Your message dated Thu, 19 Jan 2017 09:11:04 +0200
with message-id <20170119071104.acergzs52f4nivkv@localhost>
and subject line This is now handled automatically by dpkg >= 1.18.8
has caused the Debian Bug report #793706,
regarding mpack: please make the mtimes reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
793706: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793706
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: mpack
Version: 1.6-8
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that mpack could not be built reproducibly.
The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Please also consider this
other bug from the reproducible builds team:
https://bugs.debian.org/777376
Cheers,
akira
[1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru mpack-1.6/debian/changelog mpack-1.6/debian/changelog
--- mpack-1.6/debian/changelog 2012-06-10 01:02:11.000000000 +0200
+++ mpack-1.6/debian/changelog 2015-07-24 14:29:58.000000000 +0200
@@ -1,3 +1,10 @@
+mpack (1.6-8.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <[email protected]> Fri, 24 Jul 2015 14:29:09 +0200
+
mpack (1.6-8) unstable; urgency=low
* CVE-2011-4919 - Fix permissions
diff -Nru mpack-1.6/debian/rules mpack-1.6/debian/rules
--- mpack-1.6/debian/rules 2012-06-10 01:00:43.000000000 +0200
+++ mpack-1.6/debian/rules 2015-07-24 14:29:06.000000000 +0200
@@ -14,6 +14,8 @@
export DEB_HOST ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
export DEB_BUILD ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1
-SDate)" +%s)
+
#export DEB_BUILD_MAINT_OPTIONS = hardening=+all
DPKG_EXPORT_BUILDFLAGS = 1
include /usr/share/dpkg/buildflags.mk
@@ -65,6 +67,8 @@
install -d ${DEBDIR}
dpkg-shlibdeps ${BINDIR}/*
dpkg-gencontrol -isp
+ find debian/tmp -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \
+ xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH"
dpkg-deb -Zbzip2 -z9 --build debian/tmp ..
binary: binary-indep binary-arch
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
This is now handled automatically by dpkg >= 1.18.8,
see #759886 for details.
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
--- End Message ---
