Source: golang-github-anchore-stereoscope
Version: 0.3.4-1
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: nocheck
X-Debbugs-Cc: [email protected]
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-anchore-stereoscope could not be built reproducibly.
This is because the testsuite generates a file that is not cleaned up
afterwards, leading it to be installed to:
/usr/share/gocode/src/github.com/anchore/stereoscope/pkg/image/docker/__snapshots__/manifest_test.snap
However, this means that if the tests are skipped, then the package
will not contain this file (as it is not generated in the first place).
This means that the package is not reproducible.
Patch attached that deletes this file after running the tests, and
removes the chmod of the .snap file (as it would no longer be present).
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` [email protected] / chris-lamb.co.uk
`-
--- a/debian/rules 2026-11-04 09:59:02.610632483 -0800
--- b/debian/rules 2026-11-04 14:01:33.058190916 -0800
@@ -27,7 +27,7 @@
rm -rf
debian/*/usr/share/gocode/src/github.com/anchore/stereoscope/.make
# Upstream ships some fixtures with the executable bit set, and a
.gitignore
# inside the OCI test fixtures that has no business in a package.
- find debian \( -name '*.snap' -o -name '*.sif' \) -type f -exec chmod
-x {} +
+ find debian -name '*.sif' -type f -exec chmod -x {} +
find debian -name '.gitignore' -delete
execute_after_dh_auto_configure:
@@ -69,3 +69,5 @@
# descriptors, not fewer. The assertion is stricter than the invariant
it is
# checking, so it is skipped rather than papered over; worth telling
upstream.
dh_auto_test -- -skip
'TestFileCatalog_Open|TestFileCatalog_GetBasenames|TestFileCatalog_GetByBasename|TestFileCatalog_GetByBasenameGlob|TestFileCatalog_GetByExtension|TestFileCatalog_GetByMimeType|TestFileMetadataFromTar|TestMetadataFromTar|TestReaderFromTar_GoCase|TestReaderFromTar_MissingFile|TestIndexedTarIndex_GoCase|TestIndexedTarReader_DuplicateEntries|Test_DockerMainRegistry_Provide|TestImage_PartialReadReleasesEarlierLayers'
+ find debian/_build -name manifest_test.snap -delete
+
