Your message dated Sat, 14 Dec 2024 18:52:04 +0000
with message-id <[email protected]>
and subject line Bug#1006979: fixed in liggghts 3.8.0+repack1-11
has caused the Debian Bug report #1006979,
regarding liggghts: reproducible builds: username and timestamp embedded in
libliggghts.so.3.8.0
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1006979: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006979
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: liggghts
Severity: normal
Tags: patch
User: [email protected]
Usertags: username timestamps
X-Debbugs-Cc: [email protected]
/usr/lib/x86_64-linux-gnu/libliggghts.so.3.8.0
│ │ │ ├── ./usr/lib/x86_64-linux-gnu/libliggghts.so.3.8.0
...
│ │ │ │ │ -nearestActiveEdgminActiveEdgeDisLIGGGHTS-PUBLIC 3.8.0, compiled
2022-03-09-06:30:52 by vagrant, git commit e2bd90538abe29938\
baf70275ba72f6db429b758
│ │ │ │ │ +nearestActiveEdgminActiveEdgeDisLIGGGHTS-PUBLIC 3.8.0, compiled
2023-05-01-09:19:17 by vagrant, git commit e2bd90538abe29938\
baf70275ba72f6db429b758
The attached two patches fix this by respecting the SOURCE_DATE_EPOCH
environment variable for the timestamp, and by removing the build user
from the information embedded in the binary.
Thanks for maintaining liggghts!
live well,
vagrant
From aa115db3100bd9814b50d1d2109cc0759baa6d9c Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Wed, 9 Mar 2022 19:25:35 +0000
Subject: [PATCH 1/2] src/Make.sh: Use SOURCE_DATE_EPOCH for build timestamp.
https://reproducible-builds.org/docs/source-date-epoch/
---
src/Make.sh | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/Make.sh b/src/Make.sh
index 96b57be..0fd32fd 100644
--- a/src/Make.sh
+++ b/src/Make.sh
@@ -11,7 +11,8 @@
style () {
# modified C.K. create version_liggghts.h
- builddate=`date +%Y-%m-%d-%H:%M:%S`
+ DATE_FMT='+%Y-%m-%d-%H:%M:%S'
+ builddate=`date -u -d "@$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u -r "$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u "$DATE_FMT"`
wai=`whoami`
vers=`cat version_liggghts.txt`
bra=`cat version_liggghts_branch.txt`
--
2.35.1
From 05e0cb096e8c5c4581fb81f86e08fcdc52d9aef7 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Wed, 9 Mar 2022 20:05:22 +0000
Subject: [PATCH 2/2] src/Make.sh: Do not embed build user.
---
src/Make.sh | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
diff --git a/src/Make.sh b/src/Make.sh
index 0fd32fd..147e123 100644
--- a/src/Make.sh
+++ b/src/Make.sh
@@ -13,20 +13,19 @@ style () {
# modified C.K. create version_liggghts.h
DATE_FMT='+%Y-%m-%d-%H:%M:%S'
builddate=`date -u -d "@$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u -r "$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u "$DATE_FMT"`
- wai=`whoami`
vers=`cat version_liggghts.txt`
bra=`cat version_liggghts_branch.txt`
if [ -d .git ]; then
githash=`git log -1 --format="%H"`
- echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate by $wai, git commit $githash\"" > version_liggghts.h
+ echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate, git commit $githash\"" > version_liggghts.h
elif [ -d ../.git ]; then
cd ..
githash=`git log -1 --format="%H"`
cd src
- echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate by $wai, git commit $githash\"" > version_liggghts.h
+ echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate, git commit $githash\"" > version_liggghts.h
else
- echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate by $wai, git commit unknown\"" > version_liggghts.h
+ echo "#define LIGGGHTS_VERSION \"$bra $vers, compiled $builddate, git commit unknown\"" > version_liggghts.h
fi;
list=`grep -sl $1 $2*.h`
--
2.35.1
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: liggghts
Source-Version: 3.8.0+repack1-11
Done: Anton Gladky <[email protected]>
We believe that the bug you reported is fixed in the latest version of
liggghts, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anton Gladky <[email protected]> (supplier of updated liggghts package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 14 Dec 2024 18:54:53 +0100
Source: liggghts
Architecture: source
Version: 3.8.0+repack1-11
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Maintainers
<[email protected]>
Changed-By: Anton Gladky <[email protected]>
Closes: 1006979 1076233
Changes:
liggghts (3.8.0+repack1-11) unstable; urgency=medium
.
* [678093a] d/control: set Standards-Version to 4.7.0
* [e5c1e59] Remove deprecated mpirun parameter. (Closes: #1076233)
* [4e789b6] Make the package reproducible. (Closes: #1006979)
Checksums-Sha1:
c84f8ee80a7e5d1ad338d46b8028c678526d4a11 2314 liggghts_3.8.0+repack1-11.dsc
c055c9ee3af3b2620e2b66d04d7e1e34b904f014 12288
liggghts_3.8.0+repack1-11.debian.tar.xz
66e4d42cb6013b84a0c20f6b87e414a6c77b8a9c 27147
liggghts_3.8.0+repack1-11_source.buildinfo
Checksums-Sha256:
3ccc5fe83f1d7c262bc1f0dbde02a5b0eb8d8e75e05262f349d8479dee173596 2314
liggghts_3.8.0+repack1-11.dsc
aa5f44265d8d17419d44d1df6fee1a9fc5a47d1cf9c6b27e59da509a87b972c2 12288
liggghts_3.8.0+repack1-11.debian.tar.xz
a0d5c9e0587abbbaa673bcaba0904728742bf0abb31990e195c048027d135a70 27147
liggghts_3.8.0+repack1-11_source.buildinfo
Files:
a5139e1d0a3a665335d1195e8965199d 2314 science optional
liggghts_3.8.0+repack1-11.dsc
88a7e4a0364a2c7ba01869fc912160bd 12288 science optional
liggghts_3.8.0+repack1-11.debian.tar.xz
ce8802604bf504b27d03317cf014c0eb 27147 science optional
liggghts_3.8.0+repack1-11_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=MbRz
-----END PGP SIGNATURE-----
pgpMX4RJGWWjU.pgp
Description: PGP signature
--- End Message ---
--
debian-science-maintainers mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-science-maintainers
