Source: zipios++
Severity: wishlist
Tags: patch
Usertags: timestamps


While working on the “reproducible builds” effort [1], we have noticed
that zipios++ could not be built reproducibly since it suffers from
timestamps in manpages generated by doxygen [2].

The reproducible builds team is building packages using a version of
doxygen which has been patched to honour the environment variable
$SOURCE_DATE_EPOCH [3]. This results in doxygen using the last date in
debian/changelog as the timestamp for its man page output which causes
packages to become reproducible [4].

During our tests $SOURCE_DATE_EPOCH is exported by the debhelper from
our experimental git repository which we have patched such that packages
using dh (debhelper >= 9) in debian/rules become automatically reproducible.

This unfortunately does not make the package zipios++ reproducible
because it does not use dh in debian/rules but instead classic

There are two solutions for zipios++ :

1. To rewrite debian/rules to use dh
2. To implement the attached patch which exports $SOURCE_DATE_EPOCH in

Kind Regards,

diff -u zipios++- 
--- zipios++-
+++ zipios++-
@@ -1,3 +1,11 @@
+zipios++ ( UNRELEASED; urgency=medium
+  * Non-maintainer upload.
+  * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible
+    timestamps in manpage output
+ -- akira <>  Fri, 31 Jul 2015 14:14:33 +0200
 zipios++ ( unstable; urgency=low
   * Non-maintainer upload.
diff -u zipios++- 
--- zipios++-
+++ zipios++-
@@ -10,6 +10,8 @@
 DEB_HOST_GNU_TYPE   ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 
-SDate)" +%s)
 # Include dpatch stuff.
 include /usr/share/dpatch/dpatch.make

Attachment: signature.asc
Description: OpenPGP digital signature

Reproducible-builds mailing list

Reply via email to