Your message dated Tue, 16 Dec 2025 21:34:27 +0000
with message-id <[email protected]>
and subject line Bug#1123002: fixed in graudit 3.9-4
has caused the Debian Bug report #1123002,
regarding graudit: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1123002: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1123002
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: graudit
Version: 3.9-3
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: nocheck
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
graudit could not be built reproducibly.
This is because the testsuite updated the modification times of a
number of .db files in the package, meaning that if the tests are
skipped (ie. via "nocheck"), then the package will differ in
this metadata.
A patch is attached that sets the mtime of these files to a
deterministic value regardless of whether the tests are run or not.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/rules 2025-12-15 10:26:34.725255854 -0800
--- b/debian/rules 2025-12-15 10:41:18.169484062 -0800
@@ -9,3 +9,4 @@
override_dh_auto_install:
@echo skip
+ touch -d "@$(SOURCE_DATE_EPOCH)" signatures/*.db
--- End Message ---
--- Begin Message ---
Source: graudit
Source-Version: 3.9-4
Done: Alex Myczko <[email protected]>
We believe that the bug you reported is fixed in the latest version of
graudit, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alex Myczko <[email protected]> (supplier of updated graudit package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 16 Dec 2025 21:13:43 +0000
Source: graudit
Architecture: source
Version: 3.9-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Security Tools <[email protected]>
Changed-By: Alex Myczko <[email protected]>
Closes: 1123002
Changes:
graudit (3.9-4) unstable; urgency=medium
.
* Make build reproducible. (Closes: #1123002)
Thanks Chris Lamb.
Checksums-Sha1:
e534ace68a3b60ec55ae98909ac3379b8b7ff2d7 1906 graudit_3.9-4.dsc
8d5b8b3b9e24c04a86ed8c0976fa51d4e21cf318 2220 graudit_3.9-4.debian.tar.xz
2ab1a65d4a6f8225be057ea349e6511986b8283e 6332 graudit_3.9-4_source.buildinfo
Checksums-Sha256:
ecddde003e9294689e1ff3d0962ae252025fb0988ac657a6124d6557f461ef0e 1906
graudit_3.9-4.dsc
5e1784582b059f9849250d4edafee2465422a6f54a164df3b06b46c82486b8c3 2220
graudit_3.9-4.debian.tar.xz
501f8efd7c6d76398c8230fecc076180dd34c779aeb06daf3bfc0dec342ed701 6332
graudit_3.9-4_source.buildinfo
Files:
7c1571b044664d50d96dfdd2ac760696 1906 devel optional graudit_3.9-4.dsc
73179163235c018c3f2b3f0fc0bac0f6 2220 devel optional
graudit_3.9-4.debian.tar.xz
60e80ca31108de2e19d1a5209c4ce1c1 6332 devel optional
graudit_3.9-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=6RnW
-----END PGP SIGNATURE-----
pgplzg5hug4iw.pgp
Description: PGP signature
--- End Message ---
