On 2020-08-13, Chris Lamb wrote:
> Whilst working on the Reproducible Builds effort [0] we noticed that
> pencil2d could not be built reproducibly.
>
> While you do use SOURCE_DATE_EPOCH to populate GIT_TIMESTAMP, you omit
> the --utc flag to date(1) so the generated date will depend on the
> build system's current timezone.
...
> --- a/debian/rules    2020-08-13 11:34:56.164335215 +0100
> --- b/debian/rules    2020-08-13 11:59:46.372680920 +0100
> @@ -6,7 +6,7 @@
>  
>  # export information for the "About" screen
>  include /usr/share/dpkg/pkg-info.mk
> -timestamp=$(shell date +%Y-%m-%d -d "@$(SOURCE_DATE_EPOCH)")
> +timestamp=$(shell date +%Y-%m-%d -d -u "@$(SOURCE_DATE_EPOCH)")

I think that should be:

+timestamp=$(shell date +%Y-%m-%d -u -d "@$(SOURCE_DATE_EPOCH)")

Since @SOURCE_DATE_EPOCH is be passed to the "-d" argument.

live well,
  vagrant

Attachment: signature.asc
Description: PGP signature

Reply via email to