Hello community,

here is the log from the commit of package cardpeek for openSUSE:Factory 
checked in at 2018-08-03 12:38:21
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/cardpeek (Old)
 and      /work/SRC/openSUSE:Factory/.cardpeek.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "cardpeek"

Fri Aug  3 12:38:21 2018 rev:8 rq:627093 version:0.8.4

Changes:
--------
--- /work/SRC/openSUSE:Factory/cardpeek/cardpeek.changes        2017-08-28 
15:33:04.134604993 +0200
+++ /work/SRC/openSUSE:Factory/.cardpeek.new/cardpeek.changes   2018-08-03 
12:38:22.975665954 +0200
@@ -1,0 +2,6 @@
+Wed Jun 13 06:31:45 UTC 2018 - [email protected]
+
+- Add reproducible.patch to not have the embedded tarball vary
+  across builds
+
+-------------------------------------------------------------------

New:
----
  reproducible.patch

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ cardpeek.spec ++++++
--- /var/tmp/diff_new_pack.Ono8f7/_old  2018-08-03 12:38:23.471666692 +0200
+++ /var/tmp/diff_new_pack.Ono8f7/_new  2018-08-03 12:38:23.475666697 +0200
@@ -25,6 +25,8 @@
 Url:            http://pannetrat.com/Cardpeek/
 Source:         
http://downloads.pannetrat.com/install/%{name}-%{version}.tar.gz
 Patch0:         cardpeek-lua5.3.patch
+# PATCH-FIX-UPSTREAM https://github.com/L1L1/cardpeek/pull/97
+Patch1:         reproducible.patch
 BuildRequires:  desktop-file-utils
 BuildRequires:  hicolor-icon-theme
 BuildRequires:  openssl-devel
@@ -57,6 +59,7 @@
 %prep
 %setup -q
 %patch0 -p1
+%patch1 -p1
 
 %build
 %configure \

++++++ reproducible.patch ++++++
https://github.com/L1L1/cardpeek/pull/97

commit 75b1c44dd7b0b2c7a98abd01a785edded7865a96
Author: Bernhard M. Wiedemann <[email protected]>
Date:   Wed Jun 13 06:51:21 2018 +0200

    Create tar.gz in a reproducible way
    
    by sorting entries, overriding UID, mtime
    and using gzip -n to not add a timestamp
    
    See https://reproducible-builds.org/ for why this is good.

Index: cardpeek-0.8.4/Makefile.in
===================================================================
--- cardpeek-0.8.4.orig/Makefile.in
+++ cardpeek-0.8.4/Makefile.in
@@ -1186,7 +1186,7 @@ dist-hook:
 
 dot_cardpeek.tar.gz:    dot_cardpeek_dir       
                        @echo "  TAR      $<"
-                       $(AM_V_at)tar -c -z -f dot_cardpeek.tar.gz --directory 
$(srcdir)/dot_cardpeek_dir --exclude=.svn --exclude='\._*' .
+                       $(AM_V_at)tar --help|grep -q sort= && 
taropts="--sort=name --clamp-mtime --format=gnu --owner=0 --group=0" ; tar -c 
$$taropts --directory $(srcdir)/dot_cardpeek_dir --exclude=.svn 
--exclude='\._*' . | gzip -cn9 > dot_cardpeek.tar.gz
 
 cardpeek_resources.$(OBJEXT):  dot_cardpeek.tar.gz $(ICONS) AUTHORS COPYING 
cardpeek_resources.gresource.xml
                        @echo "  GLIB_COMPILE_RESOURCES 
cardpeek_resources.gresource.xml"


Reply via email to