[Reproducible-builds] diffoscope is marked for autoremoval from testing

2016-08-21 Thread Debian testing autoremoval watch
diffoscope 59 is marked for autoremoval from testing on 2016-09-20 It (build-)depends on packages with these RC bugs: 826300: fpc: fp-compiler not installable on powerpc since glibc 2.23 ___ Reproducible-builds mailing list

[Reproducible-builds] reprotest is marked for autoremoval from testing

2016-08-21 Thread Debian testing autoremoval watch
reprotest 0.2 is marked for autoremoval from testing on 2016-09-20 It (build-)depends on packages with these RC bugs: 826300: fpc: fp-compiler not installable on powerpc since glibc 2.23 ___ Reproducible-builds mailing list

[Reproducible-builds] Bug#835055: ghc test regression as provided .hi files are to tightly bound to the actual environment

2016-08-21 Thread Chris Lamb
tags 835055 + pending thanks > This is particularly a problem for future packaging of a version outside > of debian (foreign distro) as this tests will always fail leading to an > un-packagable state. Thanks for reporting. We can at least detect this and skip the the tests with a message

[Reproducible-builds] Bug#835055: ghc test regression as provided .hi files are to tightly bound to the actual environment

2016-08-21 Thread Levente Polyak
Package: diffoscope The GHC tests are too tightly bound to a very specific ghc version (in this case ghc 7.1.0.3) and the test will fail if the HI-version mismatche (hi magic in this case is 33214052). In such case the diffoscope internal will select a fallback FilesystemComperator instead of the

Re: [Reproducible-builds] Bug#763822: Moving towards buildinfo on the archive network

2016-08-21 Thread Ximin Luo
Ximin Luo: > Signatures provide a way to for us to aggregate public trust on binaries that > don't build themselves. So it's important to have multiple and *very direct* > meanings of what-is-being-signed, to avoid a transitive-trust situation. > I sent this in a rush; better version:

Re: [Reproducible-builds] Bug#763822: Moving towards buildinfo on the archive network

2016-08-21 Thread Ximin Luo
Jonathan McDowell: > On Sun, Aug 21, 2016 at 04:01:00PM +, Ximin Luo wrote: >> You have this backwards. >> >> "Being able to verify individually who build each of the packages I'm >> running" >> >> is *exactly* what is required to *not* have to >> >> "attribute trust of *all* of the people

Re: [Reproducible-builds] Moving towards buildinfo on the archive network

2016-08-21 Thread Ximin Luo
Jonathan McDowell: > On Sat, Aug 20, 2016 at 03:13:00PM +, Ximin Luo wrote: >> I have trouble imagining what could make Buildinfo.tgz hard, but make >> Buildinfo.xz easy - could you explain this in more detail, please? > > Debian's archive information is largely stored within a database;

Re: [Reproducible-builds] Bug#763822: Moving towards buildinfo on the archive network

2016-08-21 Thread Jonathan McDowell
On Sun, Aug 21, 2016 at 04:01:00PM +, Ximin Luo wrote: > Jonathan McDowell: > > On Sat, Aug 20, 2016 at 03:13:00PM +, Ximin Luo wrote: > >> Note that the builder is a *distinct entity* from the distribution. > >> It's important to keep the *original* signature by B on C. It breaks > >> our

[Reproducible-builds] Bug#835053: kxmlgui: please make the build reproducible

2016-08-21 Thread Chris Lamb
Source: kxmlgui Version: 5.25.0-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: uname X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], I noticed that kxmlgui could not be built

[Reproducible-builds] Bug#835051: sheepdog: please make the build reproducible

2016-08-21 Thread Chris Lamb
Source: sheepdog Version: 0.8.3-4.1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], I noticed that sheepdog could not be built

[Reproducible-builds] diffoscope 59 MIGRATED to testing

2016-08-21 Thread Debian testing watch
FYI: The status of the diffoscope source package in Debian's testing distribution has changed. Previous version: 56 Current version: 59 -- This email is automatically generated once a day. As the installation of new packages into testing happens multiple times a day you will receive later

Re: [Reproducible-builds] Moving towards buildinfo on the archive network

2016-08-21 Thread Ximin Luo
Jonathan McDowell: > On Sat, Aug 20, 2016 at 03:13:00PM +, Ximin Luo wrote: >> Note that the builder is a *distinct entity* from the distribution. >> It's important to keep the *original* signature by B on C. It breaks >> our security logic, to strip the signature and re-sign C using (e.g.) >>

Re: [Reproducible-builds] Moving towards buildinfo on the archive network

2016-08-21 Thread Jonathan McDowell
On Sat, Aug 20, 2016 at 03:13:00PM +, Ximin Luo wrote: > Jonathan McDowell: > > Having been impressed by the current status of reproducible builds > > and the fact it looks like we're close to having the important > > pieces in Debian proper, I have started to have a look at how I > > could

Re: [Reproducible-builds] Bug#834993: oss4: please make the build reproducible

2016-08-21 Thread Reiner Herrmann
On Sun, Aug 21, 2016 at 01:37:47PM +0200, Reiner Herrmann wrote: > The attached patch fixes several issues: Sorry, forgot to attach the patch. diff --git a/debian/control b/debian/control index be2fd60..ebadea0 100644 --- a/debian/control +++ b/debian/control @@ -8,6 +8,7 @@ Uploaders: Sebastien

[Reproducible-builds] Bug#834993: oss4: please make the build reproducible

2016-08-21 Thread Reiner Herrmann
Source: oss4 Version: 4.2-build2010-5 Severity: wishlist Tags: patch upstream User: reproducible-builds@lists.alioth.debian.org Usertags: locale timestamps fileordering umask X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi! While working on the "reproducible builds" effort [1], we

[Reproducible-builds] Bug#834988: twitter-bootstrap3: please make the build reproducible

2016-08-21 Thread Chris Lamb
Source: twitter-bootstrap3 Version: 3.3.6+dfsg-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], I noticed that

[Reproducible-builds] Bug#834983: eyed3: please make the build reproducible

2016-08-21 Thread Chris Lamb
Source: eyed3 Version: 0.6.18-2 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], I noticed that eyed3 could not be built

[Reproducible-builds] Bug#834976: auto-apt-proxy: FTBFS: SC2039: In POSIX sh, 'local' is undefined

2016-08-21 Thread Chris Lamb
Source: auto-apt-proxy Version: 1 Severity: serious Justification: fails to build from source User: reproducible-builds@lists.alioth.debian.org Usertags: ftbfs X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Dear Maintainer, auto-apt-proxy fails to build from source in unstable/amd64: