Source: cxref
Severity: normal
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

The build timestamp is embedded in various .dvi and .ps files:

  
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/cxref.html

  /usr/share/doc/cxref/README.ps.gz

  %DVIPSSource:··TeX·output·2021.09.14:1340
vs.
  %DVIPSSource:··TeX·output·2022.10.18:2205

The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

There are other reproducibility issues for cxref(build paths and
usrmerge), so this patch alone will not make cxref reproducible, but
should reduce the overall reproducibility diff, making it easier to
troubleshoot remaining issues.


Thanks for maintaining cxref!


live well,
  vagrant
From 404ab1548ba4d9a6c7cfb8974e1ff0497972b1c6 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagr...@reproducible-builds.org>
Date: Tue, 5 Oct 2021 05:44:26 +0000
Subject: [PATCH 1/2] debian/rules: Export FORCE_SOURCE_DATE=1 in order for
 texlive to respect SOURCE_DATE_EPOCH when generating .dvi and .ps files.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 5a7bf13..d28ac30 100755
--- a/debian/rules
+++ b/debian/rules
@@ -16,6 +16,9 @@ VERS:=$(shell cat debian/changelog |grep ^cxref|head -n 1|cut -f2 -d\ |tr -d '()
 
 DPKG_EXPORT_BUILDFLAGS=1
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
 include /usr/share/dpkg/buildflags.mk
 
 build: build-arch build-indep
-- 
2.30.2

Attachment: signature.asc
Description: PGP signature

Reply via email to