Your message dated Wed, 06 May 2026 11:35:31 +0000
with message-id <[email protected]>
and subject line Bug#1130335: fixed in llvm-toolchain-22 1:22.1.5-1
has caused the Debian Bug report #1130335,
regarding src:llvm-toolchain-22 modifies debian/control during the build
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
1130335: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1130335
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: llvm-toolchain-22
Version: 1:22.1.0-2
Severity: serious
X-Debbugs-Cc: [email protected]
User: [email protected]
Usertags: buildinfo

Hi,

src:llvm-toolchain-22 modifies the debian/control file during the build:

diff -u debian/control debian/control.new || true
mv debian/control.new debian/control

https://buildd.debian.org/status/fetch.php?pkg=llvm-toolchain-22&arch=all&ver=1%3A22.1.0-2&stamp=1772141829&raw=0

This is forbidding by the ftp-master REJECT-FAQ:

| Putting all of that together, you can simplify it with debian/control
| has to contain a list of binaries to be built before the build-process
| starts, do not modify that in the running build-process.

https://web.archive.org/web/20260208141017/https://ftp-master.debian.org/REJECT-FAQ.html

And makes the package not reproducible on reproduce.debian.net:

https://qa.debian.org/excuses.php?package=llvm-toolchain-22

The problem is that llvm-spirv-21 is replaced by llvm-spirv-22 (already
changed in git).

A better approach is to fail the build in that case:

--- a/debian/rules
+++ b/debian/rules
@@ -1086,8 +1086,9 @@ stamps/preconfigure:
                $(if $(filter yes, $(LIBCLC_ENABLE)),,--skip-libclc-packages) \
                debian/control debian/packages.common debian/packages.ocaml 
debian/packages.libclc \
                > debian/control.new
-       diff -u debian/control debian/control.new || true
-       mv debian/control.new debian/control
+       # Make sure d/control is up to date and fail the build otherwise.
+       # Do not simply replace it here as modifying it during the build is 
forbidden by policy.
+       diff -u debian/control debian/control.new

 ifeq (,$(filter llvm.noclang, $(DEB_BUILD_PROFILES)))
        if ! dh_listpackages|grep -q clang-$(LLVM_VERSION); then \

Cheers Jochen

--- End Message ---
--- Begin Message ---
Source: llvm-toolchain-22
Source-Version: 1:22.1.5-1
Done: Sylvestre Ledru <[email protected]>

We believe that the bug you reported is fixed in the latest version of
llvm-toolchain-22, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sylvestre Ledru <[email protected]> (supplier of updated llvm-toolchain-22 
package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 May 2026 00:00:00 +0200
Source: llvm-toolchain-22
Architecture: source
Version: 1:22.1.5-1
Distribution: unstable
Urgency: medium
Maintainer: LLVM Packaging Team <[email protected]>
Changed-By: Sylvestre Ledru <[email protected]>
Closes: 1130335 1130893
Changes:
 llvm-toolchain-22 (1:22.1.5-1) unstable; urgency=medium
 .
   * New upstream release
   * d/rules: Fail the build if debian/control is regenerated, except for
     apt.llvm.org snapshot builds where the substitutions legitimately
     differ between snapshots. Modifying debian/control during the build
     is forbidden by Debian policy and breaks reproducibility.
     (Closes: #1130335)
   * d/rules, d/control.in: Replace the post-substitution sed that rewrote
     the libc++/libomp/libunwind move version cap on apt.llvm.org snapshot
     builds with a @LIBCXX_MOVE_VERSION@ placeholder substituted in the
     same loop as the other variables. Removes one more in-build mutation
     of debian/control.
   * d/rules: Extend the regenerate-vs-fail check to debian/watch,
     debian/packages.ocaml and debian/packages.libclc. These three files
     are also tracked in git, kept by override_dh_auto_clean and rewritten
     in place by the substitution loop, so they have the same drift risk
     as debian/control.
   * d/source-integrity.mk: Move the source-package integrity logic
     (APT_LLVM_ORG, GENERATED_TRACKED_FILES and the snapshot/verify canned
     recipes) into a dedicated include file. Keeps debian/rules focused on
     the build itself.
   * d/tests.mk: Move the override_dh_auto_test definition (the whole
     ifeq RUN_TEST block, ARCH_LLVM_TEST_OK and the lcov coverage tail)
     into a dedicated include file. Pure relocation, no behavioural
     change.
   * d/build-wasm-mingw.mk: Move the wasm32/wasm64 + mingw-w64
     compiler-rt and libcxx pattern rules, the STAGE_2_WASM_C(XX)FLAGS
     filters and the stamps/debian-{wasm,mingw}-build aggregators into a
     dedicated include file. Pure relocation, no behavioural change.
   * Fix the autopkgtest for Polly. Thanks to Adrian Bunk for the fix
     (Closes: #1130893)
Checksums-Sha1:
 d66ddf767baec9a1f5f78860150ed18e7e31afc2 15824 llvm-toolchain-22_22.1.5-1.dsc
 e2f4ed3abd2f4b4711f6d7005247b5c59933e322 196629700 
llvm-toolchain-22_22.1.5.orig.tar.xz
 67edbfbc3810fbb48c7079c999203b25bf7fe9e8 177280 
llvm-toolchain-22_22.1.5-1.debian.tar.xz
 1a6667fde7f9348ca282bf12c2cfd42dba7ec26e 39601 
llvm-toolchain-22_22.1.5-1_amd64.buildinfo
Checksums-Sha256:
 dc720951ed8e83d5857a51983aa51acbd62f49019b80e4019b25b8c8e02bd9c7 15824 
llvm-toolchain-22_22.1.5-1.dsc
 dc8386e51e49a34ad4a9a3ed52a3d539c43e45e1fa33fe64d9f91443360af5a7 196629700 
llvm-toolchain-22_22.1.5.orig.tar.xz
 d8e84d16f153da7c9eb0256e6ba71f2447127cd626f8de837c4a1e77392cda30 177280 
llvm-toolchain-22_22.1.5-1.debian.tar.xz
 49b74c942f6dd215b9c114ef59e07389bb97a5fa9e6b9c1fffe091ba12a1c765 39601 
llvm-toolchain-22_22.1.5-1_amd64.buildinfo
Files:
 cad30704e7183f53edf4beb81ba2e0c6 15824 devel optional 
llvm-toolchain-22_22.1.5-1.dsc
 4cc3f36cc6d51973912db747e7561ec6 196629700 devel optional 
llvm-toolchain-22_22.1.5.orig.tar.xz
 4ffebf706f8cc4b774c06d558c8a2036 177280 devel optional 
llvm-toolchain-22_22.1.5-1.debian.tar.xz
 06537d617f6efdb3e3a27f51eac9c515 39601 devel optional 
llvm-toolchain-22_22.1.5-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=sB/g
-----END PGP SIGNATURE-----

Attachment: pgpvJdk0Zcuon.pgp
Description: PGP signature


--- End Message ---

Reply via email to