Thanks, -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- diff

Bug#708224: pu: package schleuder/2.2.1-2deb7u1

Control: retitle -1 pu: package schleuder/2.2.1-2+deb7u1 Cyril Brulebois: > Jérémy Bobbio (14/05/2013): > > Some bugs have unfortunately slipped past my last tests when preparing > > Schleuder for Wheezy and only got noticed after upgrading a production > > system rig

Bug#708223: pu: package ruby-tmail/1.2.7.1-3

Cyril Brulebois: > Jérémy Bobbio (14/05/2013): > > Hi stable release team, > > > > The version of ruby-tmail currently in Wheezy (1.2.7.1-3) contains a > > regression in the way unquoted attachment filenames are parsed > > (#706117). This makes Schleuder error ou

Bug#727670: [roundcube-plugins-extra] Please add calendar and carddav plugins

Hi Matteo, Matteo Calorio: > If possible, please add calendar and carddav plugins, I find them > very useful to include events and contacts from a caldav/cardav > server. Do you have a link to upstream tarball and source repositories? The last time I have looked, upstream was using closed-source

Bug#677955: very intricate relationship between rspec packages

Cédric Boutillier: > I am wondering if for future versions it my not be more interesting to > provide "unsplit" these packages, by providing a unique Debian package > made out of four (including ruby-rspec) upstream gem. There is a working version of that idea in: http://anonscm.debian.org/gitweb/

Bug#724340: e17: Please do not store timestamps in headers of gzipped documentation

Package: e17 Version: 0.17.3-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! As part of the effort to have byte-to-byte identical reproducible builds [1], I've noticed that e17 currently stores a timestamp in the gzip header of some of i

Bug#724481: python-gnupg: Please package gnupg 1.2.2

Package: python-gnupg Severity: wishlist Hi! Would it be possible to package gnupg 1.2.2? The later comes from a new active upstream and is now gnupg on PyPI: https://pypi.python.org/pypi/gnupg Thanks, -- Lunar.''`. lu...@debian.org: :Ⓐ : #

Bug#724489: python-qrcode: missing dependency on python-six

Package: python-qrcode Version: 4.0.1-1 Severity: grave Hi! It looks like python-qrcode is missing a Depends on python-six. # apt-get install python-qrcode […] The following NEW packages will be installed: liblcms1 python-imaging python-qrcode […] $ echo 'bla' | qr Traceback (most recent cal

Bug#725675: ruby-packetfu: Should provide ruby2.0 compatibility

Package: ruby-packetfu Version: 1.1.8-2 Severity: wishlist Forwarded: https://github.com/todb/packetfu/issues/28 Hi! ruby-packetfu should be made compatible with ruby2.0. Hopefully, upstream will sort it out soon. -- Lunar.''`. lu...@debian.org

Bug#660759: xul-ext-torbutton: torbrowser firefox patches

Hi Robert, Robert Millan: > I just wanted to step in and give my point of view, which I think is quite > similar to that of the Tor project. […] > > In the meantime, I believe that providing torbutton does more harm than good, > because it provides the *illusion* of security rather than security i

Bug#760594: ITP: golang-siphash-dev -- Go implementation of SipHash-2-4

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org * Package name: golang-siphash-dev Version : 1.0.0 Upstream Author : Dmitry Chestnykh * URL : https://github.com/dchest/siphash * License

Bug#760595: ITP: golang-ed25519-dev -- Go implementation of Ed25519 signature algorithm

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org * Package name: golang-ed25519-dev Version : HEAD Upstream Author : Adam Langley * URL : https://github.com/agl/ed25519 * License : BSD-3

Bug#760596: ITP: obfs4proxy -- pluggable transport proxy for Tor, implementing obfs4

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org * Package name: obfs4proxy Version : 0.0.1 Upstream Author : Yawning Angel * URL : https://gitweb.torproject.org/pluggable-transports/obfs4.git

Bug#752904: ooniprobe: Cannot run ooniprobe in armhf

al () from /lib/ld-linux-armhf.so.3 The problem hardly looks in ooniprobe itself from the stacktrace. Could you please try to play with the yaml module or run other software which depends on python-yaml? I'm enclined to think the problem is on your hardware given the amount of armhf users an

Bug#719845: [PATCH] Deterministic file order for control and data archives

Hi! Jérémy Bobbio: > Here are four patches based on the current master (1e059955) that will > write files in deterministic order in the control and data archives. > File names are sorted by forking `sort` before being piped to `tar`. Attached are the same patches rebased on the curre

Bug#759886: debhelper: please make mtimes of packaged files deterministic

Package: debhelper Version: 9.20140817 User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain, timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! As part of the “reproducible builds” project [1], it would be great to get the files shipped in the Debian package

Bug#759886: debhelper: please make mtimes of packaged files deterministic

quot;! \\( $dh{EXCLUDE_FIND} \\)"; + } + + complex_doit("find $tmp -newermt '$dh{DATE}' $find_options -print0", + "2>/dev/null | xargs -0r touch --no-dereference --date='$dh{DATE}'"); +} + +=head1 SEE ALSO + +L + +This program is a part of debhelper

Bug#759895: debhelper: please strip non-deterministic data from static libraries

Package: debhelper Version: 9.20140817 Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain, timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! Currently, static libraries shipped in Debian package capture the time when the package is built. As p

Bug#759999: dpkg: please set reproducible timestamps in .deb ar file headers

Package: dpkg Version: 1.17.14 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain, timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! `.deb` are ar archives. The archive internal headers currently capture the time when the bu

Bug#760075: torsocks: SIGSEGV with torsocks 2.0.0 on some browsers, failure to anonimize others

js: > I upgraded torsocks from the 1.3.3 to 2.0.0 and it either SIGSEV on some > browsers > or else fails to anonimize others (in other words, running under tor they > cannot > access sites blocked by my firewall) Please be aware that browsing the web with anything else than the Tor Browser is n

Bug#759895: [debhelper-devel] Bug#759895: debhelper: please strip non-deterministic data from static libraries

Joey Hess: > Jérémy Bobbio wrote: > > Currently, static libraries shipped in Debian package capture the time > > when the package is built. As part of the “reproducible builds” > > project [1], it would be great to have static libriaries normalized. > > > > The a

Bug#759886: [debhelper-devel] Bug#759886: debhelper: please make mtimes of packaged files deterministic

Joey Hess: > Do you have a plan to get packages not using dh or cdbs to use this new > command? Its heart is a single find+xargs+touch command. I had in mind that packages not using dh or cdbs could have their own way on how to make the mtimes deterministic. Possibly by adding such a find command

Bug#762388: ifupdown: please make method order deterministic when generating C code

w + + * Output methods in stable order when generating C code to make +builds reproducible. + + -- Jérémy Bobbio Sun, 21 Sep 2014 18:19:56 + + ifupdown (0.7.48.1) unstable; urgency=low * Add --ignore-errors option. diff -Nru ifupdown-0.7.48.1/defn2c.pl ifupdown-0.7.48.2~reproduc

Bug#762397: libgpg-error: please do not capture the current time during the build process

build timestamp in order +to get reproducible builds. + + -- Jérémy Bobbio Sun, 21 Sep 2014 20:37:15 + + libgpg-error (1.16-1) unstable; urgency=medium * New upstream release diff -Nru libgpg-error-1.16/debian/patches/series libgpg-error-1.16/debian/patches/series --- libgpg-er

Bug#762433: lsof: please stop capturing environment information during the build process

@@ +lsof (4.86+dfsg-1.0reproducible1) UNRELEASED; urgency=medium + + * Allow LSOF_CCDATE to be overriden by an environment variable. + * Ensure build reproducibility by preventing Configure to capture +username, hostname, kernel version, and build time. + + -- Jérémy Bobbio Mon, 22 Sep 2014

Bug#762397: [Reproducible-builds] Bug#762397: libgpg-error: please do not capture the current time during the build process

Jeroen Dekkers: > Jérémy actually already wrote a patch for dpkg-buildpackage to export > DEB_BUILD_TIMESTAMP: > > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=75 > > But if we want to push these things upstream, wouldn't it be better to > remove the DEB_ prefix from the name of the envi

Bug#762622: discount: please mangle email addresses deterministically

Package: discount Version: 2.1.7-1 Severity: wishlist Tags: patches Forwarded: https://github.com/Orc/discount/pull/112 User: reproducible-bui...@lists.alioth.debian.org Usertags: randomness Hi! As part of the “reproducible builds” project [1], we have identified that currently discount output wa

Bug#762622: [Reproducible-builds] Bug#762622: discount: please mangle email addresses deterministically

Control: tags -1 + patch Jérémy Bobbio: > The attached patch changes the `mangle()` function accordingly. For real, this time. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get inst

Bug#762666: cwidget: please stop writing timestamps in Doxygen generated documentation

ckage builds to be reproducible. + + -- Jérémy Bobbio Wed, 24 Sep 2014 09:05:52 + + cwidget (0.5.17-1) unstable; urgency=medium * New upstream release diff -Nru cwidget-0.5.17/debian/patches/do-not-write-timestamps-in-documentation cwidget-0.5.17/debian/patches/do-not-write-timestamps-i

Bug#762674: python-apt: please don't embed the date and time of the build in apt_pkg

ME as they make the build + unreproducible. + + -- Jérémy Bobbio Wed, 24 Sep 2014 10:08:36 + + python-apt (0.9.3.10) unstable; urgency=medium * python/tag.cc: ensure that the final \n is there when diff -Nru python-apt-0.9.3.10/python/apt_pkgmodule.cc python-apt-0.9.3.10.0reproducible1/python/ap

Bug#762732: libdebian-installer: please do not write timestamps in Doxygen generated documentation

te timesamps in Doxygen generated documentation for +reproducibility of the build process. + + -- Jérémy Bobbio Wed, 24 Sep 2014 19:08:26 + + libdebian-installer (0.96) unstable; urgency=medium * arm64: Detect UEFI based systems as "efi" subarch. diff -Nru libdebian-insta

Bug#762854: groff: please provide a way to specify a creation date

Package: groff Version: 1.22.2-8 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain timestamps Hi! For the reasons outlined in , it would be great if groff could be given a creation date instead

Bug#756935: proot: cwd is not changed when target is bind mounted and matching proot cwd

Package: proot Version: 4.0.0-1 Severity: normal User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain Hi! Some lines of shells are sometimes better than lengthly explainations: $ mkdir -p /tmp/a $ cd /tmp/a $ proot -b /tmp/a:/test -w /test bash -c 'pwd' /tmp/a T

Bug#757234: xul-ext-https-everywhere: update Debian rules from master and my patches

Paul Wise: > I've been submitting changes to the rules for debian.org/debian.net as > DSA add more SSL-enabled domains[1]. I'm not sure if upstream will make > a release containing them in time for the jessie release so I thought I > would submit a diff against 3.5.3 so we can at least have recent

Bug#759231: dh-python: Please output dependencies in a stable order

Package: dh-python Version: 1.20140511-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain Hi! It would help the “reproducible efforts” [1] if dh-python would output dependencies in a stable order. Right now they are likely to be different each t

Bug#708223: pu: package ruby-tmail/1.2.7.1-3

gged it for acceptance. Thanks a lot! :) -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature

Bug#707079: chef: Please package new upstream version

Jérémy Bobbio: > Upstream branch 11.x might worth an upload to Debian. > > I am particularily interested in this because the 10.x branch of chef > depends on ruby-moneta but breaks with the API introduced in moneta 0.7. > The 11.x branch of does not depend on ruby-moneta anymor

Bug#710166: ITP: ruby-haml-contrib -- Elegant, structured XHTML/XML templating engine - addons

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio * Package name: ruby-haml-contrib Version : 1.0.0.1 Upstream Author : Norman Clarke * URL : https://github.com/haml/haml-contrib * License : Expat Programming Lang: Ruby Description : Elegant

Bug#684021: ruby-sinatra: shouldn't break error processing if error logging is failed

Aliaksandr Barouski: > When error logging in sinatra fails (with exception), it can't process > exception in right way. > > Example: > Our code handles Errno:EROFS: > error Errno:EROFS do > #some processing > end > > If standard logger (rack.error) starts failing (e.g. filesystem become > read

Bug#744975: xul-ext-https-everywhere: all rules lost?

at HTTPS Everywhere will rewrite the URL… and the URL will be shown in the rule list. I agree this is a major inconvenience though, especially if you wish to renable CACert-supported rules. -- Jérémy Bobbio.''`. jeremy.bob...@irq7.fr

Bug#723532: ruby-pcaprub link with -L/usr/lib

Control: tags -1 + moreinfo YunQiang Su: > This package has one or more -L/usr/lib in its build system, > which will make it ftbfs if there is libraries under /usr/lib, > while is not the default architecture, mips* for example. Is the problem still present in sid? -- Lunar

Bug#718218: coquelicot: fails to start due to "invalid byte sequence" error in fast_gettext

Control: reassign -1 ruby-fast-gettext Johannes Schauer: > Result: > > poparser.ry:162:in `===': invalid byte sequence in US-ASCII (ArgumentError) > from poparser.ry:162:in `parse' > from /usr/lib/ruby/vendor_ruby/fast_gettext/po_file.rb:16:in > `to_mo_file' That line says: p

Bug#706117: ruby-tmail: Improperly parse unquoted attachment filenames

an important issue as without a fix, Schleuder chokes (as in raising an error) on a good deal of emails which worked perfectly fine on Squeeze. -- Jérémy Bobbio.''`. lu...@deb

Bug#705100: dotclear: please update Dotclear to version 2.5

Jérémy Bobbio: > The Dotclear team released version 2.5 in March 2013. It would be great > to update to have it in Debian. Any comments on this? -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get i

Bug#706213: zope.event: Please package version 4.0.2

Package: zope.event Severity: wishlist Hi! Upstream has released versino 4.0.2 on 2012-12-31. It would be great to have it in Debian! :) Cheers, -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#706214: zope.component: Please package version 4.1.0

Package: zope.component Severity: wishlist Hi! Upstream has released version 4.1.0 on 2013-02-28. It would be great to have it in Debian! :) Thanks, -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#706215: transaction: Please package versinon 1.4.1

Package: transaction Severity: wishlist Hi! Upstream has released version 1.4.1 on 2013-02-20. It would be great to have it in Debian! Thanks, -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#706226: iceweasel: image titles not displayed when hovering (breaks XKCD!)

if you have not read it yet. Torbutton should be removed from Debian, but I am sadly waiting for <http://bugs.debian.org/bug=690729>… -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ

Bug#706432: RM: https-everywhere/2.0.5-1

itself works with pretty "volatile" data and needs frequent updates. A proper process should be discussed for Jessie, but that's for later times. Thanks! -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : #

Bug#706437: ikiwiki: Link and anchor mistach for copyright and license generated by meta directives

ot exist as page.tmpl contains: License: Either meta.pm or page.tmpl should probably be changed. Thanks, -- Jérémy Bobbio.''`. lu...@debian.org

Bug#705739: Mozilla is building support for WebDriver in Firefox

Mozilla is implementing support for a test interface compatible with WebDriver in Firefox. The name is Marionette: <https://developer.mozilla.org/en-US/docs/Marionette> It might eventually remove the need to build Selenium in order to control Firefox. -- Jérémy

Bug#706881: torbutton: outdated and dangerous, should be removed

probably not before Iceweasel gets the proper conflict. Or until the Tor Browser gets a package itself. -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install

Bug#707079: chef: Please package new upstream version

-moneta anymore. -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature

Bug#707255: ITP: parsley -- pattern-matching language based on OMeta and Python

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio * Package name: parsley Version : 1.1 Upstream Author : Allen Short * URL : https://launchpad.net/parsley * License : Expat Programming Lang: Python Description : pattern-matching language based on

Bug#707256: ITP: txsocksx -- SOCKS{4,4a,5} endpoints for Twisted

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio * Package name: txsocksx Version : 0.0.2 Upstream Author : Arturo Filastò * URL : https://github.com/hellais/txsocksx * License : BSD-2-clause Programming Lang: Python Description : SOCKS{4,4a,5

Bug#719233: ITP: python-cyclone -- web server framework for Python Twisted using the Tornado API

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio * Package name: python-cyclone Version : 1.1 Upstream Author : Alexandre Fiori * URL : http://www.cyclone.io/ * License : Apache-2.0 Programming Lang: Python Description : web server framework for

Bug#719301: [DRE-maint] Bug#719301: RFP: rjb -- RJB is a Ruby Java Bridge

aring releases (every 6 weeks!), and have > more time to develop useful features :) I'm on it. :) -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'`

Bug#719854: dpkg: Please expand all substvars in dpkg-genchanges

) { delete $fields->{$f}; } -$fields->output(\*STDOUT); # Note: no substitution of variables +$fields->apply_substvars($substvars); +$fields->output(\*STDOUT); Thanks! [1] https://wiki.debian.org/ReproducibleBuilds -- Jérémy Bobbio.'

Bug#719854: dpkg: Please expand all substvars in dpkg-genchanges

and probably closing after > a bit, given that the original request can be already fulfilled by other > (nicer) means. Fair enough. -- Jérémy Bobbio.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature

Bug#721910: xul-ext-torbutton: torbutton sets the wrong port number (8118) rather than the correct polipo port (8123)

dress other possible leaks and fingerprinting issues. -- Jérémy Bobbio Tue, 16 Oct 2012 20:33:40 +0200 (Note that this package is not in Wheezy for that reason.) -- Lunar.''`. lu...@debian.org

Bug#721909: tor does not set properly the polipo option "socksParentProxy = localhost:9050"

Patrick Zanon: > It would be nice if tor installation scripts could ask the user if to change > the polipo option "socksParentProxy = localhost:9050" so that polipo would > start > using tor infrastructure... The Tor project recommends against polipo since Firefox finally implemented SOCKS prop

Bug#722079: hello: Please provide a deterministic Build ID

Package: hello Version: 2.8-4 Severity: wishlist Tags: patch Hi! In the quest to get deterministic/reproducible builds [1], I have noticed that the result of building hello currently varies according to its build path. The attached patch use the debugedit tool to prevent such variation by reloca

Bug#722079: hello: Please provide a deterministic Build ID

Hi! Santiago Vila: > >In the quest to get deterministic/reproducible builds [1], I have > >noticed that the result of building hello currently varies according to > >its build path. > […] > While I can agree that reproducible builds is a good thing (I added > gzip -n recently), the proposed patch

Bug#722154: gem2deb: Please use dpkg-buildflags

Package: gem2deb Severity: wishlist Hi! gem2deb should ensure that Ruby extensions are built using the compilation flags available from dpkg-buildflags. Right now, this will enable hardening flags on Debian. In the future, it might help to have deterministic builds:

Bug#722166: bobcat: Please do not write timestamps in gzip files

Package: bobcat Version: 3.15.00-1 Severity: wishlist Hi! In the effort of making Debian binary package build reproducible [1], I have noticed that your package currently ship gz compressed files with a timestamp. Adding the `-n` or `--no-name` flag to the various calls to `gzip` made in `icmake

Bug#722166: bobcat: Please do not write timestamps in gzip files

Control: tags -1 + patch tony mancill: > Thanks for the suggestion and for looking into the cause of the issue > with the bobcat build. I'm suspect that Frank, the upstream developer, > will be willing to address this in a future upstream release. Great! Attached is a patch that indeed did the t

Bug#722186: dh-buildinfo: Please produce stable output

mu2/debian/changelog 2013-09-08 23:22:26.0 +0200 @@ -1,3 +1,10 @@ +dh-buildinfo (0.9+nmu2) UNRELEASED; urgency=low + + * Do not record timestamps when compressing buildinfo file. + * Output packages sorted by name. + + -- Jérémy Bobbio Sun, 08 Sep 2013 20:59:23 + + dh-buildinfo (0.9+nmu

Bug#722166: bobcat: Please do not write timestamps in gzip files

Hi Frank, Frank B. Brokken: > Of course I am. Could somebody please enlighten me what the problem actually > is? This is the first time in my l-o-o-o-o-ng life that I learn about a thing > called a `timestamp of a gzip file' and that it may cause problems. In Debian context, it currently can paus

Bug#722528: Coquelicot: support subdirectories

Control: forwarded -1 https://coquelicot.potager.org/TODO Hi Shawn, Shawn Landden: > I tried to install coquelicot under /images on my domain using > nginx's rewrite directive, and the main page shows up, but I cannot upload > as it goes to /upload. > > There should be an easy way to tell coquel

Bug#741421: coquelicot: Debug-style Net::IMAP::NoResponseError output in browser on bad user

Rowan Thorpe: > Just adding that this bug seems not to be limited to the IMAP authentication, > but is a general behaviour when receiving an exception from any of the > authentication modules. I know this because I just implemented LDAP > authentication, and any "failed authentication" from that sp

Bug#701625: ITP: txtorcon -- Twisted-based asynchronous Tor control protocol implementation

Package: wnpp Severity: wishlist Owner: Jérémy Bobbio * Package name: txtorcon Version : 0.7 Upstream Author : meejah * URL : https://github.com/meejah/txtorcon * License : Expat Programming Lang: Python Description : Twisted-based asynchronous Tor

Bug#765343: systemd: localed wrote a /etc/default/keyboard withouth XKBMODEL

Package: systemd Version: 215-5+b1 Hi! What happened: 1. Install Debian with GNOME desktop using Jessie d-i beta 2. 2. Upgrade to sid. 3. Add new layouts in Input Sources through the Region & Language interface. 4. Install Plymouth. 5. Restart. 6. Be unable to enter disk passphrase. I hadn't

Bug#766384: debhelper: please register conffiles in a stable order

Package: debhelper Version: 9.20141010 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain fileordering Hi! As part of the “reproducible builds” effort [1], we have noticed that dh_installdeb is registering conffiles depending on the file system or

Bug#766736: geoip-database: outdated license information; more databases could be in main!

Package: geoip-database Hi! According to , “The GeoLite databases are distributed under the Creative Commons Attribution-ShareAlike 3.0 Unported License”. This probably means that debian/copyright should be updated. But this also means that all GeoLi

Bug#719845: [PATCH] Deterministic file order for control and data archives

Jérémy Bobbio: > Here are four patches based on the current master (1e059955) that will > write files in deterministic order in the control and data archives. > File names are sorted by forking `sort` before being piped to `tar`. Attached are the patch based on current master (3

Bug#759999: dpkg: please set reproducible timestamps in .deb ar file headers

Jérémy Bobbio: > The first patch will modify `dpkg-deb` to use the same timestamp for > every member of the ar archive. > > The second patch will: > > 1. Make `dpkg-deb` try to look for a timestamp to use in the > DEB_BUILD_TIMESTAMP environment variable in epoch format

Bug#764251: socat: please set the build timestamp to a deterministic time

em to allow the build date to be set externally, +and set it to the latest debian/changelog entry for reproducibility. + + -- Jérémy Bobbio Mon, 06 Oct 2014 17:55:47 +0200 + socat (1.7.2.4-1) unstable; urgency=low * New upstream release, update patches. diff -Nru socat-1.7.2.4/debia

Bug#764251: socat: please set the build timestamp to a deterministic time

Ian Jackson: > Jérémy Bobbio writes ("Bug#764251: socat: please set the build timestamp to a > deterministic time"): > > As part of the “reproducible builds” effort, we have discovered that > > socat is using the __DATE__ and __TIME__ C pre-processor macro to reco

Bug#764550: ooniprobe: ooniresources fails with "ImportError: No module named processors"

Control: tags -1 + fixed-upstream Matt Kraai: > As described in the ooniprobe README, I ran > > sudo ooniresources --update-inputs --update-geoip > > which failed with the following error message: > > > Traceback (most recent call last): > > File "/usr/bin/ooniresources", line 11, in > >

Bug#764721: dpkg-dev: dpkg-shlibdeps does not output the minimum dependency when a package does not use any symbols

Package: dpkg-dev Version: 1.17.16 Severity: minor Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: toolchain randomness Hi! As part of the “reproducible builds” effort [1], I came to investigate a couple of failures related to dpkg-shlibdeps. An example is visible in the

Bug#769844: linux: please make linux build reproducibly

Source: linux Version: 3.16.7-2 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps randomness Control: block -1 by 759886 Hi! I have been doing some experimentation on making linux build reproducibly [1]. With the attached patches, we are down to three binar

Bug#769844: linux: please make linux build reproducibly

Bastian Blank: > On Mon, Nov 17, 2014 at 12:46:45AM +0100, Jérémy Bobbio wrote: > > The first patch adds call to `dh_strip_nondeterminism` and > > `dh_fixmtimes`, both being part of the custom toolchain currently used > > for reproducible builds. Hence not tagging the b

Bug#769893: ghc: Make compilation deterministic

user reproducible-bui...@lists.alioth.debian.org usertags 769893 + toolchain randomness Joachim Breitner: > > It'd be much appreciated if this was applied to 7.6.3, which would affect > > > 300 > > Haskell packages that are currently not reproducible. > > glad to hear this! Very good news! :)

Bug#770213: jenkins.d.n: please create a milestone page for build reproducibility of core packages

Package: qa.debian.org Severity: wishlist Control: user qa.debian@packages.debian.org Control: usertags -1 jenkins Control: user reproducible-bui...@lists.alioth.debian.org Control: usertags -1 infrastructure Hi! As part of the reproducible build pages on jenkins.d.n, it would be great to hav

<    4   5   6   7   8   9   10   11   >