Your message dated Thu, 07 May 2026 14:34:17 +0000
with message-id <[email protected]>
and subject line Bug#1134552: fixed in gunicorn 25.3.0-2
has caused the Debian Bug report #1134552,
regarding gunicorn: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1134552: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1134552
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: gunicorn
Version: 25.3.0-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: environment buildpath
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
gunicorn could not be built reproducibly.
This is because the manual page (generated from the output of --help)
includes dynamically-generated default values, some of which are non-
deterministic. For example:
│ │ │ │ │ -Switch worker processes to run as this user. [1111]
│ │ │ │ │ +Switch worker processes to run as this user. [2222]
.. as well as a number that vary on the current build directory (not
currently tested for on tests.reproducible-builds.org...) and the
user's $HOME directory.
Patch attached that disables the inclusion of these default values
when generating this manual page at build time. (The runtime
output and behaviour remains unchanged.)
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/0006-Reproducible-manpage.patch 1969-12-31
16:00:00.000000000 -0800
--- b/debian/patches/0006-Reproducible-manpage.patch 2026-04-21
10:49:45.566248862 -0700
@@ -0,0 +1,15 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2026-04-21
+
+--- gunicorn-25.3.0.orig/gunicorn/config.py
++++ gunicorn-25.3.0/gunicorn/config.py
+@@ -304,6 +304,8 @@ class Setting:
+ args = tuple(self.cli)
+
+ help_txt = "%s [%s]" % (self.short, self.default)
++ if "SOURCE_DATE_EPOCH" in os.environ:
++ help_txt = self.short
+ help_txt = help_txt.replace("%", "%%")
+
+ kwargs = {
--- a/debian/patches/series 2026-04-21 09:42:55.546888632 -0700
--- b/debian/patches/series 2026-04-21 10:49:44.376696569 -0700
@@ -3,3 +3,4 @@
0003-Don-t-call-chown-2-if-it-would-be-a-no-op.patch
0004-Set-supplementary-groups-when-changing-uid.patch
0005-Remove-remote-badges-to-prevent-privacy-issues.patch
+0006-Reproducible-manpage.patch
--- End Message ---
--- Begin Message ---
Source: gunicorn
Source-Version: 25.3.0-2
Done: Alexandre Detiste <[email protected]>
We believe that the bug you reported is fixed in the latest version of
gunicorn, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexandre Detiste <[email protected]> (supplier of updated gunicorn package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 07 May 2026 15:24:09 +0200
Source: gunicorn
Architecture: source
Version: 25.3.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Alexandre Detiste <[email protected]>
Closes: 1134552
Changes:
gunicorn (25.3.0-2) unstable; urgency=medium
.
* Team Upload
* Use dh-cruft to register & purge /var/log/gunicorn/
* Add debian/salsa-ci.yml
.
[ Chris Lamb ]
* Make the build reproducible (Closes: #1134552)
Checksums-Sha1:
44ebc8ab651000e0b8e040072691d05e2d83e147 2608 gunicorn_25.3.0-2.dsc
3e526706e51f7d87f537712d15b887cfc45dbdaa 12664 gunicorn_25.3.0-2.debian.tar.xz
b0f7b2f6107ac532570f14fd1be8682b0aab5091 9786
gunicorn_25.3.0-2_source.buildinfo
Checksums-Sha256:
eecc2f7eebd4bc246fe0da9b0e4789e8b9310d29fe1a716417d852946153db6e 2608
gunicorn_25.3.0-2.dsc
de86ec02bdbd9239a0807a5d5dba8fcf3111302c75ffd479834a72613ce6787c 12664
gunicorn_25.3.0-2.debian.tar.xz
2320e26c06efea185bd8f220e4015f18ac9baf2dfe81a5d910a4efd6c76f2150 9786
gunicorn_25.3.0-2_source.buildinfo
Files:
f65d43b1dd4dcce109b286a308d4f648 2608 httpd optional gunicorn_25.3.0-2.dsc
bc1d24dd5554bed676e4bca7780b16ac 12664 httpd optional
gunicorn_25.3.0-2.debian.tar.xz
528eb76f91e3a140335f6f1ccb23ff00 9786 httpd optional
gunicorn_25.3.0-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=Zbo4
-----END PGP SIGNATURE-----
pgpsPrldqgmiK.pgp
Description: PGP signature
--- End Message ---
