Your message dated Fri, 01 May 2015 16:10:55 +0000
with message-id <[email protected]>
and subject line Bug#775678: fixed in libextutils-depends-perl 0.404-1
has caused the Debian Bug report #775678,
regarding libextutils-depends-perl: undeterministic output in saved config
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
775678: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=775678
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libextutils-depends-perl
Version: 0.402-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: randomness toolchain
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that packages using ExtUtils::Depends contain differing files after
each build, because the dependency list is not sorted in save_config.
The attached patch, which has already been forwarded upstream [2], fixes this.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
[2]: https://rt.cpan.org/Public/Bug/Display.html?id=101602
diff --git a/debian/changelog b/debian/changelog
index d011462..16db901 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+libextutils-depends-perl (0.402-1.0~reproducible1) UNRELEASED; urgency=low
+
+ * Added patch to produce stable output in saved configs.
+
+ -- Reiner Herrmann <[email protected]> Sun, 18 Jan 2015 16:05:44 +0100
+
libextutils-depends-perl (0.402-1) unstable; urgency=medium
* Team upload.
diff --git a/debian/patches/deterministic_output.patch b/debian/patches/deterministic_output.patch
new file mode 100644
index 0000000..2487e90
--- /dev/null
+++ b/debian/patches/deterministic_output.patch
@@ -0,0 +1,17 @@
+Subject: Sort keys to get the same output on every invocation
+Author: Reiner Herrmann <[email protected]>
+Forwarded: https://rt.cpan.org/Public/Bug/Display.html?id=101602
+
+Index: libextutils-depends-perl-0.402/lib/ExtUtils/Depends.pm
+===================================================================
+--- libextutils-depends-perl-0.402.orig/lib/ExtUtils/Depends.pm
++++ libextutils-depends-perl-0.402/lib/ExtUtils/Depends.pm
+@@ -127,7 +127,7 @@ sub save_config {
+ inc => join (" ", @{ $self->{inc} }),
+ libs => $self->{libs},
+ typemaps => [ map { basename $_ } @{ $self->{typemaps} } ],
+- deps => [keys %{ $self->{deps} }],
++ deps => [sort keys %{ $self->{deps} }],
+ }], ['self']);
+ print $file <<'EOF';
+
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..155adf7
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+deterministic_output.patch
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: libextutils-depends-perl
Source-Version: 0.404-1
We believe that the bug you reported is fixed in the latest version of
libextutils-depends-perl, which is due to be installed in the Debian FTP
archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
gregor herrmann <[email protected]> (supplier of updated
libextutils-depends-perl package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 01 May 2015 16:03:18 +0200
Source: libextutils-depends-perl
Binary: libextutils-depends-perl
Architecture: source all
Version: 0.404-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <[email protected]>
Changed-By: gregor herrmann <[email protected]>
Description:
libextutils-depends-perl - Perl module for building extensions that depend on
other extensio
Closes: 775678
Changes:
libextutils-depends-perl (0.404-1) unstable; urgency=medium
.
* Team upload.
* Import upstream version 0.404
Fixes "undeterministic output in saved config"
(Closes: #775678)
Checksums-Sha1:
583686218392c8e87a2fba7d5bd6347bf9036f3d 2306
libextutils-depends-perl_0.404-1.dsc
aa0199b158a8f84c376ba7ee1dc52a23cbf41d71 18207
libextutils-depends-perl_0.404.orig.tar.gz
094a57cfeae24b5c47920113767ff6ec13469e8f 3212
libextutils-depends-perl_0.404-1.debian.tar.xz
15067e578c3dabac10ac4baa5367725c559db692 19120
libextutils-depends-perl_0.404-1_all.deb
Checksums-Sha256:
c2bf3ab128097483b46afb0bc779fe09a94720a33931b10ff29581ffc2ab81f1 2306
libextutils-depends-perl_0.404-1.dsc
8bec0a8f67ac7cf5c7bc48aff4b7cf8a771ef97f0ea7894bcdd0e9079ba24fec 18207
libextutils-depends-perl_0.404.orig.tar.gz
802759c1f14897a943b040e599165734aac8ef63bfc546a10d85be226ce78b30 3212
libextutils-depends-perl_0.404-1.debian.tar.xz
ca07f727db3e2390b018ea3455163b487cb529053622d3587f565158061e2442 19120
libextutils-depends-perl_0.404-1_all.deb
Files:
8fd1b1ba6c556b48f967fb62ee5a3325 2306 perl optional
libextutils-depends-perl_0.404-1.dsc
2b66dbb4bcfc2639c6b26309569471ad 18207 perl optional
libextutils-depends-perl_0.404.orig.tar.gz
db0e83ff796d0aad6b7c4b505a1b7b0f 3212 perl optional
libextutils-depends-perl_0.404-1.debian.tar.xz
89f48e83baa23e92b66c7008909dbc78 19120 perl optional
libextutils-depends-perl_0.404-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=3BbC
-----END PGP SIGNATURE-----
--- End Message ---
