Your message dated Sun, 16 Jan 2022 09:48:40 +0000
with message-id <[email protected]>
and subject line Bug#1003809: fixed in pkg-js-tools 0.11.3
has caused the Debian Bug report #1003809,
regarding node-postcss: reproducible-builds: build path embedded in
pkgjs-lock.json
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1003809: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003809
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: node-postcss
Severity: normal
Tags: patch
User: [email protected]
Usertags: buildpath
X-Debbugs-Cc: [email protected]
The build path of is embedded in a pkgjs-lock.json file:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/node-postcss.html
/usr/share/nodejs/nanoid/pkgjs-lock.json
"/build/1st/node-postcss-8.4.5+~cs7.1.51":·{
vs.
"/build/2/node-postcss-8.4.5+~cs7.1.51/2nd":·{
The attached patch to debian/rules works around this by replacing the
build path with a package and version string in a dh_compress override.
The pkgjs-lock.json files appear to be generated from pkg-js-tools and
might be possible to fix there instead; I'm not sure why the other
pkgjs-lock.json files in node-postcss do not have embedded build paths.
With this patch applied, node-postcss should build reproducibly on
tests.reproducible-builds.org!
Thanks for maintaining node-postcss!
live well,
vagrant
From d91ed1d45facb624d5ac53a9271d0873686ee8c5 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <[email protected]>
Date: Sun, 16 Jan 2022 02:38:43 +0000
Subject: [PATCH] debian/rules: Remove the build path from pkgjs-lock.json
file.
The full build path is most likely not present on the end-user's
system, so replace it with PACKAGE-VERSION.
---
debian/rules | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/debian/rules b/debian/rules
index 31a1f14..2f6ba64 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,9 +1,16 @@
#!/usr/bin/make -f
# -*- makefile -*-
+include /usr/share/dpkg/pkg-info.mk
+
%:
dh $@
override_dh_fixperms:
dh_fixperms
chmod +x debian/node-postcss/usr/share/nodejs/nanoid/bin/nanoid.cjs
+
+override_dh_compress:
+ # Remove build path for reproducibility
+ sed -i -e "s,$(CURDIR),$(DEB_SOURCE)-$(DEB_VERSION_UPSTREAM),g" debian/node-postcss/usr/share/nodejs/nanoid/pkgjs-lock.json
+ dh_compress
--
2.30.2
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: pkg-js-tools
Source-Version: 0.11.3
Done: Yadd <[email protected]>
We believe that the bug you reported is fixed in the latest version of
pkg-js-tools, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yadd <[email protected]> (supplier of updated pkg-js-tools package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 16 Jan 2022 09:03:59 +0100
Source: pkg-js-tools
Architecture: source
Version: 0.11.3
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers
<[email protected]>
Changed-By: Yadd <[email protected]>
Closes: 1003809
Changes:
pkg-js-tools (0.11.3) unstable; urgency=medium
.
* autopkgtest: try "require" if "type=module" and "main" exists
* debhelper:
+ fix pkgjs-lock.json build for reproducibility (Closes: #1003809)
Checksums-Sha1:
9a98b896d9adddd4926dc234364aa9b78dc9b91c 2279 pkg-js-tools_0.11.3.dsc
c0f8073538c39f83d0b1928f4063ab1a280f138a 58168 pkg-js-tools_0.11.3.tar.xz
Checksums-Sha256:
19fd1e9a40f1bb70b7963e0d97963d008a7ede288e5a9072ed094779b2a18efe 2279
pkg-js-tools_0.11.3.dsc
8b21e8ccf8efdd090d68aa4fa47f2f0b191944f02424eabefeb62a55178e0458 58168
pkg-js-tools_0.11.3.tar.xz
Files:
ecd8f44e22e27f92d9f26c6ae2f19fe3 2279 devel optional pkg-js-tools_0.11.3.dsc
ccb0480dc68a385396d4470c4b559b30 58168 devel optional
pkg-js-tools_0.11.3.tar.xz
-----BEGIN PGP SIGNATURE-----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=rDI6
-----END PGP SIGNATURE-----
--- End Message ---
--
Pkg-javascript-devel mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-javascript-devel
