Your message dated Fri, 02 Feb 2018 15:22:33 +0000
with message-id <e1ehdaf-0009xk...@fasolo.debian.org>
and subject line Bug#842625: fixed in fuse-zip 0.4.4-1
has caused the Debian Bug report #842625,
regarding fuse-zip: please make the build reproducible
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
842625: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=842625
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: fuse-zip
Version: 0.4.0-2
Severity: wishlist
Tags: patch upstream
User: reproducible-bui...@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that fuse-zip could not be built reproducibly.
During build it links object files in non-deterministic order.

The attached patch fixes that by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
new file mode 100644
index 0000000..6d6a8de
--- /dev/null
+++ b/debian/patches/reproducible-build.patch
@@ -0,0 +1,14 @@
+Author: Reiner Herrmann <rei...@reiner-h.de>
+Description: Sort list of source files for deterministic linking order
+
+--- a/lib/Makefile
++++ b/lib/Makefile
+@@ -4,7 +4,7 @@
+ RELEASE_CXXFLAGS=-O2 -Wall -Wextra
+ FUSEFLAGS=$(shell pkg-config fuse --cflags)
+ ZIPFLAGS=$(shell pkg-config libzip --cflags)
+-SOURCES=$(wildcard *.cpp)
++SOURCES=$(sort $(wildcard *.cpp))
+ OBJECTS=$(SOURCES:.cpp=.o)
+ CLEANFILES=$(OBJECTS) $(DEST)
+ 
diff --git a/debian/patches/series b/debian/patches/series
new file mode 100644
index 0000000..55077d0
--- /dev/null
+++ b/debian/patches/series
@@ -0,0 +1 @@
+reproducible-build.patch

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: fuse-zip
Source-Version: 0.4.4-1

We believe that the bug you reported is fixed in the latest version of
fuse-zip, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 842...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthew Harm Bekkema <mbekkem...@gmail.com> (supplier of updated fuse-zip 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 02 Feb 2018 22:08:50 +1100
Source: fuse-zip
Binary: fuse-zip
Architecture: source amd64
Version: 0.4.4-1
Distribution: unstable
Urgency: low
Maintainer: Matthew Harm Bekkema <mbekkem...@gmail.com>
Changed-By: Matthew Harm Bekkema <mbekkem...@gmail.com>
Description:
 fuse-zip   - ZIP archive mounter based on FUSE
Closes: 795675 842625
Changes:
 fuse-zip (0.4.4-1) unstable; urgency=low
 .
   * New upstream release (Closes: #795675)
     - Upgrade license from LGPL3+ to GPL3+
   * Update links to new upstream home
   * Don't repeat license text in debian/copyright
   * Add Reiner Herrmann's patch to make the build reproducible (Closes: 
#842625)
   * Enable parallel builds
   * Upgrade to debhelper 10
   * Bump standards
Checksums-Sha1:
 9fae38b39b5217239b0c814464141917a9cbe40b 1781 fuse-zip_0.4.4-1.dsc
 555971e5df372868299ac3c545d32356259a518a 695370 fuse-zip_0.4.4.orig.tar.gz
 31c696ae212a6997d01afa781190acf7a5c60679 2656 fuse-zip_0.4.4-1.debian.tar.xz
 2061abc0d04d210335a4b71ab1566aa3a4428116 202688 
fuse-zip-dbgsym_0.4.4-1_amd64.deb
 40e64e975918d8bb1a2d0d70bbc46062a5105061 5991 fuse-zip_0.4.4-1_amd64.buildinfo
 7ded4ab6a81367fb7924642da75bfae21273ef2d 29632 fuse-zip_0.4.4-1_amd64.deb
Checksums-Sha256:
 26afdf1a9a33c49f316445a8d271a6079156c17532f2405850ca3f11af2f0573 1781 
fuse-zip_0.4.4-1.dsc
 fb9a5159aea9883205357f30b119d70a33f5cd7a2d47c5818be99781555194b5 695370 
fuse-zip_0.4.4.orig.tar.gz
 cba53377b8728a04951e4c29106b23f2d41cf23a0a053132d8caaae13c85994f 2656 
fuse-zip_0.4.4-1.debian.tar.xz
 78d73c429ed5a5488f5b389309dd0832767e134445397317eea9a6e0c57db5df 202688 
fuse-zip-dbgsym_0.4.4-1_amd64.deb
 8e09b40055470f73daec5d15c15cd67e9e62ac9c6ce3c2fd231385d39d8a3a18 5991 
fuse-zip_0.4.4-1_amd64.buildinfo
 c755820df13bb456d27941ed1b21d2326e0080053bbe245a29234213f8b40ef1 29632 
fuse-zip_0.4.4-1_amd64.deb
Files:
 503f89428194d92b5d6175a9f6090944 1781 utils optional fuse-zip_0.4.4-1.dsc
 6b9e76ecc80a40301a51f0477a9aab22 695370 utils optional 
fuse-zip_0.4.4.orig.tar.gz
 c58ac7f5cd0c880eecc35052b2208efa 2656 utils optional 
fuse-zip_0.4.4-1.debian.tar.xz
 46b7fc5597bb661f5d7bd885d93e0c12 202688 debug optional 
fuse-zip-dbgsym_0.4.4-1_amd64.deb
 70af25f7aa2af24f9be1115ce8e2eaec 5991 utils optional 
fuse-zip_0.4.4-1_amd64.buildinfo
 82af061f5c5c33565355737fd7fc7a5d 29632 utils optional 
fuse-zip_0.4.4-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=j/mq
-----END PGP SIGNATURE-----

--- End Message ---

Reply via email to