Your message dated Thu, 30 Jun 2016 01:20:26 +0000
with message-id <[email protected]>
and subject line Bug#828898: fixed in lordsawar 0.3.0-3
has caused the Debian Bug report #828898,
regarding lordsawar: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
828898: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=828898
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lordsawar
Version: 0.3.0-2
Severity: wishlist
Tags: patch upstream
User: [email protected]
Usertags: timestamps username umask
X-Debbugs-Cc: [email protected]
Hi!
While working on the "reproducible builds" effort [1], we have noticed
that lordsawar could not be built reproducibly.
The gama data archives, which are just tarballs, have files with the
current time, the build user and varying permissions (depending on
umask).
The attached patch fixes this.
Regards,
Reiner
[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
new file mode 100644
index 0000000..7f4bafb
--- /dev/null
+++ b/debian/patches/reproducible-build.patch
@@ -0,0 +1,18 @@
+Author: Reiner Herrmann <[email protected]>
+Description: Make tarball reproducible
+ - sort file order
+ - clamp mtime at $SOURCE_DATE_EPOCH
+ - set owner/group to root
+ - fix permissions
+
+--- a/create-lw-file
++++ b/create-lw-file
+@@ -13,7 +13,7 @@
+ for f in $files; do
+ tmpfiles="$tmpfiles `basename $f`"
+ done
+- tar -cvf $tarball $tmpfiles
++ tar -cvf $tarball $tmpfiles --sort=name --clamp-mtime --mtime="@${SOURCE_DATE_EPOCH:-$(date +%s)}" --mode=go=rX,u+rw,a-s --owner=root --group=root --numeric-owner
+ cd $origdir
+ cp -f $tmpdir/$tarball $1
+ rm -f $tmpdir/*
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..55077d0
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+reproducible-build.patch
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: lordsawar
Source-Version: 0.3.0-3
We believe that the bug you reported is fixed in the latest version of
lordsawar, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Markus Koschany <[email protected]> (supplier of updated lordsawar package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 30 Jun 2016 01:40:29 +0200
Source: lordsawar
Binary: lordsawar lordsawar-data
Architecture: source
Version: 0.3.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Games Team <[email protected]>
Changed-By: Markus Koschany <[email protected]>
Description:
lordsawar - Clone of the popular SSG game Warlords II
lordsawar-data - Clone of the popular SSG game Warlords II - data files
Closes: 828898
Changes:
lordsawar (0.3.0-3) unstable; urgency=medium
.
* Add reproducible-build.patch and make the build reproducible.
Thanks to Reiner Herrmann for the report and patch and Alexandre Detiste
for his initial work. (Closes: #828898)
* Declare compliance with Debian Policy 3.9.8.
* Vcs-Git: Use https.
* debian/watch: Use version=4.
Checksums-Sha1:
717a1d32dabd267d6a66d5d9faabd7d9a24cc6e4 2276 lordsawar_0.3.0-3.dsc
cc4b287a390b263497a7b8059a3b21e1eb9d6ce0 7652 lordsawar_0.3.0-3.debian.tar.xz
Checksums-Sha256:
5c7ba53b44ad360ace672faa5c517cb5b70dd40a80dfdf33e65759a346641007 2276
lordsawar_0.3.0-3.dsc
2853e993113151c172796b6663f399a5bb67eb7bcd39a75302e64bb75f051fb1 7652
lordsawar_0.3.0-3.debian.tar.xz
Files:
ef5c6a38bdd512e645288ab07f704348 2276 games optional lordsawar_0.3.0-3.dsc
c7dbcc55c9fc99f15a01f028e100591a 7652 games optional
lordsawar_0.3.0-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=iGVl
-----END PGP SIGNATURE-----
--- End Message ---
