Your message dated Thu, 06 Aug 2026 12:19:18 +0000
with message-id <[email protected]>
and subject line Bug#1143615: fixed in keychain 2.9.8-2
has caused the Debian Bug report #1143615,
regarding keychain: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1143615: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1143615
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: keychain
Version: 2.9.8-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
keychain could not be built reproducibly.
This is because the /usr/bin/keychain binary embeds the current build
year. A patch is attached that seeds this value from SOURCE_DATE_EPOCH
if available.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/patches/reproducible-build.patch 1969-12-31 16:00:00.000000000
-0800
--- b/debian/patches/reproducible-build.patch 2026-08-04 16:27:54.196148271
-0700
@@ -0,0 +1,20 @@
+Description: Make the build reproducible
+Author: Chris Lamb <[email protected]>
+Last-Update: 2026-08-04
+
+--- keychain-2.9.8.orig/Makefile
++++ keychain-2.9.8/Makefile
+@@ -6,7 +6,12 @@ Y:sh = date +'%Y'
+ # for GNU Make:
+ V ?= $(shell cat VERSION)
+ D ?= $(shell date +'%d %b %Y')
+-Y ?= $(shell date +'%Y')
++DATE_FMT = +%Y
++ifdef SOURCE_DATE_EPOCH
++ Y ?= $(shell date -u -d "@$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null
|| date -u -r "$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u
"$(DATE_FMT)")
++else
++ Y ?= $(shell date "$(DATE_FMT)")
++endif
+
+ PREFIX ?= /usr/local
+ COMPLETIONSDIR ?= $(PREFIX)/share/bash-completion/completions
--- a/debian/patches/series 1969-12-31 16:00:00.000000000 -0800
--- b/debian/patches/series 2026-08-04 16:22:07.251223395 -0700
@@ -0,0 +1 @@
+reproducible-build.patch
--- End Message ---
--- Begin Message ---
Source: keychain
Source-Version: 2.9.8-2
Done: Peter Pentchev <[email protected]>
We believe that the bug you reported is fixed in the latest version of
keychain, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Peter Pentchev <[email protected]> (supplier of updated keychain package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 06 Aug 2026 14:54:51 +0300
Source: keychain
Architecture: source
Version: 2.9.8-2
Distribution: unstable
Urgency: medium
Maintainer: Peter Pentchev <[email protected]>
Changed-By: Peter Pentchev <[email protected]>
Closes: 1143615
Changes:
keychain (2.9.8-2) unstable; urgency=medium
.
* Make the build reproducible: do not store the current year.
Closes: #1143615; thanks, Chris Lamb!
* Salsa CI: make some checks a bit stricter.
Checksums-Sha1:
80cc90e32f6f8cbe67932cf04dce6fdb4e95d9b1 2161 keychain_2.9.8-2.dsc
c7655819fadb43ee1aee620a7313423b164f8b53 8108 keychain_2.9.8-2.debian.tar.xz
506f297cc1a710771a364837edd6202f08057b94 161552 keychain_2.9.8-2.git.tar.xz
1f6cbc49655f7447e570baa133b99a7e9e4905a7 17556
keychain_2.9.8-2_source.buildinfo
Checksums-Sha256:
105bb145bc456bfb927de7f743299f0534dc29eee48193944e1c533519d57ab6 2161
keychain_2.9.8-2.dsc
6e32cd69b56e7d90089ba181f78cea78a9599c8b2348ba4b1a50c368f3b58396 8108
keychain_2.9.8-2.debian.tar.xz
b786d2fc0a3886ffd4af3594169373e592ba7d521681b431cad15625b9eb8b2c 161552
keychain_2.9.8-2.git.tar.xz
9f203025d689ba8162fd5681787dafcfb045d321ffb5282f58a6d5ab442633f6 17556
keychain_2.9.8-2_source.buildinfo
Files:
dd1cbc5069d05be61f1a3212452e1e9b 2161 net optional keychain_2.9.8-2.dsc
70cf239a20e1750cf8705a1d1eaf4de1 8108 net optional
keychain_2.9.8-2.debian.tar.xz
df9003b98824284a4f2a6c518a995e40 161552 net None keychain_2.9.8-2.git.tar.xz
5af667063b89309400fe2852e0fc2cba 17556 net optional
keychain_2.9.8-2_source.buildinfo
Git-Tag-Info: tag=4bf1add60458f006f74037de74a7afaf3179f3f3
fp=2ee7a7a517fc124cf115c354651eefb02527df13
Git-Tag-Tagger: Peter Pentchev <[email protected]>
-----BEGIN PGP SIGNATURE-----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=AQnz
-----END PGP SIGNATURE-----
pgpzlBy5vkai0.pgp
Description: PGP signature
--- End Message ---
