Your message dated Sun, 28 Dec 2025 23:34:06 +0000
with message-id <[email protected]>
and subject line Bug#1121858: fixed in golang-github-notaryproject-notation-go
1.3.2-2
has caused the Debian Bug report #1121858,
regarding golang-github-notaryproject-notation-go: please make the build
reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1121858: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121858
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: golang-github-notaryproject-notation-go
Version: 1.3.2-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: nocheck
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-notaryproject-notation-go could not be built reproducibly.
This is because the testsuite generated some files in a "tmp/" directory
which ended up in the binary package, but, of course, only if the tests
are not skipped.
Patch attached that removes these in execute_after_dh_auto_test.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/rules 2025-12-03 11:42:47.232121709 -0800
--- b/debian/rules 2025-12-03 11:46:15.480368905 -0800
@@ -1,10 +1,15 @@
#!/usr/bin/make -f
+BUILD_DIR := _build/src/github.com/notaryproject/notation-go
+
export DH_GOLANG_INSTALL_EXTRA := $(wildcard config/testdata/*/*.json)
%:
dh $@ --builddirectory=_build --buildsystem=golang
+execute_after_dh_auto_test:
+ rm -rfv $(BUILD_DIR)/tmp/
+
# executable-not-elf-or-script
execute_before_dh_auto_install:
- chmod -v -x
$(CURDIR)/_build/src/github.com/notaryproject/notation-go/plugin/testdata/plugins/foo/notation-foo
+ chmod -v -x
$(CURDIR)/$(BUILD_DIR)/plugin/testdata/plugins/foo/notation-foo
--- End Message ---
--- Begin Message ---
Source: golang-github-notaryproject-notation-go
Source-Version: 1.3.2-2
Done: Simon Josefsson <[email protected]>
We believe that the bug you reported is fixed in the latest version of
golang-github-notaryproject-notation-go, which is due to be installed in the
Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Simon Josefsson <[email protected]> (supplier of updated
golang-github-notaryproject-notation-go package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Dec 2025 23:41:11 +0100
Source: golang-github-notaryproject-notation-go
Architecture: source
Version: 1.3.2-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Simon Josefsson <[email protected]>
Closes: 1121858
Changes:
golang-github-notaryproject-notation-go (1.3.2-2) unstable; urgency=medium
.
[ Simon Josefsson ]
* Team upload.
* Add Salsa CI
* Standards-Version: 4.7.3
.
[ Chris Lamb ]
* Fix reproducibility (Closes: #1121858)
Checksums-Sha1:
fb2e3a5770add8e1e9abe2533d56d65ac8474414 3117
golang-github-notaryproject-notation-go_1.3.2-2.dsc
cc7b309aa604c578f0c7e69fc99b03863ec055a1 4360
golang-github-notaryproject-notation-go_1.3.2-2.debian.tar.xz
4ee10e94dc47a652935e825a3d445352436e7713 3782136
golang-github-notaryproject-notation-go_1.3.2-2.git.tar.xz
1595f137a999797d6c9cf7535e4c37d3c4256bcc 17263
golang-github-notaryproject-notation-go_1.3.2-2_source.buildinfo
Checksums-Sha256:
26178b4a7a8ffb448624d7b412053adf123a72f74e70805a457f870e095d06ad 3117
golang-github-notaryproject-notation-go_1.3.2-2.dsc
1941c1ac7d0f0cedb717446e90826ec73aa28dff8c4c2c72c5faaadd96e690fc 4360
golang-github-notaryproject-notation-go_1.3.2-2.debian.tar.xz
67ecff7292e5f8e9d83a14e555943488d2dde76b788a78066cec6471f43afa2e 3782136
golang-github-notaryproject-notation-go_1.3.2-2.git.tar.xz
9c29c4612271d945c48a268f597bcb7cec3ce8cf67f6f0b3aab84ed8886e92dc 17263
golang-github-notaryproject-notation-go_1.3.2-2_source.buildinfo
Files:
77b0d7c127c2526a8b84083f051e518c 3117 golang optional
golang-github-notaryproject-notation-go_1.3.2-2.dsc
2399c199122ddfa3adbde9dec9a1f869 4360 golang optional
golang-github-notaryproject-notation-go_1.3.2-2.debian.tar.xz
dd608c2031d0514cc817748d635630cd 3782136 golang optional
golang-github-notaryproject-notation-go_1.3.2-2.git.tar.xz
8d6a4236772c6698b742576e4bf33112 17263 golang optional
golang-github-notaryproject-notation-go_1.3.2-2_source.buildinfo
Git-Tag-Info: tag=814e03e8f6d2f26eb6aae7bb3305ee0587821403
fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <[email protected]>
-----BEGIN PGP SIGNATURE-----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=EcFo
-----END PGP SIGNATURE-----
pgpitsrZaL7ER.pgp
Description: PGP signature
--- End Message ---
