Your message dated Tue, 06 Oct 2026 20:39:32 +0000
with message-id <[email protected]>
and subject line Bug#1149639: fixed in horizon 3:27.0.0-3
has caused the Debian Bug report #1149639,
regarding horizon: reproducible-builds: .lock file not removed if built in a
different path.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1149639: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1149639
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: horizon
Severity: minor
Tags: patch
User: [email protected]
Usertags: buildpath
X-Debbugs-Cc: [email protected]
A .lock file that is intended to be removed in debian/rules may still
get installed if the package build is performed in a non-default path.
Patch attached which uses a path-independent match to remove the .lock
file.
Build paths are currently normalized on buildd.debian.org and
reproducible builds infrastructure, as well as most high-level package
building tooling, so marking this as minor severity.
live well,
vagrant
From 0d86e7f8954c319041856ed13b6d0286eeadd430 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Thu, 1 Oct 2026 13:09:15 -0700
Subject: [PATCH] debian/rules: Remove secret_key_store lock file in a
path-independent way.
The match with "_build*" is actually derived from the build path
(typically /build/reproducible-path/PACKAGE-VERSION in Debian) and can
fail to match if built in a different path.
https://reproducible-builds.org/docs/build-path/
---
debian/rules | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debian/rules b/debian/rules
index b0936a63b..4837684ca 100755
--- a/debian/rules
+++ b/debian/rules
@@ -99,7 +99,7 @@ override_dh_auto_install:
find . -name __pycache__ -prune -exec rm -rf {} +;
## Delete not needed files
- rm -f $(CURDIR)/debian/tmp/usr/lib/python3/dist-packages/openstack_dashboard/local/_build*.lock
+ rm -f $(CURDIR)/debian/tmp/usr/lib/python3/dist-packages/openstack_dashboard/local/*secret_key_store.lock
dh_install
dh_missing --fail-missing
--
2.47.3
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: horizon
Source-Version: 3:27.0.0-3
Done: Thomas Goirand <[email protected]>
We believe that the bug you reported is fixed in the latest version of
horizon, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Thomas Goirand <[email protected]> (supplier of updated horizon package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 06 Oct 2026 21:36:53 +0200
Source: horizon
Architecture: source
Version: 3:27.0.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <[email protected]>
Changed-By: Thomas Goirand <[email protected]>
Closes: 1149639
Changes:
horizon (3:27.0.0-3) unstable; urgency=medium
.
* Fixed a reproducible-builds issue: the secret_key_store lock file was
removed with a glob derived from the build path (_build*.lock), which
fails to match when the package is built in a non-default path. Use a
path-independent match instead (Closes: #1149639). Thanks Vagrant
Cascadian for the bug report and the patch.
Checksums-Sha1:
2068dcb9cc4bcfc217d33127a9952fbb2038cd12 4372 horizon_27.0.0-3.dsc
b5d071551e60245685d96afd4231e51790f690a6 36416 horizon_27.0.0-3.debian.tar.xz
74c7504f9e175b61c6ee82078a4cf2cf2393bbde 17464 horizon_27.0.0-3_amd64.buildinfo
Checksums-Sha256:
05bae33f58a563fc8648e968597bac0d0a2760ca62d591f8aecb7979b75839b1 4372
horizon_27.0.0-3.dsc
b195691e5066797a62ccfd8b6fde80c416348431edcec9fa33da9fa269fb7804 36416
horizon_27.0.0-3.debian.tar.xz
935a0f2cfc1f78795a99650575f530d2a6959161fdd3d6741606e0bbea65e6ce 17464
horizon_27.0.0-3_amd64.buildinfo
Files:
1db1e2efb150eb486bcb64e0e4838764 4372 net optional horizon_27.0.0-3.dsc
d363a7617bca1b983027d46062ef6795 36416 net optional
horizon_27.0.0-3.debian.tar.xz
ac16ac7fe555558fcd4da962a939d17c 17464 net optional
horizon_27.0.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=cMNu
-----END PGP SIGNATURE-----
pgpcORdzpOo7V.pgp
Description: PGP signature
--- End Message ---
