Source: libsdl2-gfx Version: 1.0.1+dfsg-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: fileordering timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi! While working on the "reproducible builds" effort [1], we have noticed that libsdl2-gfx could not be built reproducibly. The example tarball still has time and order variations. The attached patch fixes this by telling tar to sort the file list and clamp the mtime at SOURCE_DATE_EPOCH. Regards, Reiner [1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/control b/debian/control index 2e710d7..1a0beeb 100644 --- a/debian/control +++ b/debian/control @@ -13,6 +13,7 @@ Build-Depends: autoconf, dh-autoreconf, libsdl2-dev, libtool, + tar (>= 1.28), pkg-config Build-Depends-Indep: doxygen Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-sdl/packages/libsdl2-gfx.git diff --git a/debian/rules b/debian/rules index f6272fe..b4f2b2a 100755 --- a/debian/rules +++ b/debian/rules @@ -31,7 +31,7 @@ override_dh_install: override_dh_auto_build: dh_auto_build - tar -cvz --transform='s,^test,examples,' -f debian/examples.tar.gz --mode=go=rX,u+rw,a-s --owner=root --group=root --numeric-owner test + tar -cvz --transform='s,^test,examples,' -f debian/examples.tar.gz --clamp-mtime --mtime="@$(SOURCE_DATE_EPOCH)" --sort=name --mode=go=rX,u+rw,a-s --owner=root --group=root --numeric-owner test override_dh_auto_build-indep: doxygen Docs/html.doxyfile
signature.asc
Description: Digital signature