Your message dated Sat, 23 Jan 2016 17:43:52 +0000
with message-id <[email protected]>
and subject line Bug#794248: fixed in cortado 0.6.0-3
has caused the Debian Bug report #794248,
regarding cortado: please make the build reproducible
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
794248: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=794248
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: cortado
Version: 0.6.0-2
Severity: wishlist
Tags: patch
User: [email protected]
Usertags: timestamps
X-Debbugs-Cc: [email protected]
Hi,
While working on the "reproducible builds" effort [1], we have noticed
that cortado could not be built reproducibly.
The attached patch replaces the build date found in several .class files
(generated by ant) by the timestamp of the latest debian/changelog
entry. Once applied, cortado can be built reproducibly in our current
experimental framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
Regards,
--
Dhole
diff -Nru cortado-0.6.0/debian/changelog cortado-0.6.0/debian/changelog
--- cortado-0.6.0/debian/changelog 2013-09-24 05:47:39.000000000 +0200
+++ cortado-0.6.0/debian/changelog 2015-07-31 17:12:51.000000000 +0200
@@ -1,3 +1,11 @@
+cortado (0.6.0-2.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * Replace build date with last entry timestamp from debian/changelog
+ to make the package build reproduciblu.
+
+ -- Eduard Sanou <[email protected]> Fri, 31 Jul 2015 17:12:28 +0200
+
cortado (0.6.0-2) unstable; urgency=low
* Team upload.
diff -Nru cortado-0.6.0/debian/patches/replace_timestamp.patch
cortado-0.6.0/debian/patches/replace_timestamp.patch
--- cortado-0.6.0/debian/patches/replace_timestamp.patch 1970-01-01
01:00:00.000000000 +0100
+++ cortado-0.6.0/debian/patches/replace_timestamp.patch 2015-07-31
17:13:15.000000000 +0200
@@ -0,0 +1,53 @@
+Description: Replace timestamp
+ .
+ cortado (0.6.0-2.1) UNRELEASED; urgency=medium
+ .
+ * Non-maintainer upload.
+ * Replace build date with last entry timestamp from debian/changelog
+ to make the package build reproduciblu.
+Author: Eduard Sanou <[email protected]>
+
+---
+
+--- cortado-0.6.0.orig/build.xml
++++ cortado-0.6.0/build.xml
+@@ -83,7 +83,7 @@ Cortado ANT build file
+
+ <target name="configure" depends="scripts">
+ <tstamp>
+- <format property="DATE" timezone="GMT" pattern="yyyy-MM-dd HH:mm:ss" />
++ <format property="DATE" timezone="UTC" pattern="yyyy-MM-dd HH:mm:ss" />
+ </tstamp>
+ <exec executable="sh" outputproperty="REVISION">
+ <arg line="${src}/../scripts/get-revision" />
+@@ -94,15 +94,18 @@ Cortado ANT build file
+ <condition property="real_version" value="${REVISION}"
else="${product.version}">
+ <equals arg1="${product.version}" arg2="GIT"/>
+ </condition>
+- <echo file="${src}/com/fluendo/player/Configure.java" append="false"
++ <!-- Enable build date to be set externally -->
++ <property environment="env"/>
++ <property name="env.BUILD_DATE" value="${DATE}"/>
++ <echo file="${src}/com/fluendo/player/Configure.java" append="false"
+ >
+ package com.fluendo.player;
+
+ class Configure
+ {
+- public String buildInfo = "Built on ${DATE} GMT (version ${real_version})
in ${build.type} mode.";
++ public String buildInfo = "Built on ${env.BUILD_DATE} UTC (version
${real_version}) in ${build.type} mode.";
+
+- public String buildDate = "${DATE} GMT";
++ public String buildDate = "${env.BUILD_DATE} UTC";
+ public String buildVersion = "${real_version}";
+ public String buildType = "${build.type}";
+ public String revision = "${REVISION}";
+@@ -113,7 +116,7 @@ class Configure
+ }
+ </echo>
+ <echo
+->Built on ${DATE} (version ${real_version}) in ${build.type} mode.</echo>
++>Built on ${env.BUILD_DATE} (version ${real_version}) in ${build.type}
mode.</echo>
+
+ </target>
+
diff -Nru cortado-0.6.0/debian/patches/series
cortado-0.6.0/debian/patches/series
--- cortado-0.6.0/debian/patches/series 2013-09-24 05:47:39.000000000 +0200
+++ cortado-0.6.0/debian/patches/series 2015-07-31 17:13:01.000000000 +0200
@@ -1 +1,2 @@
01_fix_build.diff
+replace_timestamp.patch
diff -Nru cortado-0.6.0/debian/rules cortado-0.6.0/debian/rules
--- cortado-0.6.0/debian/rules 2013-09-24 05:47:39.000000000 +0200
+++ cortado-0.6.0/debian/rules 2015-07-31 17:12:20.000000000 +0200
@@ -3,6 +3,9 @@
include /usr/share/cdbs/1/class/ant.mk
include /usr/share/cdbs/1/rules/debhelper.mk
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1
-SDate)" +%s)
+export BUILD_DATE = $(shell date -u -d @$(SOURCE_DATE_EPOCH) +"%Y-%m-%d
%H:%M:%S")
+
JAVA_HOME = /usr/lib/jvm/default-java
DEB_ANT_INSTALL_TARGET = install_applet
signature.asc
Description: OpenPGP digital signature
--- End Message ---
--- Begin Message ---
Source: cortado
Source-Version: 0.6.0-3
We believe that the bug you reported is fixed in the latest version of
cortado, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Markus Koschany <[email protected]> (supplier of updated cortado package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 23 Jan 2016 17:37:58 +0100
Source: cortado
Binary: cortado libcortado-java
Architecture: source
Version: 0.6.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<[email protected]>
Changed-By: Markus Koschany <[email protected]>
Description:
cortado - streaming applet for Ogg formats
libcortado-java - streaming applet for Ogg formats -- shared components
Closes: 794248
Changes:
cortado (0.6.0-3) unstable; urgency=medium
.
* Team upload.
* Vcs-Browser: Use https.
* Declare compliance with Debian Policy 3.9.6.
* Remove Onkar Shinde from Uploaders. He is not active anymore.
* Switch from cdbs to dh sequencer.
* Make the build reproducible by using SOURCE_DATE_EPOCH and the latest
changelog timestamp. Thanks to Dhole for the report and patch.
(Closes: #794248)
Checksums-Sha1:
06398a9bf54c8968c994ca94e6dfc734011e0bda 2142 cortado_0.6.0-3.dsc
04c05b208c3132621885a31e01e1f9b5c9104983 5760 cortado_0.6.0-3.debian.tar.xz
Checksums-Sha256:
1d8876993964009b162a0c2d3c3759bbda942955f71f2c5a25d26ae369158670 2142
cortado_0.6.0-3.dsc
dec3325c994936d33abc2d6cd3c144d3db373bb0165cdca6c471f9c8ed5a805f 5760
cortado_0.6.0-3.debian.tar.xz
Files:
412831006ea82203ca85e3473a57ff31 2142 utils optional cortado_0.6.0-3.dsc
80470807f1dff7363224e4a4efd15040 5760 utils optional
cortado_0.6.0-3.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=nBXU
-----END PGP SIGNATURE-----
--- End Message ---
__
This is the maintainer address of Debian's Java team
<http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-java-maintainers>.
Please use
[email protected] for discussions and questions.
