Your message dated Sun, 31 Jan 2016 20:11:08 +0100
with message-id <20160131191108.GA9762@loar>
and subject line Re: Bug#778197: lpe: please make the build reproducible
has caused the Debian Bug report #793697,
regarding lpe: please make the mtimes reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
793697: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793697
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lpe
Version: 1.2.7-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that lpe could not be built reproducibly.
The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Please also consider this
other bug from the reproducible builds team:
https://bugs.debian.org/778197
Cheers,
akira
[1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru lpe-1.2.7/debian/changelog lpe-1.2.7/debian/changelog
--- lpe-1.2.7/debian/changelog 2014-12-24 20:37:25.000000000 +0100
+++ lpe-1.2.7/debian/changelog 2015-07-24 11:23:27.000000000 +0200
@@ -1,3 +1,10 @@
+lpe (1.2.7-2.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <[email protected]> Fri, 24 Jul 2015 11:23:16 +0200
+
lpe (1.2.7-2) unstable; urgency=medium
* Fix an off-by-1 buffer overflow. (closes: #773818)
diff -Nru lpe-1.2.7/debian/rules lpe-1.2.7/debian/rules
--- lpe-1.2.7/debian/rules 2014-06-23 21:41:06.000000000 +0200
+++ lpe-1.2.7/debian/rules 2015-07-24 11:23:13.000000000 +0200
@@ -13,6 +13,8 @@
DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1
-SDate)" +%s)
+
default: build
config: config-stamp
@@ -97,6 +99,8 @@
cd ${PKGDIR} >/dev/null ;\
find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum >
DEBIAN/md5sums
## Build the binary package
+ find ${PKGDIR} -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \
+ xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH"
dpkg --build ${PKGDIR} ..
binary-indep:
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Version: 1.2.8-1
lpe is now using dh, so these patches are not needed anymore.
--
Lunar .''`.
[email protected] : :Ⓐ : # apt-get install anarchism
`. `'`
`-
signature.asc
Description: Digital signature
--- End Message ---
