Package: dpkg
Severity: serious
Version: 1.18.5
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

There are a number of packages in sid can't currently be unpacked with
the default dpkg-source options.

 dpkg-source: error: source package uses only weak checksums

This happens since dpkg 1.18.5, apparently

 
https://anonscm.debian.org/cgit/dpkg/dpkg.git/commit/?id=040973c7a1e50b78ef042ef5ffbfff0440c24700

  Error out on source packages without any strong digests in
  Dpkg::Source::Package, used by dpkg-source --extract, which can still
  be disabled with --no-check.

With about 2.5% of the archive test built on tests.reproducible-builds.org with 
a newer
dpkg, we've caught at least

apparix
apwal
asterisk-prompt-se
bbpager
bbtime
brag
btyacc
libclass-pluggable-perl
libcrypt-des-ede3-perl
libdatetime-format-db2-perl
libdbd-excel-perl
sgml-spell-checker

which would give a linear estimate of roughly 400 broken packages
in total.

A mass bug filing (at RC level) seems to be in order, but maybe dpkg
should just warn for a while until packages get fixed? I assume the
Debian buildds don't use --no-check, so binNMUs of affected packages
are probably broken at the moment?

Tentatively setting at 'serious' but feel free to adjust/close if this
is all going as designed.
-- 
Niko Tyni   nt...@debian.org

_______________________________________________
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

Reply via email to