Your message dated Fri, 21 Aug 2015 13:39:45 +0000
with message-id <[email protected]>
and subject line Bug#796316: Removed package(s) from unstable
has caused the Debian Bug report #793126,
regarding torbutton: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
793126: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793126
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: torbutton
Version: 1.4.6.3-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
While working on the "reproducible builds" effort [1], we have noticed
that torbutton could not be built reproducibly.
The attached patch removes timezone-varying timestamps from the
files compressed with zip. Once applied, torbutton can be built
reproducibly in our current experimental framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
Regards,
--
Dhole
diff -Nru torbutton-1.4.6.3/debian/changelog torbutton-1.4.6.3/debian/changelog
--- torbutton-1.4.6.3/debian/changelog 2012-10-16 21:22:39.000000000 +0200
+++ torbutton-1.4.6.3/debian/changelog 2015-07-21 00:35:00.000000000 +0200
@@ -1,3 +1,11 @@
+torbutton (1.4.6.3-1.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * add TZ=UTC before zip in makexpi.sh to make the files mtime
+ invariant to timezone to make the package build reproducibly.
+
+ -- Dhole <[email protected]> Tue, 21 Jul 2015 00:34:36 +0200
+
torbutton (1.4.6.3-1) unstable; urgency=high
* New upstream release:
diff -Nru torbutton-1.4.6.3/debian/patches/fix-timezone-in-zip
torbutton-1.4.6.3/debian/patches/fix-timezone-in-zip
--- torbutton-1.4.6.3/debian/patches/fix-timezone-in-zip 1970-01-01
01:00:00.000000000 +0100
+++ torbutton-1.4.6.3/debian/patches/fix-timezone-in-zip 2015-07-21
00:36:48.000000000 +0200
@@ -0,0 +1,18 @@
+Description: Fix timezone before calling zip
+Author: Dhole <[email protected]>
+
+---
+
+--- torbutton-1.4.6.3.orig/makexpi.sh
++++ torbutton-1.4.6.3/makexpi.sh
+@@ -18,8 +18,8 @@ cd ../..
+ # create .xpi
+ echo ---------- create $APP_NAME.xpi ----------
+ cd src
+-echo zip -X -9r ../pkg/$XPI_NAME ./ -x "certDialogsOverride.js" -x "chrome/*"
-x "*.diff" -x "*.svn/*"
+-zip -X -9r ../pkg/$XPI_NAME ./ -x "components/certDialogsOverride.js" -x
"*.svn/*" -x "*.diff" -x "components/torRefSpoofer.js" #-x "chrome/*"
++echo TZ=UTC zip -X -9r ../pkg/$XPI_NAME ./ -x "certDialogsOverride.js" -x
"chrome/*" -x "*.diff" -x "*.svn/*"
++TZ=UTC zip -X -9r ../pkg/$XPI_NAME ./ -x "components/certDialogsOverride.js"
-x "*.svn/*" -x "*.diff" -x "components/torRefSpoofer.js" #-x "chrome/*"
+ #mv ../$APP_NAME.jar ./chrome
+ #zip -9m ../pkg/$XPI_NAME chrome/$APP_NAME.jar
+ cd ..
diff -Nru torbutton-1.4.6.3/debian/patches/series
torbutton-1.4.6.3/debian/patches/series
--- torbutton-1.4.6.3/debian/patches/series 2012-10-16 21:22:39.000000000
+0200
+++ torbutton-1.4.6.3/debian/patches/series 2015-07-21 00:36:30.000000000
+0200
@@ -1,3 +1,4 @@
localhost-proxy.patch
restore-status-panel-on-ff4.patch
disable-locked-mode.patch
+fix-timezone-in-zip
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Version: 1.4.6.3-1+rm
Dear submitter,
as the package torbutton has just been removed from the Debian archive
unstable we hereby close the associated bug reports. We are sorry
that we couldn't deal with your issue properly.
For details on the removal, please see https://bugs.debian.org/796316
The version of this package that was in Debian prior to this removal
can still be found using http://snapshot.debian.org/.
This message was generated automatically; if you believe that there is
a problem with it please contact the archive administrators by mailing
[email protected].
Debian distribution maintenance software
pp.
Scott Kitterman (the ftpmaster behind the curtain)
--- End Message ---
