Source: mime-support Version: 3.58 Severity: wishlist Tags: patch User: [email protected] Usertags: timestamps X-Debbugs-Cc: [email protected]
Hi! While working on the “reproducible builds” effort [1], we have noticed that mime-support could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776939 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds
diff -Nru mime-support-3.58/debian/changelog mime-support-3.58+nmu1/debian/changelog --- mime-support-3.58/debian/changelog 2014-12-28 07:06:43.000000000 +0100 +++ mime-support-3.58+nmu1/debian/changelog 2015-07-24 13:11:57.000000000 +0200 @@ -1,3 +1,10 @@ +mime-support (3.58+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira <[email protected]> Fri, 24 Jul 2015 13:11:46 +0200 + mime-support (3.58) unstable; urgency=high * CVE-2014-7209: run-mailcap shell command injection. diff -Nru mime-support-3.58/debian/rules mime-support-3.58+nmu1/debian/rules --- mime-support-3.58/debian/rules 2014-12-28 07:06:43.000000000 +0100 +++ mime-support-3.58+nmu1/debian/rules 2015-07-24 13:11:43.000000000 +0200 @@ -6,6 +6,7 @@ package := mime-support +export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 -SDate)" +%s) default: @echo "Build 'binary' or 'clean'?" @@ -71,6 +72,8 @@ dpkg-gencontrol -is -ip chown -R root.root debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \ + xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH" dpkg --build debian/tmp dpkg-name -o -s .. debian/tmp.deb
signature.asc
Description: OpenPGP digital signature
