Hi. I have rewrited the apg patch using SOURCE_DATE_EPOCH variable. The attached patch clamps the timestamps to the changelog timestamp when creating the source archive using using SOURCE_DATE_EPOCH variable. Once applied, apg can be built reproducibly in our current experimental framework. Cheers.
Jathan -- Por favor evita enviarme adjuntos en formato de word o powerpoint, si quieres saber porque lee esto: http://www.gnu.org/philosophy/no-word-attachments.es.html ¡Cámbiate a GNU/Linux! http://getgnulinux.org/es
diff -Nru apg-2.2.3.dfsg.1/debian/changelog apg-2.2.3.dfsg.1/debian/changelog --- apg-2.2.3.dfsg.1/debian/changelog 2016-08-05 05:04:46.000000000 -0500 +++ apg-2.2.3.dfsg.1/debian/changelog 2017-10-01 20:52:02.000000000 -0500 @@ -1,3 +1,10 @@ +apg (2.2.3.dfsg.1-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix timestamps_in_tarball reproducible build issue. + + -- Jonathan Bustillos <[email protected]> Sun, 01 Oct 2017 20:52:02 -0500 + apg (2.2.3.dfsg.1-4) unstable; urgency=low * add patch from Steve Langasek to use correct compiler (Closes: #734870) diff -Nru apg-2.2.3.dfsg.1/debian/rules apg-2.2.3.dfsg.1/debian/rules --- apg-2.2.3.dfsg.1/debian/rules 2016-08-05 05:04:46.000000000 -0500 +++ apg-2.2.3.dfsg.1/debian/rules 2017-10-01 20:51:27.000000000 -0500 @@ -1,5 +1,6 @@ #!/usr/bin/make -f +SOURCE_DATE_EPOCH ?= $(shell dpkg-parsechangelog -STimestamp) DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) @@ -19,6 +20,7 @@ make install INSTALL_PREFIX=$(CURDIR)/debian/apg/usr mv $(CURDIR)/debian/apg/usr/bin/apg $(CURDIR)/debian/apg/usr/lib/apg/apg tar --create --file - --directory $(CURDIR)/php/apgonline/ . \ + --clamp-mtime --mtime="$(SOURCE_DATE_EPOCH)" \ --mode=u=rwX,go=rX --sort=name | gzip --no-name > php.tar.gz install -D --mode=0644 php.tar.gz $(CURDIR)/debian/apg/usr/share/doc/apg/php.tar.gz rm php.tar.gz
signature.asc
Description: OpenPGP digital signature
