Your message dated Mon, 05 Aug 2024 13:35:12 +0000
with message-id <[email protected]>
and subject line Bug#1035400: fixed in lucene8 8.8.1-5
has caused the Debian Bug report #1035400,
regarding lucene8: reproducible builds: username embedded in .jar files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1035400: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035400
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: lucene8
Severity: normal
Tags: patch
User: [email protected]
Usertags: username
X-Debbugs-Cc: [email protected]
Various .jar files embed the username:
https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/lucene8.html
/usr/share/java/lucene-analyzers-common-8.7.0.jar
Implementation-Version:·8.8.1-4·unknown·-·pbuilder1·-·2022-11-25·13:00\xd
vs.
Implementation-Version:·8.8.1-4·unknown·-·pbuilder2·-·2022-11-25·13:00\xd
The attached patches fix this by removing the user.name from the
Implementation-Version fields in various template .xml files.
According to my local tests, with these patches applied lucene8 should
become reproducible on tests.reproducible-builds.org!
Thanks for maintaining lucene8!
live well,
vagrant
From 42be160c88c6d81278c85c0dbd612b1c84b1e2bb Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Tue, 2 May 2023 12:20:34 -0700
Subject: [PATCH 1/4] common-build.xml: Remove user from
Implementation-Version.
---
common-build.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/common-build.xml b/common-build.xml
index 96c5ba5..2bb79f7 100644
--- a/common-build.xml
+++ b/common-build.xml
@@ -793,7 +793,7 @@
<attribute name="Implementation-Title" value="@{implementation.title}"/>
<!-- impl version can be any string -->
<attribute name="Implementation-Version"
- value="${version} ${checkoutid} - ${user.name} - ${DSTAMP} ${TSTAMP}"/>
+ value="${version} ${checkoutid} - ${DSTAMP} ${TSTAMP}"/>
<attribute name="Implementation-Vendor"
value="The Apache Software Foundation"/>
<attribute name="X-Compile-Source-JDK" value="${javac.release}"/>
--
2.39.2
From 8655f43ae17ad1fa707fd7e3d08af328b11479e8 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Tue, 2 May 2023 12:22:17 -0700
Subject: [PATCH 2/4] debian/poms/lucene-solr-grandparent.pom.xml: Remove build
user from Implementation-Version.
---
debian/poms/lucene-solr-grandparent.pom.xml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/debian/poms/lucene-solr-grandparent.pom.xml b/debian/poms/lucene-solr-grandparent.pom.xml
index b0df3c7..c34075c 100644
--- a/debian/poms/lucene-solr-grandparent.pom.xml
+++ b/debian/poms/lucene-solr-grandparent.pom.xml
@@ -11686,7 +11686,7 @@
<Specification-Version>${specification.version}</Specification-Version>
<Specification-Vendor>The Apache Software Foundation</Specification-Vendor>
<!-- impl version can be any string -->
- <Implementation-Version>${project.version} ${checkoutid} - ${user.name} - ${now.timestamp}</Implementation-Version>
+ <Implementation-Version>${project.version} ${checkoutid} - ${now.timestamp}</Implementation-Version>
<Implementation-Vendor>The Apache Software Foundation</Implementation-Vendor>
<Implementation-Vendor-Id>${project.groupId}</Implementation-Vendor-Id>
<X-Compile-Source-JDK>${java.compat.version}</X-Compile-Source-JDK>
@@ -11812,7 +11812,7 @@
<Specification-Version>${specification.version}</Specification-Version>
<Specification-Vendor>The Apache Software Foundation</Specification-Vendor>
<!-- impl version can be any string -->
- <Implementation-Version>${project.version} ${checkoutid} - ${user.name} - ${now.timestamp}</Implementation-Version>
+ <Implementation-Version>${project.version} ${checkoutid} - ${now.timestamp}</Implementation-Version>
<Implementation-Vendor>The Apache Software Foundation</Implementation-Vendor>
<Implementation-Vendor-Id>${project.groupId}</Implementation-Vendor-Id>
<X-Compile-Source-JDK>${java.compat.version}</X-Compile-Source-JDK>
--
2.39.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: lucene8
Source-Version: 8.8.1-5
Done: Emmanuel Bourg <[email protected]>
We believe that the bug you reported is fixed in the latest version of
lucene8, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Emmanuel Bourg <[email protected]> (supplier of updated lucene8 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 05 Aug 2024 15:12:16 +0200
Source: lucene8
Architecture: source
Version: 8.8.1-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Emmanuel Bourg <[email protected]>
Closes: 1035400
Changes:
lucene8 (8.8.1-5) unstable; urgency=medium
.
* Team upload.
* Make the manifest reproducible (Closes: #1035400)
* Standards-Version updated to 4.7.0
Checksums-Sha1:
77265322c97cf32b869f175a5f9df2991fd580ed 2551 lucene8_8.8.1-5.dsc
592f959446f4b30cd735f9fcb014ef9eb9bf11d3 22620 lucene8_8.8.1-5.debian.tar.xz
8237cfd62f12432711893a31489321ac07599000 11593 lucene8_8.8.1-5_source.buildinfo
Checksums-Sha256:
35bc31cf5750c488bedbd490ebbdebfc6d01b04acd13ac0badb4747668dd5823 2551
lucene8_8.8.1-5.dsc
aa4056fb98fc77c6a7bfc02ef6620668d9386236e387e9a3445acbab5414e958 22620
lucene8_8.8.1-5.debian.tar.xz
61793514aa3226a64aba9ebeb337dfa929e6dfe81edea009c99a0d9fc47a6423 11593
lucene8_8.8.1-5_source.buildinfo
Files:
12e9779285b733e541f4d8c7e0e0253f 2551 java optional lucene8_8.8.1-5.dsc
62fcbd2ab5ae385e980b10192864bebb 22620 java optional
lucene8_8.8.1-5.debian.tar.xz
4602803d368b60044b47b24b1d03aed0 11593 java optional
lucene8_8.8.1-5_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=D2h4
-----END PGP SIGNATURE-----
pgpOx5qMOxtj9.pgp
Description: PGP signature
--- End Message ---
__
This is the maintainer address of Debian's Java team
<https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
