Source: pixmap
Version: 2.6pl4-18
Severity: wishlist
Tags: patch
Usertags: timestamps


While working on the “reproducible builds” effort [1], we have noticed
that pixmap could not be built reproducibly.

The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Please also consider this
other bug from the reproducible builds team:



diff -u pixmap-2.6pl4/debian/changelog pixmap-2.6pl4/debian/changelog
--- pixmap-2.6pl4/debian/changelog
+++ pixmap-2.6pl4/debian/changelog
@@ -1,3 +1,10 @@
+pixmap (2.6pl4-18.1) UNRELEASED; urgency=medium
+  * Non-maintainer upload.
+  * Fix mtimes before building binary packages to produce reproducible output
+ -- akira <>  Sat, 25 Jul 2015 13:45:36 +0200
 pixmap (2.6pl4-18) unstable; urgency=low
   * really handle nostrip build option now, thanks to patch from Cesare
diff -u pixmap-2.6pl4/debian/rules pixmap-2.6pl4/debian/rules
--- pixmap-2.6pl4/debian/rules
+++ pixmap-2.6pl4/debian/rules
@@ -22,6 +22,8 @@
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 
-SDate)" +%s)
 # Builds the binary package.
        rm -rf X11
@@ -89,6 +91,8 @@
        dpkg-gencontrol -isp
        chown -R root.root debian/tmp
        chmod -R g-ws debian/tmp
+       find debian/tmp -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \
+               xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH"
        dpkg --build debian/tmp ..
        rm -f clean

Attachment: signature.asc
Description: OpenPGP digital signature

Reproducible-builds mailing list

Reply via email to