Your message dated Fri, 27 Nov 2015 12:33:56 +0000
with message-id <[email protected]>
and subject line Bug#805778: fixed in pxz 4.999.99~beta5+gitfcfea93-1
has caused the Debian Bug report #805778,
regarding pxz: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
805778: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805778
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: pxz
Version: 4.999.99~beta4+gitae80846-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that pxz could not be built reproducibly.
There is a small bug in the existing reproducibility patch.
The output of dpkg-parsechangelog is piped to date, but date is not told
to read from stdin and still uses the system time.
The attached patch fixes this.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
index a5f6bed..d54972c 100644
--- a/debian/patches/reproducible-build.patch
+++ b/debian/patches/reproducible-build.patch
@@ -5,7 +5,7 @@
$(NAME): $(SOURCES) $(OBJECTS)
- $(CC) -o $(NAME) $(CPPFLAGS) $(CFLAGS) $(NAME).c $(OBJECTS) $(LDFLAGS) -DPXZ_BUILD_DATE=\"`date +%Y%m%d`\" -DPXZ_VERSION=\"$(VERSION)\"
-+ $(CC) -o $(NAME) $(CPPFLAGS) $(CFLAGS) $(NAME).c $(OBJECTS) $(LDFLAGS) -DPXZ_BUILD_DATE=\"$(shell dpkg-parsechangelog -S date|date -u +%Y%m%d)\" -DPXZ_VERSION=\"$(VERSION)\"
++ $(CC) -o $(NAME) $(CPPFLAGS) $(CFLAGS) $(NAME).c $(OBJECTS) $(LDFLAGS) -DPXZ_BUILD_DATE=\"$(shell dpkg-parsechangelog -S date|date -u +%Y%m%d -f -)\" -DPXZ_VERSION=\"$(VERSION)\"
clean:
rm -f *.o $(NAME)
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: pxz
Source-Version: 4.999.99~beta5+gitfcfea93-1
We believe that the bug you reported is fixed in the latest version of
pxz, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Holger Levsen <[email protected]> (supplier of updated pxz package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 27 Nov 2015 12:42:56 +0100
Source: pxz
Binary: pxz
Architecture: source
Version: 4.999.99~beta5+gitfcfea93-1
Distribution: unstable
Urgency: medium
Maintainer: Holger Levsen <[email protected]>
Changed-By: Holger Levsen <[email protected]>
Description:
pxz - parallel LZMA compressor using liblzma
Closes: 805778
Changes:
pxz (4.999.99~beta5+gitfcfea93-1) unstable; urgency=medium
.
* New upstream version.
* Fix debian/patches/reproducible-build.patch to actually use the time from
dpkg-parsechangelog and not the system time. Thanks to Reiner Herrman for
the patch! (Closes: #805778)
Checksums-Sha1:
627016ef91b4797a16fce08a7b213078d442e917 1936
pxz_4.999.99~beta5+gitfcfea93-1.dsc
9751fef6d0c799880341b5181f593a5a615ec547 11804
pxz_4.999.99~beta5+gitfcfea93.orig.tar.bz2
9afd79495a0dcf94bfbf46adc3856e69343a1064 3104
pxz_4.999.99~beta5+gitfcfea93-1.debian.tar.xz
Checksums-Sha256:
7cbacd733a728b3fd927d5b83cfa10b6f4f3714b1eafffd47c9b1d5377357846 1936
pxz_4.999.99~beta5+gitfcfea93-1.dsc
b10001b57d5aa9591b4768dd8286a5792d196e414019fe78714447a31c2f4ea1 11804
pxz_4.999.99~beta5+gitfcfea93.orig.tar.bz2
9963e4e043403f7c75cdf41dd447519aba784a8bb2c18d8f3946e22b835d4f1d 3104
pxz_4.999.99~beta5+gitfcfea93-1.debian.tar.xz
Files:
bdee13eaa834ff79054ec067b75fc0e6 1936 misc optional
pxz_4.999.99~beta5+gitfcfea93-1.dsc
dda2bb98746fdfda902fcdee5f2b99e3 11804 misc optional
pxz_4.999.99~beta5+gitfcfea93.orig.tar.bz2
184a3ff659cdd5136310b45c9cba5684 3104 misc optional
pxz_4.999.99~beta5+gitfcfea93-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=NJ9K
-----END PGP SIGNATURE-----
--- End Message ---
