Bug#813345: elastix: please fix patch to make the build reproducible (timestamps)
Source: elastix Version: 4.8-3 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that elastix could not be built reproducibly [2] because it is using the current date to replace the @ELASTIX_DOXYGEN_DATE@ variable [3]. It seems an unsuccessful attempt has been made to use SOURCE_DATE_EPOCH [4]. The patch has two problems: - The if statement instead of checking for the environment variable SOURCE_DATE_EPOCH it is checking for the cmake variable SOURCE_DATE_EPOCH. To check for the environment variable use $ENV{SOURCE_DATE_EPOCH} - Instead of directly saving the content of the environment variable SOURCE_DATE_EPOCH into ELASTIX_DOXYGEN_DATE, the value of the environment variable should be formated into a datetime string. Formating can be done as follows using GNU date: date -u -d $SOURCE_DATE_EPOCH '+%d-%m-%Y' A different approach to fixing the reproducibility problem is to instead of using the DoxygenFooter.html.in you could just have a DoxygenFooter.html and use the placeholder $datetime which is processed by Doxygen instead of using the @ELASTIX_DOXYGEN_DATE@ placeholder. Kind regards, akira [1]: https://wiki.debian.org/ReproducibleBuilds [2]: https://reproducible.debian.net/rb-pkg/unstable/amd64/elastix.html [3]: https://sources.debian.net/src/elastix/4.8-3/dox/doxygen/DoxygenFooter.html.in/ [4]: http://sources.debian.net/src/elastix/4.8-3/debian/patches/doxygen_use_epoch_for_data_if_given.patch/?hl=18#L18
Bug#806945: bash: Please make bash build reproducibly
Source: bash Version: 4.3-14 Severity: wishlist User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi, While working on the “reproducible builds” effort [1], we have noticed that bash could not be built reproducibly. There are two problems: 1. Bash uses an embedded copy of man2html which produces html that contains timestamps, it is recommended to drop this internal copy and instead depend on the Debian man2html which contains a patch [4]. 2. The pdf files created by dvipdfmx contain fonts with indeterministic order and naming [2]. This can be fixed by not generating the pdf in the first place as gnu codding standards makes pdf generation optional [3]. This has to be solved upstream. Regards, akira [1]: https://wiki.debian.org/ReproducibleBuilds [2]: https://reproducible.debian.net/issues/unstable/fonts_in_pdf_files_issue.html [3]: https://www.gnu.org/prep/standards/standards.html#Standard-Targets [4]: http://sources.debian.net/src/man2html/1.6g-8/debian/patches/035-source-date-epoch.patch/
Bug#800653: fftw: Using embedded code copy of texi2html leads to unreproducibility
Source: fftw Version: 2.1.5-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! fftw is using an embedded copy of texi2html which leads to unreproducible html output [1]. texi2html has been patched [2] to use SOURCE_DATE_EPOCH which allows the latest date in debian/changelog to be used when creating timestamps producing reproducible output. Is fftw willing to drop its embedded code copy and depend on texi2html? Or would you prefer to keep your embedded copy but add the necessary changes to produce reproducible output? In case the latter option is more favorable please use the patch in [2] to modify your code copy. cheers, akira [1] https://reproducible.debian.net/dbd/unstable/amd64/fftw_2.1.5-2.debbindiff.html [2] http://sources.debian.net/src/texi2html/1.82%2Bdfsg1-4/debian/patches/03_add_build-date_param.patch
Bug#796130: man2html: please use $SOURCE_DATE_EPOCH to produce reproducible output
Source: man2html Version: 1.6g-7 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the reproducible builds effort [1], we have noticed that man2html does not allow to build documentation reproducibly. The Debian reproducible builds team recently proposed a new environment variable $SOURCE_DATE_EPOCH to be used by packages to produce reproducible timestamps [2]. I propose the attached patch which makes man2html use the latest date in debian/changelog as the timestamp for its html output if $SOURCE_DATE_EPOCH is exported. Otherwise man2html will continue with its default behaviour of using the date of today to produce its timestamps. A version of man2html with this patch is currently being used in the reproducible builds git repository and it has been successful at making a package become reproducible. The version of man2html in my patch is the version that we have in the reproducible builds git repository. Kind Regards, akira [1] https://wiki.debian.org/ReproducibleBuilds [2] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal commit 4d334e23a95ba7f0804e326ef8094e750cf4ef7b Author: akira marival...@gmail.com Date: Sat Aug 15 14:35:00 2015 +0200 Use $SOURCE_DATE_EPOCH to produce reproducible output diff --git a/debian/changelog b/debian/changelog index 5c6a1b3..6b82ce4 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,11 @@ +man2html (1.6g-7.0~reproducible1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Apply patch Use-SOURCE-DATE-EPOCH to produce reproducible timestamps in +documentation + + -- akira marival...@gmail.com Fri, 14 Aug 2015 11:24:55 +0200 + man2html (1.6g-7) unstable; urgency=low * utils.c: Fix querystring2argv() to create argv in case man2html and diff --git a/debian/patches/Use-SOURCE-DATE-EPOCH b/debian/patches/Use-SOURCE-DATE-EPOCH new file mode 100644 index 000..b1dc420 --- /dev/null +++ b/debian/patches/Use-SOURCE-DATE-EPOCH @@ -0,0 +1,51 @@ +--- a/man2html/cgibase.c b/man2html/cgibase.c +@@ -8,6 +8,8 @@ + #include ctype.h /* tolower() */ + #include string.h /* strlen() */ + #include defs.h ++#include errno.h ++#include limits.h + + /* + * The default is to use cgibase. With relative html style +@@ -83,11 +85,39 @@ void print_sig() + char timebuf[TIMEBUFSZ]; + struct tm *timetm; + time_t now; ++char *source_date_epoch; ++unsigned long long epoch; ++char *endptr; + + timebuf[0] = 0; + #ifdef TIMEFORMAT + sprintf(timebuf, Time: ); ++source_date_epoch = getenv(SOURCE_DATE_EPOCH); ++if (source_date_epoch) { ++ errno = 0; ++ epoch = strtoull(source_date_epoch, endptr, 10); ++ if ((errno == ERANGE (epoch == ULLONG_MAX || epoch == 0)) ++|| (errno != 0 epoch == 0)) { ++ fprintf(stderr, Environment variable $SOURCE_DATE_EPOCH: strtoull: %s\n, strerror(errno)); ++ exit(EXIT_FAILURE); ++ } ++ if (endptr == source_date_epoch) { ++ fprintf(stderr, Environment variable $SOURCE_DATE_EPOCH: No digits were found: %s\n, endptr); ++ exit(EXIT_FAILURE); ++ } ++ if (*endptr != '\0') { ++ fprintf(stderr, Environment variable $SOURCE_DATE_EPOCH: Trailing garbage: %s\n, endptr); ++ exit(EXIT_FAILURE); ++ } ++ if (epoch ULONG_MAX) { ++ fprintf(stderr, Environment variable $SOURCE_DATE_EPOCH: value must be smaller than or equal to: %lu but was found to be: %llu \n, ULONG_MAX ,epoch); ++ exit(EXIT_FAILURE); ++ } ++ now=epoch; ++ } ++ else { + now=time(NULL); ++ } + timetm=gmtime(now); + strftime(timebuf+6, TIMEBUFSZ-6, TIMEFORMAT, timetm); + timebuf[TIMEBUFSZ-1] = 0; diff --git a/debian/patches/series b/debian/patches/series index d262411..dd48540 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -28,3 +28,4 @@ 032-man2html-man-remove-LO-tags.patch 033-gcc-warnings.patch 034-UTF8-charset.patch +Use-SOURCE-DATE-EPOCH signature.asc Description: OpenPGP digital signature
Bug#794955: gperf: Embedded code copy with missing copyright
Hi, On 08/08/2015 08:52 PM, Hilko Bengen wrote: Can you tell me a reliable source for that copyright information? I found that information on the debian/copyright of the Debian texi2html which I expect should be a reliable source. Thanks for the quick reply! akira signature.asc Description: OpenPGP digital signature
Bug#795056: maxima: Embedded code copy with missing copyright
Source: maxima Version: 5.36.1-1 Severity: serious Justification: Policy 4.5 User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi, Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of maxima and is thus a violation of policy §4.5. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. From that point of view there are two options: 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. The package would not become immediately reproducible with this solution though because it does not use dh in debian/rules but instead classic debhelper. Because of that $SOURCE_DATE_EPOCH has to be exported in debian/rules [3] 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/EmbeddedCodeCopies [3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal signature.asc Description: OpenPGP digital signature
Bug#795057: python-xlib: Embedded code copy with missing copyright
Source: python-xlib Version: 0.14+20091101-2 Severity: serious Justification: Policy 4.5 User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi, Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of python-xlib and is thus a violation of policy §4.5. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. From that point of view there are two options: 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. The package would not become immediately reproducible with this solution though because it does not use dh in debian/rules but instead classic debhelper. Because of that $SOURCE_DATE_EPOCH has to be exported in debian/rules [3] 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/EmbeddedCodeCopies [3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal signature.asc Description: OpenPGP digital signature
Bug#783475: texi2html: [PATCH] Allow make the build of documentation reproducible adding the use-date flag.
Hi, In addition to my last update to this bug I have now also patched texi2html to sort its hash values, which solves the issue randomness_in_html_generated_by_texi2html [1]. The attached debdiff fixes this an also includes the changes of the previous patches and is ready to be QA uploaded. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/RandomnessInHTMLGeneratedByTexi2html texi2html.debdiff Description: Binary data signature.asc Description: OpenPGP digital signature
Bug#794955: gperf: Embedded code copy with missing copyright
Source: gperf Version: 3.0.4-1 Severity: serious Justification: Policy 4.5 User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi, Your packages contains an embedded code copy of texi2html which is copyright Lionel Cons and others and is licensed under the GPL and Creative Commons Attribution-ShareAlike license. This information is missing from debian/copyright of gperf and is thus a violation of policy §4.5. I found this bug while working on the reproducible builds project [1] to make texi2html produce reproducible output. From that point of view there are two options: 1. remove the embedded code copy [2] and build-depend on texi2html (this would also make policy §4.13 happy). I would prefer this solution and would supply you with a patch if you want. Your package would then automatically become reproducible. 2. keep the embedded code copy and amend your debian/copyright. In this case I would open another bug so that your embedded copy of texi2html is patched to produce reproducible output. Kind regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/EmbeddedCodeCopies -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#783475: texi2html: [PATCH] Allow make the build of documentation reproducible adding the use-date flag.
Hi, On Sun, 17 May 2015 20:25:31 -0300 Juan Picca jumap...@gmail.com wrote: Modified patch after comments and advices of Jérémy Bobbio. The option was renamed to --build-date and now expects an unix time integer which is formatted using pretty_time instead of using a given string to show as timestamp. I have done two modifications to your patch: - Instead of letting the default for --build-date be undef (resulting in the date of today being printed) the default is now the values of the environment variable $SOURCE_DATE_EPOCH. - Explicitly check if variable is undef or otherwise SOURCE_DATE_EPOCH can never be set to 0 as this would then evaluate as false Kind regards, akira diff -u texi2html-1.82+dfsg1/debian/changelog texi2html-1.82+dfsg1/debian/changelog --- texi2html-1.82+dfsg1/debian/changelog +++ texi2html-1.82+dfsg1/debian/changelog @@ -1,3 +1,10 @@ +texi2html (1.82+dfsg1-3.0~reproducible1) UNRELEASED; urgency=medium + + * Add patch to honour $SOURCE_DATE_EPOCH and command line option +--build-date + + -- akira marival...@gmail.com Fri, 07 Aug 2015 18:07:18 +0200 + texi2html (1.82+dfsg1-3) unstable; urgency=low * QA upload. diff -u texi2html-1.82+dfsg1/debian/patches/series texi2html-1.82+dfsg1/debian/patches/series --- texi2html-1.82+dfsg1/debian/patches/series +++ texi2html-1.82+dfsg1/debian/patches/series @@ -2,0 +3 @@ +03_add_build-date_param.patch only in patch2: unchanged: --- texi2html-1.82+dfsg1.orig/debian/patches/03_add_build-date_param.patch +++ texi2html-1.82+dfsg1/debian/patches/03_add_build-date_param.patch @@ -0,0 +1,83 @@ +Description: Add --build-date command line flag. + Allow create reproducible documentation passing a unix time in the command + line. +Author: Juan Picca jumap...@gmail.com +Last-Update: 2015-05-16 +--- a/T2h_i18n.pm b/T2h_i18n.pm +@@ -295,7 +295,14 @@ sub pretty_date($) + my $lang = shift; + my($sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst); + +-($sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst) = localtime(time); ++if (defined $Texi2HTML::Config::BUILD_DATE) ++{ ++($sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst) = gmtime($Texi2HTML::Config::BUILD_DATE); ++} ++else ++{ ++($sec, $min, $hour, $mday, $mon, $year, $wday, $yday, $isdst) = localtime(time); ++} + $year += ($year 70) ? 2000 : 1900; + # obachman: Let's do it as the Americans do + #return($MONTH_NAMES-{$lang}[$mon] . , . $mday . . $year); +--- a/texi2html.init b/texi2html.init +@@ -260,6 +260,10 @@ $MONOLITHIC = 1; + # the specified url are used as stylesheet links + @CSS_REFS = (); + ++# -build-date ++# Use the given unix time as build date showing UTC timezone when it is used ++$BUILD_DATE = $ENV{'SOURCE_DATE_EPOCH'}; ++ + ## + # The following options are only relevant if $L2H is set + # +--- a/texi2html.pl b/texi2html.pl +@@ -261,6 +261,7 @@ $EXTERNAL_DIR + $IGNORE_PREAMBLE_TEXT + @CSS_FILES + @CSS_REFS ++$BUILD_DATE + $INLINE_CONTENTS + $INLINE_INSERTCOPYING + ); +@@ -2600,6 +2601,13 @@ $T2H_OPTIONS - {'css-ref'} = + verbose = 'generate reference to the CSS URL $s' + }; + ++$T2H_OPTIONS - {'build-date'} = ++{ ++ type = '=i', ++ linkage = \$Texi2HTML::Config::BUILD_DATE, ++ verbose = 'use the given unix time as build date showing UTC timezone when it is used' ++}; ++ + $T2H_OPTIONS - {'transliterate-file-names'} = + { + type = '!', +--- a/doc/texi2html.texi b/doc/texi2html.texi +@@ -523,6 +523,8 @@ Display a short help and exit. + Be verbose. + @item @longopt{version} + Display version information and exit. ++@item @longopt{build-date=@var{unixtime}} ++Use the given unix time as build date showing UTC timezone when it is used. + @end table + + @c +--- a/doc/texi2html.info b/doc/texi2html.info +@@ -435,6 +435,9 @@ Miscellaneous general options: + `--version' + Display version information and exit. + ++`--build-date=UNIXTIME' ++ Use the given unix time as build date showing UTC timezone when it is used. ++ + + File: texi2html.info, Node: Splitting output, Next: Output files, Prev: General options, Up: Invoking texi2html + signature.asc Description: OpenPGP digital signature
Bug#794740: camitk: please make the build reproducible (timestamps)
Source: camitk Version: 3.4.0-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that camitk could not be built reproducibly since it uses timestamps in its manpage output. The attached patch makes camitk use the environment variable $SOURCE_DATE_EPOCH [2], which was proposed by the Debian reproducible builds team as a way to still have timestamps in documentation but make them be reproducible. The value of the timestamp will be set to the latest entry in debian/changelog. Kind Regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal diff -Nru camitk-3.4.0/debian/changelog camitk-3.4.0/debian/changelog --- camitk-3.4.0/debian/changelog 2015-06-20 11:51:04.0 +0200 +++ camitk-3.4.0/debian/changelog 2015-08-04 13:20:50.0 +0200 @@ -1,3 +1,10 @@ +camitk (3.4.0-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Add patch to use SOURCE_DATE_EPOCH + + -- akira marival...@gmail.com Tue, 04 Aug 2015 13:20:28 +0200 + camitk (3.4.0-2) unstable; urgency=low * Fix cmake missing path to ITKConfig (patch force-path-to-itkconfig) diff -Nru camitk-3.4.0/debian/patches/series camitk-3.4.0/debian/patches/series --- camitk-3.4.0/debian/patches/series 2015-06-20 11:51:04.0 +0200 +++ camitk-3.4.0/debian/patches/series 2015-08-04 13:20:23.0 +0200 @@ -1,2 +1,3 @@ remove-doxygen-timestamp force-path-to-itkconfig +Use-SOURCE_DATE_EPOCH diff -Nru camitk-3.4.0/debian/patches/Use-SOURCE_DATE_EPOCH camitk-3.4.0/debian/patches/Use-SOURCE_DATE_EPOCH --- camitk-3.4.0/debian/patches/Use-SOURCE_DATE_EPOCH 1970-01-01 01:00:00.0 +0100 +++ camitk-3.4.0/debian/patches/Use-SOURCE_DATE_EPOCH 2015-08-05 11:15:42.0 +0200 @@ -0,0 +1,26 @@ +Description: Use SOURCE_DATE_EPOCH to produce reproducible timestamps in manpages + +--- a/sdk/cmake/modules/CamiTKConfig.cmake.in b/sdk/cmake/modules/CamiTKConfig.cmake.in +@@ -225,10 +225,17 @@ mark_as_advanced (CAMITK_CORE_LIB CAMITK + # additional unix system resources + if (UNIX) + # only possible on unix +-execute_process(COMMAND date +%Y-%m-%d +-OUTPUT_VARIABLE CURRENT_DATE +-OUTPUT_STRIP_TRAILING_WHITESPACE +-) ++if(DEFINED ENV{SOURCE_DATE_EPOCH}) ++execute_process(COMMAND date -u +%Y-%m-%d --date=@$ENV{SOURCE_DATE_EPOCH} ++OUTPUT_VARIABLE CURRENT_DATE ++OUTPUT_STRIP_TRAILING_WHITESPACE ++) ++else() ++execute_process(COMMAND date +%Y-%m-%d ++OUTPUT_VARIABLE CURRENT_DATE ++OUTPUT_STRIP_TRAILING_WHITESPACE ++) ++endif() + # Application man pages (always in section 1, this is an application...) + set(CAMITK_APPLICATION_MAN_INSTALL_DIR share/man/man1) + # Desktop file always in share/applications (freedesktop standard) signature.asc Description: OpenPGP digital signature
Bug#794745: doxygen: Building doxygen twice fails
Source: doxygen Version: 1.8.9.1-4 Severity: normal Hi, I built doxygen twice in a clean chroot, the first built was successful but the second built failed. I recorded the std error and std output information in the attached file. Kind regards, akira dpkg-buildpackage: source package doxygen dpkg-buildpackage: source version 1.8.9.1-4 dpkg-buildpackage: source distribution unstable dpkg-buildpackage: source changed by Matthias Klose d...@debian.org dpkg-source --before-build doxygen-1.8.9.1 dpkg-buildpackage: host architecture amd64 fakeroot debian/rules clean dh_testdir dh_testroot rm -f configure-stamp build-stamp install*stamp rm -rf qt tmake winbuild /usr/bin/make -C jquery clean make[1]: Entering directory '/tmp/doxygen-1.8.9.1/jquery' rm -f jquery-1.7.1-min.js jquery.ui-1.8.18.core-min.js jquery.ui-1.8.18.widget-min.js jquery.ui-1.8.18.mouse-min.js jquery.ui-1.8.18.resizable-min.js jquery.ba-1.3-hashchange-min.js jquery.scrollTo-1.4.2-min.js jquery.powertip-1.2.0-min.js jquery.js make[1]: Leaving directory '/tmp/doxygen-1.8.9.1/jquery' rm -f src/jquery_*.js [ ! -f Makefile ] || /usr/bin/make distclean make[1]: Entering directory '/tmp/doxygen-1.8.9.1' cd examples ; /usr/bin/make clean make[2]: Entering directory '/tmp/doxygen-1.8.9.1/examples' rm -rf class define enum file func page relates author \ par overload example include qtstyle jdstyle structcmd \ autolink tag restypedef afterdoc template tag group diagrams \ memgrp docstring pyexample mux manual dbusxml tclexample make[2]: Leaving directory '/tmp/doxygen-1.8.9.1/examples' cd doc ; /usr/bin/make clean make[2]: Entering directory '/tmp/doxygen-1.8.9.1/doc' rm -rf ../html ../latex *.bak make[2]: Leaving directory '/tmp/doxygen-1.8.9.1/doc' cd qtools ; /usr/bin/make clean make[2]: Entering directory '/tmp/doxygen-1.8.9.1/qtools' /usr/bin/make -f Makefile.qtoolsclean make[3]: Entering directory '/tmp/doxygen-1.8.9.1/qtools' rm -f ../objects/qtools/qbuffer.o ../objects/qtools/qcollection.o ../objects/qtools/qcstring.o ../objects/qtools/qdatastream.o ../objects/qtools/qdatetime.o ../objects/qtools/qdir.o ../objects/qtools/qfile.o ../objects/qtools/qfileinfo.o ../objects/qtools/qgarray.o ../objects/qtools/qgcache.o ../objects/qtools/qgdict.o ../objects/qtools/qglist.o ../objects/qtools/qglobal.o ../objects/qtools/qgstring.o ../objects/qtools/qgvector.o ../objects/qtools/qiodevice.o ../objects/qtools/qregexp.o ../objects/qtools/qstring.o ../objects/qtools/qtextstream.o ../objects/qtools/qtextcodec.o ../objects/qtools/qstringlist.o ../objects/qtools/qxml.o ../objects/qtools/qmap.o ../objects/qtools/qthread.o ../objects/qtools/qmutex.o ../objects/qtools/qutfcodec.o ../objects/qtools/qfile_unix.o ../objects/qtools/qdir_unix.o ../objects/qtools/qfileinfo_unix.o ../objects/qtools/qthread_unix.o ../objects/qtools/qmutex_unix.o ../objects/qtools/qwaitcondition_unix.o ../lib/libqtools.a rm -f *~ core make[3]: Leaving directory '/tmp/doxygen-1.8.9.1/qtools' make[2]: Leaving directory '/tmp/doxygen-1.8.9.1/qtools' cd src ; /usr/bin/make clean make[2]: Entering directory '/tmp/doxygen-1.8.9.1/src' /usr/bin/make -f Makefile.libdoxygen clean make[3]: Entering directory '/tmp/doxygen-1.8.9.1/src' rm -f ../objects/doxygen/arguments.o ../objects/doxygen/cite.o ../objects/doxygen/clangparser.o ../objects/doxygen/classdef.o ../objects/doxygen/classlist.o ../objects/doxygen/cmdmapper.o ../objects/doxygen/condparser.o ../objects/doxygen/context.o ../objects/doxygen/cppvalue.o ../objects/doxygen/dbusxmlscanner.o ../objects/doxygen/debug.o ../objects/doxygen/defgen.o ../objects/doxygen/define.o ../objects/doxygen/definition.o ../objects/doxygen/diagram.o ../objects/doxygen/dirdef.o ../objects/doxygen/docparser.o ../objects/doxygen/docsets.o ../objects/doxygen/dot.o ../objects/doxygen/doxygen.o ../objects/doxygen/eclipsehelp.o ../objects/doxygen/entry.o ../objects/doxygen/filedef.o ../objects/doxygen/filename.o ../objects/doxygen/fileparser.o ../objects/doxygen/formula.o ../objects/doxygen/ftextstream.o ../objects/doxygen/ftvhelp.o ../objects/doxygen/groupdef.o ../objects/doxygen/htags.o ../objects/doxygen/htmldocvisitor.o ../objects/doxygen/htmlgen.o ../objects/doxygen/htmlhelp.o ../ objects/doxygen/htmlentity.o ../objects/doxygen/image.o ../objects/doxygen/index.o ../objects/doxygen/language.o ../objects/doxygen/latexdocvisitor.o ../objects/doxygen/latexgen.o ../objects/doxygen/layout.o ../objects/doxygen/lodepng.o ../objects/doxygen/logos.o ../objects/doxygen/plantuml.o ../objects/doxygen/mandocvisitor.o ../objects/doxygen/mangen.o ../objects/doxygen/sqlite3gen.o ../objects/doxygen/markdown.o ../objects/doxygen/marshal.o ../objects/doxygen/memberdef.o ../objects/doxygen/membergroup.o ../objects/doxygen/memberlist.o ../objects/doxygen/membername.o ../objects/doxygen/message.o ../objects/doxygen/msc.o ../objects/doxygen/dia.o ../objects/doxygen/namespacedef.o
Bug#794096: squashfs-tools: please add --numeric-uid-gid to unsquashfs
On Mon, 3 Aug 2015 17:30:49 +0200 =?iso-8859-1?B?Suly6W15?= Bobbio lu...@debian.org wrote: Tiny nitpick: the option might now have the best name. `unsquashfs` currently supports `-l` = `-ls` and `-ll` = `-lls`. I guess the latter is far 'long ls'. Puting the 'n' in the middle of 'ls' seems a bit confusing. fixed in the attached patch Maybe the call to getpwuid() could be avoided entirely if numeric_ls is set? With the above this will look up the NSS database, and then ditch the result. This makes unecessary computations. thanks also fixed `- diff -Nru squashfs-tools-4.2+20130409/debian/changelog squashfs-tools-4.2+20130409/debian/changelog --- squashfs-tools-4.2+20130409/debian/changelog2013-09-18 10:22:27.0 +0200 +++ squashfs-tools-4.2+20130409/debian/changelog2015-08-03 16:15:27.0 +0200 @@ -1,3 +1,10 @@ +squashfs-tools (1:4.2+20130409-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Adding lns option to unsquashfs + + -- akira marival...@gmail.com Mon, 03 Aug 2015 16:12:14 +0200 + squashfs-tools (1:4.2+20130409-2) unstable; urgency=low * New maintainer (closes: #723600). diff -Nru squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.1 squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.1 --- squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.12013-05-09 22:22:49.0 +0200 +++ squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.12015-08-03 18:01:33.0 +0200 @@ -32,6 +32,8 @@ list filesystem, but don't unsquash. .IP \-ll, \-lls 4 list filesystem with file attributes (like ls \-l output), but don't unsquash. +.IP \-nl, \-nls 4 +list filesystem with file attributes (like ls \-n output), but don't unsquash. .IP \-f, \-force 4 if file already exists then overwrite. .IP \-s, \-stat 4 diff -Nru squashfs-tools-4.2+20130409/debian/patches/nousername squashfs-tools-4.2+20130409/debian/patches/nousername --- squashfs-tools-4.2+20130409/debian/patches/nousername 1970-01-01 01:00:00.0 +0100 +++ squashfs-tools-4.2+20130409/debian/patches/nousername 2015-08-03 18:01:40.0 +0200 @@ -0,0 +1,68 @@ +--- a/unsquashfs.c b/unsquashfs.c +@@ -62,7 +62,7 @@ char *file_data; + char *data; + unsigned int block_size; + unsigned int block_log; +-int lsonly = FALSE, info = FALSE, force = FALSE, short_ls = TRUE; ++int lsonly = FALSE, info = FALSE, force = FALSE, short_ls = TRUE, numeric_ls = FALSE; + int use_regex = FALSE; + char **created_inode; + int root_process; +@@ -482,8 +482,8 @@ int print_filename(char *pathname, struc + char str[11], dummy[12], dummy2[12]; /* overflow safe */ + char *userstr, *groupstr; + int padchars; +- struct passwd *user; +- struct group *group; ++ struct passwd *user = NULL; ++ struct group *group = NULL; + struct tm *t; + + if(short_ls) { +@@ -491,8 +491,9 @@ int print_filename(char *pathname, struc + return 1; + } + +- user = getpwuid(inode-uid); +- if(user == NULL) { ++ if(!numeric_ls) ++ user = getpwuid(inode-uid); ++ if(user == NULL || numeric_ls) { + int res = snprintf(dummy, 12, %d, inode-uid); + if(res 0) + EXIT_UNSQUASH(snprintf failed in print_filename()\n); +@@ -505,8 +506,9 @@ int print_filename(char *pathname, struc + } else + userstr = user-pw_name; + +- group = getgrgid(inode-gid); +- if(group == NULL) { ++ if(!numeric_ls) ++ group = getgrgid(inode-gid); ++ if(group == NULL || numeric_ls) { + int res = snprintf(dummy2, 12, %d, inode-gid); + if(res 0) + EXIT_UNSQUASH(snprintf failed in print_filename()\n); +@@ -2512,6 +2514,11 @@ int main(int argc, char *argv[]) + strcmp(argv[i], -ll) == 0) { + lsonly = TRUE; + short_ls = FALSE; ++ } else if(strcmp(argv[i], -nls) == 0 || ++ strcmp(argv[i], -nl) == 0) { ++ lsonly = TRUE; ++ short_ls = FALSE; ++ numeric_ls = TRUE; + } else if(strcmp(argv[i], -linfo) == 0 || + strcmp(argv[i], -li) == 0) { + info = TRUE; +@@ -2569,6 +2576,9 @@ options: + ERROR(\t-ll[s]\t\t\tlist filesystem with file + attributes (like\n); + ERROR(\t\t\t\tls -l output), but don't unsquash\n); ++ ERROR(\t-nl[s]\t\t\tlist filesystem with file ++ attributes (like\n); ++ ERROR(\t\t\t\tls -n output), but don't unsquash\n); + ERROR(\t-f[orce]\t\tif file already exists then + overwrite\n); +
Bug#794096: squashfs-tools: please add --numeric-uid-gid to unsquashfs
Control: tag -1 + patch Hi, On Thu, 30 Jul 2015 15:38:37 +0200 =?iso-8859-1?B?Suly6W15?= Bobbio lu...@debian.org wrote: Adding a `--numeric-uid-gid` (like cpio) or `--numeric-owner` (like Tar) option would be greatly appreciated. `- Attached patch fixes this by introducing a new option 'lns' which works like 'lls' but instead of working like 'ls -l' it works like 'ls -n'. Example output: $ unsquashfs -lns ~/testfile.squashfs Parallel unsquashfs: Using 4 processors 2 inodes (2 blocks) to write drwxr-xr-x 1000/100048 2015-08-03 14:53 squashfs-root -rw-r--r-- 1000/10005 2015-08-03 14:52 squashfs-root/testfile -rw-r--r-- 1000/10004 2015-08-03 14:53 squashfs-root/testfile2 Kind regards, akira diff -Nru squashfs-tools-4.2+20130409/debian/changelog squashfs-tools-4.2+20130409/debian/changelog --- squashfs-tools-4.2+20130409/debian/changelog2013-09-18 10:22:27.0 +0200 +++ squashfs-tools-4.2+20130409/debian/changelog2015-08-03 16:15:27.0 +0200 @@ -1,3 +1,10 @@ +squashfs-tools (1:4.2+20130409-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Adding lns option to unsquashfs + + -- akira marival...@gmail.com Mon, 03 Aug 2015 16:12:14 +0200 + squashfs-tools (1:4.2+20130409-2) unstable; urgency=low * New maintainer (closes: #723600). diff -Nru squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.1 squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.1 --- squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.12013-05-09 22:22:49.0 +0200 +++ squashfs-tools-4.2+20130409/debian/manpages/unsquashfs.12015-08-03 16:39:56.0 +0200 @@ -32,6 +32,8 @@ list filesystem, but don't unsquash. .IP \-ll, \-lls 4 list filesystem with file attributes (like ls \-l output), but don't unsquash. +.IP \-ln, \-lns 4 +list filesystem with file attributes (like ls \-n output), but don't unsquash. .IP \-f, \-force 4 if file already exists then overwrite. .IP \-s, \-stat 4 diff -Nru squashfs-tools-4.2+20130409/debian/patches/nousername squashfs-tools-4.2+20130409/debian/patches/nousername --- squashfs-tools-4.2+20130409/debian/patches/nousername 1970-01-01 01:00:00.0 +0100 +++ squashfs-tools-4.2+20130409/debian/patches/nousername 2015-08-03 17:11:11.0 +0200 @@ -0,0 +1,51 @@ +--- a/unsquashfs.c b/unsquashfs.c +@@ -62,7 +62,7 @@ char *file_data; + char *data; + unsigned int block_size; + unsigned int block_log; +-int lsonly = FALSE, info = FALSE, force = FALSE, short_ls = TRUE; ++int lsonly = FALSE, info = FALSE, force = FALSE, short_ls = TRUE, numeric_ls = FALSE; + int use_regex = FALSE; + char **created_inode; + int root_process; +@@ -492,7 +492,7 @@ int print_filename(char *pathname, struc + } + + user = getpwuid(inode-uid); +- if(user == NULL) { ++ if(user == NULL || numeric_ls) { + int res = snprintf(dummy, 12, %d, inode-uid); + if(res 0) + EXIT_UNSQUASH(snprintf failed in print_filename()\n); +@@ -506,7 +506,7 @@ int print_filename(char *pathname, struc + userstr = user-pw_name; + + group = getgrgid(inode-gid); +- if(group == NULL) { ++ if(group == NULL || numeric_ls) { + int res = snprintf(dummy2, 12, %d, inode-gid); + if(res 0) + EXIT_UNSQUASH(snprintf failed in print_filename()\n); +@@ -2512,6 +2512,11 @@ int main(int argc, char *argv[]) + strcmp(argv[i], -ll) == 0) { + lsonly = TRUE; + short_ls = FALSE; ++ } else if(strcmp(argv[i], -lns) == 0 || ++ strcmp(argv[i], -ln) == 0) { ++ lsonly = TRUE; ++ short_ls = FALSE; ++ numeric_ls = TRUE; + } else if(strcmp(argv[i], -linfo) == 0 || + strcmp(argv[i], -li) == 0) { + info = TRUE; +@@ -2569,6 +2574,9 @@ options: + ERROR(\t-ll[s]\t\t\tlist filesystem with file + attributes (like\n); + ERROR(\t\t\t\tls -l output), but don't unsquash\n); ++ ERROR(\t-ln[s]\t\t\tlist filesystem with file ++ attributes (like\n); ++ ERROR(\t\t\t\tls -n output), but don't unsquash\n); + ERROR(\t-f[orce]\t\tif file already exists then + overwrite\n); + ERROR(\t-s[tat]\t\t\tdisplay filesystem superblock diff -Nru squashfs-tools-4.2+20130409/debian/patches/series squashfs-tools-4.2+20130409/debian/patches/series --- squashfs-tools-4.2+20130409/debian/patches/series 2013-05-09 22:22:49.0 +0200 +++ squashfs-tools-4.2+20130409/debian/patches/series 2015-08-03 16:30:54.0 +0200
Bug#794239: zipios++: please make the build reproducible (timestamps)
Source: zipios++ Version: 0.1.5.9+cvs.2007.04.28-5.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that zipios++ could not be built reproducibly since it suffers from timestamps in manpages generated by doxygen [2]. The reproducible builds team is building packages using a version of doxygen which has been patched to honour the environment variable $SOURCE_DATE_EPOCH [3]. This results in doxygen using the last date in debian/changelog as the timestamp for its man page output which causes packages to become reproducible [4]. During our tests $SOURCE_DATE_EPOCH is exported by the debhelper from our experimental git repository which we have patched such that packages using dh (debhelper = 9) in debian/rules become automatically reproducible. This unfortunately does not make the package zipios++ reproducible because it does not use dh in debian/rules but instead classic debhelper. There are two solutions for zipios++ : 1. To rewrite debian/rules to use dh 2. To implement the attached patch which exports $SOURCE_DATE_EPOCH in debian/rules. Kind Regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2]https://reproducible.debian.net/issues/unstable/timestamps_in_manpages_generated_by_doxygen_issue.html [3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal [4] https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain#doxygen diff -u zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog --- zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog +++ zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog @@ -1,3 +1,11 @@ +zipios++ (0.1.5.9+cvs.2007.04.28-5.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible +timestamps in manpage output + + -- akira marival...@gmail.com Fri, 31 Jul 2015 14:14:33 +0200 + zipios++ (0.1.5.9+cvs.2007.04.28-5.1) unstable; urgency=low * Non-maintainer upload. diff -u zipios++-0.1.5.9+cvs.2007.04.28/debian/rules zipios++-0.1.5.9+cvs.2007.04.28/debian/rules --- zipios++-0.1.5.9+cvs.2007.04.28/debian/rules +++ zipios++-0.1.5.9+cvs.2007.04.28/debian/rules @@ -10,6 +10,8 @@ DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + # Include dpatch stuff. include /usr/share/dpatch/dpatch.make signature.asc Description: OpenPGP digital signature
Bug#794225: libsyncml: please make the build reproducible (timestamps)
Source: libsyncml Version: 0.5.4-2.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that libsyncml could not be built reproducibly since it suffers from timestamps in manpages generated by doxygen [2]. The reproducible builds team is building packages using a version of doxygen which has been patched to honour the environment variable $SOURCE_DATE_EPOCH [3]. This results in doxygen using the last date in debian/changelog as the timestamp for its man page output which causes packages to become reproducible [4]. During our tests $SOURCE_DATE_EPOCH is exported by the debhelper from our experimental git repository which we have patched such that packages using dh (debhelper = 9) in debian/rules become automatically reproducible. This unfortunately does not make the package libsyncml reproducible because it does not use dh in debian/rules but instead classic debhelper. There are two solutions for libsyncml: 1. To rewrite debian/rules to use dh 2. To implement the attached patch which exports $SOURCE_DATE_EPOCH in debian/rules. Kind Regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://reproducible.debian.net/issues/unstable/timestamps_in_manpages_generated_by_doxygen_issue.html [3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal [4] https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain#doxygen Cheers, akira diff -u libsyncml-0.5.4/debian/changelog libsyncml-0.5.4/debian/changelog --- libsyncml-0.5.4/debian/changelog +++ libsyncml-0.5.4/debian/changelog @@ -1,3 +1,11 @@ +libsyncml (0.5.4-2.3) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible +timestamps in manpage output + + -- akira marival...@gmail.com Fri, 31 Jul 2015 11:21:17 +0200 + libsyncml (0.5.4-2.2) unstable; urgency=medium * Non-maintainer upload. diff -u libsyncml-0.5.4/debian/rules libsyncml-0.5.4/debian/rules --- libsyncml-0.5.4/debian/rules +++ libsyncml-0.5.4/debian/rules @@ -11,6 +11,8 @@ DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + CFLAGS = -Wall -g ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) CFLAGS += -O0 signature.asc Description: OpenPGP digital signature
Bug#794241: cdbs: please export $SOURCE_DATE_EPOCH to produce reproducible output
Source: cdbs Version: 0.4.130 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! The Debian reproducible builds team [1] recently proposed a new environment variable $SOURCE_DATE_EPOCH to be used by packages to produce reproducible timestamps (for example in documentation) [2]. This environment variable is currently being exported by debhelper from our experimental git repository which we have patched such that packages using dh (debhelper = 9) in debian/rules become automatically reproducible. The patch to debhelper does not affect packages which use cdbs as their build system. Therefore I propose the attached patch which makes cdbs export $SOURCE_DATE_EPOCH. A version of cdbs with this patch is currently being used in the reproducible builds git repository and it has been successful at making a package become reproducible. This bug is in addition to this other bug from the reproducible builds team: https://bugs.debian.org/764478 Kind Regards, akira [1] https://wiki.debian.org/ReproducibleBuilds/About [2] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal diff --git a/1/rules/debhelper.mk.in b/1/rules/debhelper.mk.in index 2aec68d..7be6d72 100644 --- a/1/rules/debhelper.mk.in +++ b/1/rules/debhelper.mk.in @@ -75,6 +75,8 @@ # Completely override argument passing to dh_perl. +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + #PATH_RULES# ifndef _cdbs_rules_debhelper diff --git a/debian/changelog b/debian/changelog index be3a7ed..5b10c15 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,10 @@ +cdbs (0.4.130.0~reproducible3) UNRELEASED; urgency=medium + + * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible +output + + -- akira marival...@gmail.com Wed, 29 Jul 2015 16:07:07 +0200 + cdbs (0.4.130.0~reproducible2) UNRELEASED; urgency=medium * Remove call of dh_fixmtimes, which is now part of dh_builddeb. signature.asc Description: OpenPGP digital signature
Bug#785624: Timestamps in manpages generated makes builds non-reproducible
Hello, On Wed, 1 Jul 2015 03:39:11 -0300 Juan Picca jumap...@gmail.com wrote: Ximin: Thanks for point me to the timestamps proposal page. I modified the patch according it. I made a patch for doxygen that works by setting the timestamp through $SOURCE_DATE_EPOCH and this patch applies to the HTML, LaTeX, and Man page output at the same time. I had already forwarded this patch to doxygen upstream before seeing yours Upstream patch and discussion: https://bugzilla.gnome.org/show_bug.cgi?id=751984 Doxygen upstream already fixed this in their git. The timezone is still a problem but I have made a fix which is in the reproducible builds git repository and upstream was notified. See above link. Kind Regards, akira signature.asc Description: OpenPGP digital signature
Bug#793701: markdown: please make the mtimes reproducible
Source: markdown Version: 1.0.1-7 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that markdown could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u markdown-1.0.1/debian/rules markdown-1.0.1/debian/rules --- markdown-1.0.1/debian/rules +++ markdown-1.0.1/debian/rules @@ -2,6 +2,8 @@ binary: binary-indep +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + binary-arch: binary-indep: @@ -26,6 +28,8 @@ install -d debian/tmp/DEBIAN dpkg-gencontrol -isp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg-deb --build debian/tmp .. build: build-indep diff -u markdown-1.0.1/debian/changelog markdown-1.0.1/debian/changelog --- markdown-1.0.1/debian/changelog +++ markdown-1.0.1/debian/changelog @@ -1,3 +1,10 @@ +markdown (1.0.1-7.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 13:01:18 +0200 + markdown (1.0.1-7) unstable; urgency=low * Add a Homepage field. signature.asc Description: OpenPGP digital signature
Bug#793724: ssmtp: please make the mtimes reproducible
Source: ssmtp Version: 2.64-8 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ssmtp could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777398 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru ssmtp-2.64/debian/changelog ssmtp-2.64/debian/changelog --- ssmtp-2.64/debian/changelog 2014-07-15 02:49:35.0 +0200 +++ ssmtp-2.64/debian/changelog 2015-07-26 10:31:10.0 +0200 @@ -1,3 +1,10 @@ +ssmtp (2.64-8.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:30:50 +0200 + ssmtp (2.64-8) unstable; urgency=medium * Fix Partial loss of message body, sending message to wrong recipicients. diff -Nru ssmtp-2.64/debian/rules ssmtp-2.64/debian/rules --- ssmtp-2.64/debian/rules 2014-04-11 19:44:32.0 +0200 +++ ssmtp-2.64/debian/rules 2015-07-26 10:30:43.0 +0200 @@ -12,6 +12,8 @@ CC=gcc CFLAGS+=-O2 -g -Wall +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + do_cfg: test -f Makefile || ./configure --exec-prefix=/usr --prefix= --enable-ssl --enable-inet6 --enable-md5auth --with-cflags=$(CFLAGS) @@ -75,7 +77,8 @@ install -d -m 755 debian/tmp/usr/share/lintian/overrides/ install -m 644 debian/ssmtp.lintian debian/tmp/usr/share/lintian/overrides/ssmtp - + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. binary-indep: signature.asc Description: OpenPGP digital signature
Bug#793723: socklog: please make the mtimes reproducible
Source: socklog Version: 2.1.0-8 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that socklog could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777419 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u socklog-2.1.0/debian/changelog socklog-2.1.0/debian/changelog --- socklog-2.1.0/debian/changelog +++ socklog-2.1.0/debian/changelog @@ -1,3 +1,10 @@ +socklog (2.1.0-8.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:21:24 +0200 + socklog (2.1.0-8) unstable; urgency=low * debian/diff/socklog-conf-update-service.diff: new; refer to diff -u socklog-2.1.0/debian/rules socklog-2.1.0/debian/rules --- socklog-2.1.0/debian/rules +++ socklog-2.1.0/debian/rules @@ -15,6 +15,8 @@ DIR =$(shell pwd)/debian/socklog +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: deb-checkdir build-arch-stamp build-indep-stamp build-arch: deb-checkdir build-arch-stamp @@ -91,10 +93,14 @@ test '$(CC)' != 'gcc' || \ dpkg-shlibdeps '$(DIR)'/usr/bin/* '$(DIR)'/usr/sbin/* dpkg-gencontrol -isp -psocklog -P'$(DIR)' + find '$(DIR)' -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg -b '$(DIR)' .. binary-indep: deb-checkdir deb-checkuid install-indep socklog-run.deb dpkg-gencontrol -isp -psocklog-run -P'$(DIR)'-run + find '$(DIR)'-run -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg -b '$(DIR)'-run .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793722: slrnface: please make the mtimes reproducible
Source: slrnface Version: 2.1.1-6 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that slrnface could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777425 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u slrnface-2.1.1/debian/changelog slrnface-2.1.1/debian/changelog --- slrnface-2.1.1/debian/changelog +++ slrnface-2.1.1/debian/changelog @@ -1,3 +1,10 @@ +slrnface (2.1.1-6.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:07:08 +0200 + slrnface (2.1.1-6) unstable; urgency=low * Applied patch from Jasen which fixes a segfault (closes: #423479) diff -u slrnface-2.1.1/debian/rules slrnface-2.1.1/debian/rules --- slrnface-2.1.1/debian/rules +++ slrnface-2.1.1/debian/rules @@ -21,6 +21,7 @@ STRIP = true endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) clean: $(checkdir) @@ -76,6 +77,8 @@ -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(TMP) .. signature.asc Description: OpenPGP digital signature
Bug#793725: supercat: please make the mtimes reproducible
Source: supercat Version: 0.5.5-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that supercat could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777396 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru supercat-0.5.5/debian/changelog supercat-0.5.5/debian/changelog --- supercat-0.5.5/debian/changelog 2009-12-17 04:02:04.0 +0100 +++ supercat-0.5.5/debian/changelog 2015-07-26 10:37:56.0 +0200 @@ -1,3 +1,10 @@ +supercat (0.5.5-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:37:46 +0200 + supercat (0.5.5-4) unstable; urgency=low * debian/rules, debian/control: diff -Nru supercat-0.5.5/debian/rules supercat-0.5.5/debian/rules --- supercat-0.5.5/debian/rules 2009-12-17 04:02:04.0 +0100 +++ supercat-0.5.5/debian/rules 2015-07-26 10:37:40.0 +0200 @@ -4,6 +4,8 @@ DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + # Package name PACKAGE_NAME = supercat @@ -95,6 +97,8 @@ cd $(PACKAGE_DIR) ls etc/$(PACKAGE_NAME)/*|sed 's|^|/|' DEBIAN/conffiles cd $(PACKAGE_DIR) find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums dpkg-gencontrol -p$(PACKAGE_NAME) -P$(PACKAGE_DIR) + find $(PACKAGE_DIR) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg-deb --build $(PACKAGE_DIR) .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793704: mimefilter: please make the mtimes reproducible
Source: mimefilter Version: 1.7+nmu1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that mimefilter could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777486 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru mimefilter-1.7+nmu1/debian/changelog mimefilter-1.7+nmu2/debian/changelog --- mimefilter-1.7+nmu1/debian/changelog2012-05-17 11:24:33.0 +0200 +++ mimefilter-1.7+nmu2/debian/changelog2015-07-24 14:04:18.0 +0200 @@ -1,3 +1,10 @@ +mimefilter (1.7+nmu2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 14:02:41 +0200 + mimefilter (1.7+nmu1) unstable; urgency=low * Non-maintainer upload. diff -Nru mimefilter-1.7+nmu1/debian/rules mimefilter-1.7+nmu2/debian/rules --- mimefilter-1.7+nmu1/debian/rules2012-05-17 11:24:33.0 +0200 +++ mimefilter-1.7+nmu2/debian/rules2015-07-24 14:02:36.0 +0200 @@ -35,6 +35,8 @@ DFILES := debian/README debian/conffiles debian/copyright \ debian/preinst debian/postinst debian/prerm debian/postrm +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + # WARNING: debian/rules SHOULD NOT be in $(DFILES), for Debian policy # (it's CVS registered), lest it will be deleted by clean. # Beside, it's automatically remade by make @@ -99,6 +101,8 @@ dpkg-gencontrol -isp chown -R root.root $(tmp) chmod -R go=rX $(tmp) + find $(tmp) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(tmp) .. checkdir = test -f debian/rules signature.asc Description: OpenPGP digital signature
Bug#793700: mailto: please make the mtimes reproducible
Source: mailto Version: 1.3.2-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that mailto could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777413 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u mailto-1.3.2/debian/rules mailto-1.3.2/debian/rules --- mailto-1.3.2/debian/rules +++ mailto-1.3.2/debian/rules @@ -23,6 +23,8 @@ version = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + CFLAGS = -O2 -Wall ifneq (,$(findstring debug,$(DEB_BUILD_OPTIONS))) @@ -81,6 +83,8 @@ # # dpkg-shlibdeps debian/tmp/usr/lib/cgi-bin/mailto dpkg-gencontrol -isp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. binary: binary-indep binary-arch diff -u mailto-1.3.2/debian/changelog mailto-1.3.2/debian/changelog --- mailto-1.3.2/debian/changelog +++ mailto-1.3.2/debian/changelog @@ -1,3 +1,10 @@ +mailto (1.3.2-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 12:50:48 +0200 + mailto (1.3.2-3) unstable; urgency=low * Disable included version of getline() since it is unused and produce signature.asc Description: OpenPGP digital signature
Bug#793702: ldapvi: please make the mtimes reproducible
Source: ldapvi Version: 1.7-9 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ldapvi could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777490 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u ldapvi-1.7/debian/changelog ldapvi-1.7/debian/changelog --- ldapvi-1.7/debian/changelog +++ ldapvi-1.7/debian/changelog @@ -1,3 +1,10 @@ +ldapvi (1.7-9.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 10:21:59 +0200 + ldapvi (1.7-9) unstable; urgency=low * Use fileencoding instead of encoding in vim modeline which makes recent diff -u ldapvi-1.7/debian/rules ldapvi-1.7/debian/rules --- ldapvi-1.7/debian/rules +++ ldapvi-1.7/debian/rules @@ -10,6 +10,7 @@ # from having to guess our platform (since we know it already) DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) CFLAGS = -Wall -g INSTALL = install @@ -109,6 +110,8 @@ -p$(PKG) -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(TMP) .. signature.asc Description: OpenPGP digital signature
Bug#793719: sendfile: please make the mtimes reproducible
Source: sendfile Version: 2.1b.20080616-5.3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that sendfile could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776938 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u sendfile-2.1b.20080616/debian/changelog sendfile-2.1b.20080616/debian/changelog --- sendfile-2.1b.20080616/debian/changelog +++ sendfile-2.1b.20080616/debian/changelog @@ -1,3 +1,10 @@ +sendfile (2.1b.20080616-5.4) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 15:21:43 +0200 + sendfile (2.1b.20080616-5.3) unstable; urgency=low * Non-maintainer upload. diff -u sendfile-2.1b.20080616/debian/rules sendfile-2.1b.20080616/debian/rules --- sendfile-2.1b.20080616/debian/rules +++ sendfile-2.1b.20080616/debian/rules @@ -31,6 +31,8 @@ STRIP = -s endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: cp -f /usr/share/misc/config.sub develop/ cp -f /usr/share/misc/config.guess develop/ @@ -119,6 +121,8 @@ # dpkg-shlibdeps debian/tmp/usr/bin/{sendfile,receive,sendmsg,utf7encode,fetchfile,wlock} dpkg-gencontrol -isp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793720: sgmltools-lite: please make the mtimes reproducible
Source: sgmltools-lite Version: 3.0.3.0.cvs.20010909-17 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that sgmltools-lite could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777011 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u sgmltools-lite-3.0.3.0.cvs.20010909/debian/rules sgmltools-lite-3.0.3.0.cvs.20010909/debian/rules --- sgmltools-lite-3.0.3.0.cvs.20010909/debian/rules +++ sgmltools-lite-3.0.3.0.cvs.20010909/debian/rules @@ -9,6 +9,8 @@ PKGMANDIR=$(PKGDIR)/usr/share/man/$(PKG) DBIMAGEDIR=usr/share/sgml/docbook/stylesheet/dsssl/modular/images/ +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + configure: configure-stamp configure-stamp: sh debian/common/checkdir.sh @@ -141,6 +143,8 @@ dpkg-gencontrol -isp -P$(PKGDIR) (cd $(PKGDIR) /dev/null find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums) if [ -z $(PKGDIR)/DEBIAN/md5sums ]; then rm -f $(PKGDIR)/DEBIAN/md5sums; else chmod 644 $(PKGDIR)/DEBIAN/md5sums; chown 0.0 $(PKGDIR)/DEBIAN/md5sums; fi + find $(PKGDIR) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(PKGDIR) ../ diff -u sgmltools-lite-3.0.3.0.cvs.20010909/debian/changelog sgmltools-lite-3.0.3.0.cvs.20010909/debian/changelog --- sgmltools-lite-3.0.3.0.cvs.20010909/debian/changelog +++ sgmltools-lite-3.0.3.0.cvs.20010909/debian/changelog @@ -1,3 +1,10 @@ +sgmltools-lite (3.0.3.0.cvs.20010909-18) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 09:43:37 +0200 + sgmltools-lite (3.0.3.0.cvs.20010909-17) unstable; urgency=low * QA upload. signature.asc Description: OpenPGP digital signature
Bug#793718: sauce: please make the mtimes reproducible
Source: sauce Version: 0.9.0+nmu3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that sauce could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777401 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru sauce-0.9.0+nmu3/debian/changelog sauce-0.9.0+nmu4/debian/changelog --- sauce-0.9.0+nmu3/debian/changelog 2013-10-31 11:42:03.0 +0100 +++ sauce-0.9.0+nmu4/debian/changelog 2015-07-25 15:18:55.0 +0200 @@ -1,3 +1,10 @@ +sauce (0.9.0+nmu4) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 15:18:46 +0200 + sauce (0.9.0+nmu3) unstable; urgency=low * Non-maintainer upload. diff -Nru sauce-0.9.0+nmu3/debian/rules sauce-0.9.0+nmu4/debian/rules --- sauce-0.9.0+nmu3/debian/rules 2008-03-08 17:29:36.0 +0100 +++ sauce-0.9.0+nmu4/debian/rules 2015-07-25 15:18:44.0 +0200 @@ -24,6 +24,8 @@ revision=$(shell dpkg-parsechangelog | sed -n 's/^Version:.*-//p') verext=-$(revision)deb +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build-indep: $(checkdir) rm -f settings @@ -75,6 +77,8 @@ chown -R mail.root debian/tmp/var/{lib,log}/sauce debian/tmp/etc/sauce/* chown root.root debian/tmp/etc/sauce/sys-config chmod -R u+w,go-ws,a+rX debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. define checkdir signature.asc Description: OpenPGP digital signature
Bug#793714: rockdodger: please make the mtimes reproducible
Source: rockdodger Version: 1.0.0-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that rockdodger could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru rockdodger-1.0.0/debian/changelog rockdodger-1.0.0/debian/changelog --- rockdodger-1.0.0/debian/changelog 2015-06-07 18:58:57.0 +0200 +++ rockdodger-1.0.0/debian/changelog 2015-07-25 14:25:48.0 +0200 @@ -1,3 +1,10 @@ +rockdodger (1.0.0-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 14:25:38 +0200 + rockdodger (1.0.0-2) unstable; urgency=low * Fixed reproducible builds, closes: #778205, thanks to Chris Lamb. diff -Nru rockdodger-1.0.0/debian/rules rockdodger-1.0.0/debian/rules --- rockdodger-1.0.0/debian/rules 2015-06-07 18:49:12.0 +0200 +++ rockdodger-1.0.0/debian/rules 2015-07-25 14:25:36.0 +0200 @@ -10,6 +10,8 @@ MOREOPTS = $(CPPFLAGS) $(CFLAGS) -Wall -Werror export MOREOPTS +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + clean: $(testdir) rm -f build-stamp debian/files debian/substvars @@ -62,6 +64,8 @@ dpkg-shlibdeps debian/tmp/usr/games/rockdodger dpkg-gencontrol -isp -prockdodger + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. binary-indep: signature.asc Description: OpenPGP digital signature
Bug#793717: rungetty: please make the mtimes reproducible
Source: rungetty Version: 1.2-15 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that rungetty could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777447 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u rungetty-1.2/debian/rules rungetty-1.2/debian/rules --- rungetty-1.2/debian/rules +++ rungetty-1.2/debian/rules @@ -25,6 +25,7 @@ STRIP = true endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) include /usr/share/quilt/quilt.make @@ -84,6 +85,8 @@ -p$(PKG) -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(TMP) .. diff -u rungetty-1.2/debian/changelog rungetty-1.2/debian/changelog --- rungetty-1.2/debian/changelog +++ rungetty-1.2/debian/changelog @@ -1,3 +1,10 @@ +rungetty (1.2-15.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 15:15:25 +0200 + rungetty (1.2-15) unstable; urgency=high * Using patch in the proper place to make sure building does happen after signature.asc Description: OpenPGP digital signature
Bug#793695: libtnt: please make the mtimes reproducible
Source: libtnt Version: 1.2.6-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that libtnt could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777428 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u libtnt-1.2.6/debian/changelog libtnt-1.2.6/debian/changelog --- libtnt-1.2.6/debian/changelog +++ libtnt-1.2.6/debian/changelog @@ -1,3 +1,10 @@ +libtnt (1.2.6-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 11:15:13 +0200 + libtnt (1.2.6-1) unstable; urgency=low * New upstream release. diff -u libtnt-1.2.6/debian/rules libtnt-1.2.6/debian/rules --- libtnt-1.2.6/debian/rules +++ libtnt-1.2.6/debian/rules @@ -4,6 +4,8 @@ binary: binary-arch binary-indep +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + binary-indep: build $(checkdir) -rm -rf debian/tmp @@ -23,6 +25,8 @@ chmod 644 debian/tmp/usr/share/doc/libtnt-dev/html-tnt.tar.gz dpkg-gencontrol -isp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. build: signature.asc Description: OpenPGP digital signature
Bug#793694: leave: please make the mtimes reproducible
Source: leave Version: 1.12-2.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that leave could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777403 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u leave-1.12/debian/rules leave-1.12/debian/rules --- leave-1.12/debian/rules +++ leave-1.12/debian/rules @@ -10,6 +10,8 @@ stripflag=-s endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + leave: leave.c cc -g $(optflag) -Wall -D__COPYRIGHT\(x\)= -D__RCSID\(x\)= leave.c -o leave # used to have 'pmake CFLAGS=... leave' here, but why? @@ -35,6 +37,8 @@ dpkg-gencontrol -isp -P$(tmp) chown -R root.root $(tmp) chmod -R g-ws $(tmp) + find $(tmp) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(tmp) .. binary-indep: diff -u leave-1.12/debian/changelog leave-1.12/debian/changelog --- leave-1.12/debian/changelog +++ leave-1.12/debian/changelog @@ -1,3 +1,10 @@ +leave (1.12-2.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 10:28:03 +0200 + leave (1.12-2.1) unstable; urgency=low * Non-maintainer upload. signature.asc Description: OpenPGP digital signature
Bug#793696: joe: please make the mtimes reproducible
Source: joe Version: 3.7-2.4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that joe could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/26 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u joe-3.7/debian/changelog joe-3.7/debian/changelog --- joe-3.7/debian/changelog +++ joe-3.7/debian/changelog @@ -1,3 +1,11 @@ +joe (3.7-4) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Thu, 23 Jul 2015 10:05:04 +0200 + joe (3.7-2.4) unstable; urgency=low * Non-maintainer upload. diff -u joe-3.7/debian/rules joe-3.7/debian/rules --- joe-3.7/debian/rules +++ joe-3.7/debian/rules @@ -8,6 +8,8 @@ CFLAGS += -O2 endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: config.status joe config.status: configure @@ -59,6 +61,8 @@ dpkg-gencontrol -P$(tmp) -isp chown -R root.root $(tmp) chmod -R go=rX,u+rw,a-s $(tmp) + find $(tmp) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg-deb --build $(tmp) .. checkroot: debian/rules signature.asc Description: OpenPGP digital signature
Bug#793698: magicfilter: please make the mtimes reproducible
Source: magicfilter Version: 1.2-64 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that magicfilter could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777448 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru magicfilter-1.2/debian/changelog magicfilter-1.2/debian/changelog --- magicfilter-1.2/debian/changelog2011-09-17 05:40:00.0 +0200 +++ magicfilter-1.2/debian/changelog2015-07-24 11:43:07.0 +0200 @@ -1,3 +1,10 @@ +magicfilter (1.2-64.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 11:40:34 +0200 + magicfilter (1.2-64) unstable; urgency=low * debian/rules: Use -Os, *not* -0s. Tks Matthias Klose. Closes: #625174. diff -Nru magicfilter-1.2/debian/rules magicfilter-1.2/debian/rules --- magicfilter-1.2/debian/rules2011-09-17 05:09:14.0 +0200 +++ magicfilter-1.2/debian/rules2015-07-24 14:12:35.0 +0200 @@ -12,6 +12,8 @@ CFLAGS = -Wall -g LDFLAGS= +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + ifneq (,$(filter noopt,$(DEB_BUILD_OPTIONS))) CFLAGS += -O0 else @@ -75,6 +77,8 @@ chmod 644 $(tmp)/DEBIAN/conffiles chown -R root.root $(tmp) chmod -R g-ws,og=rX $(tmp) + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(tmp) .. chmod a+r debian/files signature.asc Description: OpenPGP digital signature
Bug#793699: mailfront: please make the mtimes reproducible
Source: mailfront Version: 1.16-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that mailfront could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777431 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u mailfront-1.16/debian/changelog mailfront-1.16/debian/changelog --- mailfront-1.16/debian/changelog +++ mailfront-1.16/debian/changelog @@ -1,3 +1,10 @@ +mailfront (1.16-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 12:13:18 +0200 + mailfront (1.16-1) unstable; urgency=low * new upstream version. diff -u mailfront-1.16/debian/rules mailfront-1.16/debian/rules --- mailfront-1.16/debian/rules +++ mailfront-1.16/debian/rules @@ -10,6 +10,8 @@ DIR =$(shell pwd)/debian/mailfront +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + patch: deb-checkdir patch-stamp patch-stamp: for i in `ls -1 debian/diff/*.diff || :`; do \ @@ -89,6 +91,8 @@ binary-arch: deb-checkdir deb-checkuid install-stamp mailfront.deb dpkg-shlibdeps '$(DIR)'/usr/sbin/* dpkg-gencontrol -isp -pmailfront -P'$(DIR)' + find '$(DIR)' -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg -b '$(DIR)' .. .PHONY: patch configure build clean install binary-indep binary-arch binary signature.asc Description: OpenPGP digital signature
Bug#793697: lpe: please make the mtimes reproducible
Source: lpe Version: 1.2.7-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that lpe could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/778197 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru lpe-1.2.7/debian/changelog lpe-1.2.7/debian/changelog --- lpe-1.2.7/debian/changelog 2014-12-24 20:37:25.0 +0100 +++ lpe-1.2.7/debian/changelog 2015-07-24 11:23:27.0 +0200 @@ -1,3 +1,10 @@ +lpe (1.2.7-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 11:23:16 +0200 + lpe (1.2.7-2) unstable; urgency=medium * Fix an off-by-1 buffer overflow. (closes: #773818) diff -Nru lpe-1.2.7/debian/rules lpe-1.2.7/debian/rules --- lpe-1.2.7/debian/rules 2014-06-23 21:41:06.0 +0200 +++ lpe-1.2.7/debian/rules 2015-07-24 11:23:13.0 +0200 @@ -13,6 +13,8 @@ DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + default: build config: config-stamp @@ -97,6 +99,8 @@ cd ${PKGDIR} /dev/null ;\ find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums ## Build the binary package + find ${PKGDIR} -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build ${PKGDIR} .. binary-indep: signature.asc Description: OpenPGP digital signature
Bug#793716: rsbackup: please make the mtimes reproducible
Source: rsbackup Version: 1.1-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that rsbackup could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777394 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u rsbackup-1.1/debian/changelog rsbackup-1.1/debian/changelog --- rsbackup-1.1/debian/changelog +++ rsbackup-1.1/debian/changelog @@ -1,3 +1,10 @@ +rsbackup (1.1-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 14:31:43 +0200 + rsbackup (1.1-4) unstable; urgency=low * Patch from Jonathan Wiltshire to use install rather than cp for diff -u rsbackup-1.1/debian/rules rsbackup-1.1/debian/rules --- rsbackup-1.1/debian/rules +++ rsbackup-1.1/debian/rules @@ -25,6 +25,8 @@ export CFLAGS CPPFLAGS CXXFLAGS LDFLAGS +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build-arch: build build-indep: build build: @@ -76,6 +78,8 @@ -Tdebian/substvars.rsbackup chown -R root:root debian/${PACKAGE} chmod -R g-ws debian/${PACKAGE} + find debian/${PACKAGE} -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/${PACKAGE} .. binary: binary-arch binary-indep signature.asc Description: OpenPGP digital signature
Bug#793713: rbootd: please make the mtimes reproducible
Source: rbootd Version: 2.0-10 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that rbootd could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776951 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u rbootd-2.0/debian/changelog rbootd-2.0/debian/changelog --- rbootd-2.0/debian/changelog +++ rbootd-2.0/debian/changelog @@ -1,3 +1,10 @@ +rbootd (2.0-10.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 14:12:03 +0200 + rbootd (2.0-10) unstable; urgency=low * New-Maintainer upload (closes: Bug#465907) diff -u rbootd-2.0/debian/rules rbootd-2.0/debian/rules --- rbootd-2.0/debian/rules +++ rbootd-2.0/debian/rules @@ -25,6 +25,8 @@ export BASEDIR=$(shell pwd)/debian/tmp +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + ## Note must use the special makefile to avoid needing BSD make build: @@ -83,6 +85,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R go-ws debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. define checkdir signature.asc Description: OpenPGP digital signature
Bug#793727: tetradraw: please make the mtimes reproducible
Source: tetradraw Version: 2.0.3-8.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that tetradraw could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777426 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u tetradraw-2.0.3/debian/rules tetradraw-2.0.3/debian/rules --- tetradraw-2.0.3/debian/rules +++ tetradraw-2.0.3/debian/rules @@ -13,6 +13,8 @@ INSTALL_SCRIPT = $(INSTALL) -p-oroot -groot -m755 INSTALL_DIR = $(INSTALL) -p -d -oroot -groot -m755 +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) CFLAGS += -O0 else @@ -108,6 +110,8 @@ -p$(PKG) -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(TMP) .. diff -u tetradraw-2.0.3/debian/changelog tetradraw-2.0.3/debian/changelog --- tetradraw-2.0.3/debian/changelog +++ tetradraw-2.0.3/debian/changelog @@ -1,3 +1,10 @@ +tetradraw (2.0.3-8.3) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:47:27 +0200 + tetradraw (2.0.3-8.2) unstable; urgency=low * Non-maintainer upload. signature.asc Description: OpenPGP digital signature
Bug#793721: signify: please make the mtimes reproducible
Source: signify Version: 1.14-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that signify could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777062 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru signify-1.14/debian/changelog signify-1.14/debian/changelog --- signify-1.14/debian/changelog 2004-05-05 14:03:52.0 +0200 +++ signify-1.14/debian/changelog 2015-07-26 09:56:44.0 +0200 @@ -1,3 +1,10 @@ +signify (1.14-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 09:53:45 +0200 + signify (1.14-1) unstable; urgency=low * improved handling of existing signify process diff -Nru signify-1.14/debian/rules signify-1.14/debian/rules --- signify-1.14/debian/rules 2004-01-18 05:56:26.0 +0100 +++ signify-1.14/debian/rules 2015-07-26 09:53:43.0 +0200 @@ -6,7 +6,7 @@ package:= signify - +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) default: @echo What to do? @@ -52,6 +52,8 @@ chown -R root.root debian/tmp chmod -R go=rX debian/tmp dpkg-gencontrol -is -ip + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp dpkg-name -o -s .. debian/tmp.deb signature.asc Description: OpenPGP digital signature
Bug#793728: the: please make the mtimes reproducible
Source: the Version: 3.3~rc1-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that the could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777370 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru the-3.3~rc1/debian/changelog the-3.3~rc1/debian/changelog --- the-3.3~rc1/debian/changelog2012-06-30 18:11:25.0 +0200 +++ the-3.3~rc1/debian/changelog2015-07-26 11:22:52.0 +0200 @@ -1,3 +1,10 @@ +the (3.3~rc1-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 11:22:39 +0200 + the (3.3~rc1-2) unstable; urgency=low * Fixed debian/rules build target. diff -Nru the-3.3~rc1/debian/rules the-3.3~rc1/debian/rules --- the-3.3~rc1/debian/rules2012-06-30 18:11:01.0 +0200 +++ the-3.3~rc1/debian/rules2015-07-26 11:22:35.0 +0200 @@ -8,6 +8,7 @@ CFLAGS:=$(shell dpkg-buildflags --get CFLAGS) $(CPPFLAGS) CXXFLAGS:=$(shell dpkg-buildflags --get CXXFLAGS) $(CPPFLAGS) LDFLAGS:=$(shell dpkg-buildflags --get LDFLAGS) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) build: build-arch build-indep build-arch: stamp-build @@ -61,6 +62,8 @@ chmod -R go=rX debian/tmp-doc chmod 755 debian/md5_sums debian/md5_sums tmp-doc + find debian/tmp-doc -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp-doc .. binary-arch: checkroot build @@ -91,6 +94,8 @@ chmod -R go=rX debian/tmp* chmod 755 debian/md5_sums debian/md5_sums tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. define checkdir signature.asc Description: OpenPGP digital signature
Bug#793729: tinydyndns: please make the mtimes reproducible
Source: tinydyndns Version: 0.4.2.debian1-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that tinydyndns could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776929 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u tinydyndns-0.4.2.debian1/debian/changelog tinydyndns-0.4.2.debian1/debian/changelog --- tinydyndns-0.4.2.debian1/debian/changelog +++ tinydyndns-0.4.2.debian1/debian/changelog @@ -1,3 +1,10 @@ +tinydyndns (0.4.2.debian1-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 11:42:30 +0200 + tinydyndns (0.4.2.debian1-1) unstable; urgency=low * new upstream debian version. diff -u tinydyndns-0.4.2.debian1/debian/rules tinydyndns-0.4.2.debian1/debian/rules --- tinydyndns-0.4.2.debian1/debian/rules +++ tinydyndns-0.4.2.debian1/debian/rules @@ -7,6 +7,8 @@ DIR=$(shell pwd)/debian/tinydyndns +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + patch: deb-checkdir patch-stamp patch-stamp: for i in `ls -1 debian/diff/*.diff || :`; do \ @@ -56,6 +58,8 @@ binary-arch: install tinydyndns.deb dpkg-shlibdeps '$(DIR)'/usr/bin/* dpkg-gencontrol -isp -ptinydyndns -P'$(DIR)' + find '$(DIR)' -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg -b '$(DIR)' .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793730: trscripts: please make the mtimes reproducible
Source: trscripts Version: 1.16 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that trscripts could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776927 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru trscripts-1.16/debian/changelog trscripts-1.16+nmu1/debian/changelog --- trscripts-1.16/debian/changelog 2009-05-02 12:56:35.0 +0200 +++ trscripts-1.16+nmu1/debian/changelog2015-07-26 19:19:58.0 +0200 @@ -1,3 +1,10 @@ +trscripts (1.16+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 19:19:40 +0200 + trscripts (1.16) unstable; urgency=low * Use question mark as DEFAULT_CHAR diff -Nru trscripts-1.16/debian/rules trscripts-1.16+nmu1/debian/rules --- trscripts-1.16/debian/rules 2009-05-02 12:51:28.0 +0200 +++ trscripts-1.16+nmu1/debian/rules2015-07-26 19:19:38.0 +0200 @@ -22,6 +22,8 @@ package=trscripts +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: $(checkdir) $(MAKE) @@ -57,6 +59,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R go=rX,u=rwX debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. define checkdir signature.asc Description: OpenPGP digital signature
Bug#793726: taggrepper: please make the mtimes reproducible
Source: taggrepper Version: 0.05-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that taggrepper could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/25 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru taggrepper-0.05/debian/changelog taggrepper-0.05/debian/changelog --- taggrepper-0.05/debian/changelog2013-06-23 15:50:31.0 +0200 +++ taggrepper-0.05/debian/changelog2015-07-26 10:42:29.0 +0200 @@ -1,3 +1,10 @@ +taggrepper (0.05-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 26 Jul 2015 10:42:19 +0200 + taggrepper (0.05-1) unstable; urgency=low * Update autoconf files diff -Nru taggrepper-0.05/debian/rules taggrepper-0.05/debian/rules --- taggrepper-0.05/debian/rules2013-06-23 15:48:35.0 +0200 +++ taggrepper-0.05/debian/rules2015-07-26 10:42:16.0 +0200 @@ -8,6 +8,8 @@ DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + # Package name PACKAGE_NAME = taggrepper @@ -97,6 +99,8 @@ $(INSTALL_DIR) $(PACKAGE_DIR)/DEBIAN cd $(PACKAGE_DIR) find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums dpkg-gencontrol -p$(PACKAGE_NAME) -P$(PACKAGE_DIR) + find $(PACKAGE_DIR) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg-deb --build $(PACKAGE_DIR) .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793731: netmaze: please make the mtimes reproducible
Source: netmaze Version: 0.81+jpg0.82-14.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that netmaze could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/778200 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u netmaze-0.81+jpg0.82/debian/changelog netmaze-0.81+jpg0.82/debian/changelog --- netmaze-0.81+jpg0.82/debian/changelog +++ netmaze-0.81+jpg0.82/debian/changelog @@ -1,3 +1,10 @@ +netmaze (0.81+jpg0.82-14.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 14:42:41 +0200 + netmaze (0.81+jpg0.82-14.1) unstable; urgency=low * Non-maintainer upload. diff -u netmaze-0.81+jpg0.82/debian/rules netmaze-0.81+jpg0.82/debian/rules --- netmaze-0.81+jpg0.82/debian/rules +++ netmaze-0.81+jpg0.82/debian/rules @@ -22,6 +22,7 @@ OPTLEVEL=-O3 endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) build: xmkmf @@ -64,6 +65,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R go-ws,go+r debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. clean: signature.asc Description: OpenPGP digital signature
Bug#793712: ratfor: please make the mtimes reproducible
Source: ratfor Version: 1.0-15 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ratfor could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/778204 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuild diff -u ratfor-1.0/debian/changelog ratfor-1.0/debian/changelog --- ratfor-1.0/debian/changelog +++ ratfor-1.0/debian/changelog @@ -1,3 +1,10 @@ +ratfor (1.0-15.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 14:06:22 +0200 + ratfor (1.0-15) unstable; urgency=low * Fix bashism in debian/rules (closes: bug#535417) -- Alan Bain af...@debian.org Thu, 30 Jul 2009 21:13:02 +0100 diff -u ratfor-1.0/debian/rules ratfor-1.0/debian/rules --- ratfor-1.0/debian/rules +++ ratfor-1.0/debian/rules @@ -23,7 +23,7 @@ INSTALL_PROGRAM += -s endif - +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) build: $(checkdir) @@ -77,6 +77,8 @@ dh_md5sums --tmpdir=debian/tmp chown -R root.root debian/tmp chmod -R go-ws debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. define checkdir signature.asc Description: OpenPGP digital signature
Bug#793710: postfix-gld: please make the mtimes reproducible
Source: postfix-gld Version: 1.7-6 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that postfix-gld could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777504 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru postfix-gld-1.7/debian/changelog postfix-gld-1.7/debian/changelog --- postfix-gld-1.7/debian/changelog2014-10-02 13:17:07.0 +0200 +++ postfix-gld-1.7/debian/changelog2015-07-25 13:50:51.0 +0200 @@ -1,3 +1,10 @@ +postfix-gld (1.7-6.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 13:50:37 +0200 + postfix-gld (1.7-6) unstable; urgency=medium * Pass hardening options in CPPFLAGS and LDFLAGS to gcc. diff -Nru postfix-gld-1.7/debian/rules postfix-gld-1.7/debian/rules --- postfix-gld-1.7/debian/rules2014-10-01 17:38:47.0 +0200 +++ postfix-gld-1.7/debian/rules2015-07-25 13:50:31.0 +0200 @@ -14,6 +14,8 @@ STRIP = strip --remove-section=.comment --remove-section=.note endif +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: ./configure --prefix=/usr --with-$(DATABASE) $(MAKE) CFLAGS=$(CFLAGS) CPPFLAGS=$(CPPFLAGS) LDFLAGS=$(LDFLAGS) @@ -58,6 +60,8 @@ dpkg-gencontrol chown -R 0:0 debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793711: qmail-run: please make the mtimes reproducible
Source: qmail-run Version: 2.0.2+nmu1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that qmail-run could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776952 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru qmail-run-2.0.2+nmu1/debian/changelog qmail-run-2.0.2+nmu2/debian/changelog --- qmail-run-2.0.2+nmu1/debian/changelog 2015-02-23 23:53:09.0 +0100 +++ qmail-run-2.0.2+nmu2/debian/changelog 2015-07-25 13:56:28.0 +0200 @@ -1,3 +1,10 @@ +qmail-run (2.0.2+nmu2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 13:56:17 +0200 + qmail-run (2.0.2+nmu1) unstable; urgency=medium * Non-maintainer upload with maintainer approval. diff -Nru qmail-run-2.0.2+nmu1/debian/rules qmail-run-2.0.2+nmu2/debian/rules --- qmail-run-2.0.2+nmu1/debian/rules 2015-02-20 09:31:37.0 +0100 +++ qmail-run-2.0.2+nmu2/debian/rules 2015-07-25 13:56:15.0 +0200 @@ -2,6 +2,8 @@ DIR=$(shell pwd)/debian/qmail-run +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: deb-checkdir build-stamp build-stamp: touch build-stamp @@ -36,6 +38,8 @@ binary-indep: install qmail-run.deb dpkg-gencontrol -isp -pqmail-run -P'$(DIR)' + find '$(DIR)' -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg -b '$(DIR)' .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793709: pixmap: please make the mtimes reproducible
Source: pixmap Version: 2.6pl4-18 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that pixmap could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777430 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u pixmap-2.6pl4/debian/changelog pixmap-2.6pl4/debian/changelog --- pixmap-2.6pl4/debian/changelog +++ pixmap-2.6pl4/debian/changelog @@ -1,3 +1,10 @@ +pixmap (2.6pl4-18.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sat, 25 Jul 2015 13:45:36 +0200 + pixmap (2.6pl4-18) unstable; urgency=low * really handle nostrip build option now, thanks to patch from Cesare diff -u pixmap-2.6pl4/debian/rules pixmap-2.6pl4/debian/rules --- pixmap-2.6pl4/debian/rules +++ pixmap-2.6pl4/debian/rules @@ -22,6 +22,8 @@ package=$(p) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: # Builds the binary package. rm -rf X11 @@ -89,6 +91,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp .. rm -f clean signature.asc Description: OpenPGP digital signature
Bug#793708: nitpic: please make the mtimes reproducible
Source: nitpic Version: 0.1-15 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that nitpic could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777492 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u nitpic-0.1/debian/changelog nitpic-0.1/debian/changelog --- nitpic-0.1/debian/changelog +++ nitpic-0.1/debian/changelog @@ -1,3 +1,10 @@ +nitpic (0.1-16) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 15:12:07 +0200 + nitpic (0.1-15) unstable; urgency=medium * QA upload. diff -u nitpic-0.1/debian/rules nitpic-0.1/debian/rules --- nitpic-0.1/debian/rules +++ nitpic-0.1/debian/rules @@ -9,6 +9,8 @@ Makefile: Imakefile xmkmf +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + build: build-arch build-indep: build-arch: checkdir Makefile @@ -61,6 +63,8 @@ endif dpkg-shlibdeps $(d)/usr/bin/* dpkg-gencontrol -isp -p$(package) -P$(d) + find $(d) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(d) .. binary:binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793706: mpack: please make the mtimes reproducible
Source: mpack Version: 1.6-8 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that mpack could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/777376 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru mpack-1.6/debian/changelog mpack-1.6/debian/changelog --- mpack-1.6/debian/changelog 2012-06-10 01:02:11.0 +0200 +++ mpack-1.6/debian/changelog 2015-07-24 14:29:58.0 +0200 @@ -1,3 +1,10 @@ +mpack (1.6-8.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 14:29:09 +0200 + mpack (1.6-8) unstable; urgency=low * CVE-2011-4919 - Fix permissions diff -Nru mpack-1.6/debian/rules mpack-1.6/debian/rules --- mpack-1.6/debian/rules 2012-06-10 01:00:43.0 +0200 +++ mpack-1.6/debian/rules 2015-07-24 14:29:06.0 +0200 @@ -14,6 +14,8 @@ export DEB_HOST ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) export DEB_BUILD ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) + #export DEB_BUILD_MAINT_OPTIONS = hardening=+all DPKG_EXPORT_BUILDFLAGS = 1 include /usr/share/dpkg/buildflags.mk @@ -65,6 +67,8 @@ install -d ${DEBDIR} dpkg-shlibdeps ${BINDIR}/* dpkg-gencontrol -isp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg-deb -Zbzip2 -z9 --build debian/tmp .. binary: binary-indep binary-arch signature.asc Description: OpenPGP digital signature
Bug#793707: netris: please make the mtimes reproducible
Source: netris Version: 0.52-9 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that netris could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/778201 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u netris-0.52/debian/changelog netris-0.52/debian/changelog --- netris-0.52/debian/changelog +++ netris-0.52/debian/changelog @@ -1,3 +1,10 @@ +netris (0.52-9.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 14:54:07 +0200 + netris (0.52-9) unstable; urgency=low * Add Vcs-* fields. diff -u netris-0.52/debian/rules netris-0.52/debian/rules --- netris-0.52/debian/rules +++ netris-0.52/debian/rules @@ -27,7 +27,7 @@ MAKEFLAGS += -j$(NUMJOBS) endif - +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) include /usr/share/quilt/quilt.make @@ -95,6 +95,8 @@ -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build $(TMP) .. signature.asc Description: OpenPGP digital signature
Bug#793705: mime-support: please make the mtimes reproducible
Source: mime-support Version: 3.58 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that mime-support could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Please also consider this other bug from the reproducible builds team: https://bugs.debian.org/776939 Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru mime-support-3.58/debian/changelog mime-support-3.58+nmu1/debian/changelog --- mime-support-3.58/debian/changelog 2014-12-28 07:06:43.0 +0100 +++ mime-support-3.58+nmu1/debian/changelog 2015-07-24 13:11:57.0 +0200 @@ -1,3 +1,10 @@ +mime-support (3.58+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 24 Jul 2015 13:11:46 +0200 + mime-support (3.58) unstable; urgency=high * CVE-2014-7209: run-mailcap shell command injection. diff -Nru mime-support-3.58/debian/rules mime-support-3.58+nmu1/debian/rules --- mime-support-3.58/debian/rules 2014-12-28 07:06:43.0 +0100 +++ mime-support-3.58+nmu1/debian/rules 2015-07-24 13:11:43.0 +0200 @@ -6,6 +6,7 @@ package:= mime-support +export SOURCE_DATE_EPOCH = $(shell date -d $$(dpkg-parsechangelog --count 1 -SDate) +%s) default: @echo Build 'binary' or 'clean'? @@ -71,6 +72,8 @@ dpkg-gencontrol -is -ip chown -R root.root debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt @$$SOURCE_DATE_EPOCH -print0 | \ + xargs -0r touch --no-dereference --date=@$$SOURCE_DATE_EPOCH dpkg --build debian/tmp dpkg-name -o -s .. debian/tmp.deb signature.asc Description: OpenPGP digital signature
Bug#792998: chiark-utils: please make the build reproducible
Hi, On 07/20/2015 02:49 PM, Ian Jackson wrote: Oh god, another one of these (I'm referring to #792945). Thank you, and once again, I apologise. In the meantime, FTR, I would be happy with an NMU. Sorry for the late reply. I will do an NMU this weekend for both packages =). Cheers, akira -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Bug#792988: xbs: please make the build reproducible
Hi, On Mon, 20 Jul 2015 13:30:41 +0100 Matthew Vernon matt...@debian.org wrote: I think this isn't the correct answer, and in fact the thing to do is add -p to the cp and install calls, to preserve timestamps? I tried to build xbs using the -p option as you suggested, and while files become reproducible, the directories are still unreproducible as you can see in the attached debbindiff. Kind Regards, akira --- ../test1/xbs_0-11_amd64.deb +++ ../test2/xbs_0-11_amd64.deb ├── control.tar.gz │ ├── control.tar │ │ ├── metadata │ │ │ @@ -1,2 +1,2 @@ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:33 ./ │ │ │ --rw-r--r-- root/root491 2015-07-21 11:06:33 ./control │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./ │ │ │ +-rw-r--r-- root/root491 2015-07-21 11:06:35 ./control │ │ ╵ │ ╵ ├── data.tar.xz │ ├── data.tar │ │ ├── metadata │ │ │ @@ -1,19 +1,19 @@ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/bin/ │ │ │ --rwxr-xr-x root/root 104904 2015-07-21 11:06:32 ./usr/bin/xbs │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/doc/ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/doc/xbs/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/bin/ │ │ │ +-rwxr-xr-x root/root 104904 2015-07-21 11:06:35 ./usr/bin/xbs │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/doc/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/doc/xbs/ │ │ │ -rw-r--r-- root/root123 2015-03-07 23:56:19 ./usr/share/doc/xbs/README.debian │ │ │ -rw-r--r-- root/root 1147 2015-07-20 20:30:05 ./usr/share/doc/xbs/changelog.Debian.gz │ │ │ -rw-r--r-- root/root231 2015-03-07 23:56:19 ./usr/share/doc/xbs/changelog.gz │ │ │ -rw-r--r-- root/root468 2015-03-07 23:56:19 ./usr/share/doc/xbs/copyright │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/doc/xbs/examples/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/doc/xbs/examples/ │ │ │ -rw-r--r-- root/root290 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/README.examples │ │ │ -rw-r--r-- root/root 1598 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/alfa.bs │ │ │ -rw-r--r-- root/root 7806 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/bi2201.bs │ │ │ -rw-r--r-- root/root 3257 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/c60.bs │ │ │ -rw-r--r-- root/root695 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/ch4.bs │ │ │ -rw-r--r-- root/root 2056 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/gray.bs │ │ │ -rw-r--r-- root/root 4238 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/grpht.bs │ │ │ @@ -24,10 +24,10 @@ │ │ │ -rw-r--r-- root/root 3360 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/ring.bs │ │ │ -rw-r--r-- root/root 122505 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/ring.mv │ │ │ -rwxr-xr-x root/root211 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/runex │ │ │ -rw-r--r-- root/root 2255 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/serp.bs │ │ │ -rw-r--r-- root/root 42380 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/serp.mv │ │ │ -rw-r--r-- root/root 3015 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/stb.bs │ │ │ -rw-r--r-- root/root 1336 2015-03-07 23:56:19 ./usr/share/doc/xbs/examples/tic.bs │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/man/ │ │ │ --rwxr-xr-x root/root 0 2015-07-21 11:06:32 ./usr/share/man/man1/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/man/ │ │ │ +-rwxr-xr-x root/root 0 2015-07-21 11:06:35 ./usr/share/man/man1/ │ │ │ -rw-r--r-- root/root 3626 2015-03-07 23:56:19 ./usr/share/man/man1/xbs.1.gz │ │ ╵ │ ╵ ├── metadata │ @@ -1,3 +1,3 @@ │ rw-r--r-- 0/0 4 Jul 20 20:29 2015 debian-binary │ rw-r--r-- 0/0459 Jul 20 20:29 2015 control.tar.gz │ -rw-r--r-- 0/0 83656 Jul 20 20:29 2015 data.tar.xz │ +rw-r--r-- 0/0 83776 Jul 20 20:29 2015 data.tar.xz ╵
Bug#792943: argus-client: please make the build reproducible
Source: argus-client Version: 2.0.6.fixes.1-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that argus-client could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u argus-client-2.0.6.fixes.1/debian/rules argus-client-2.0.6.fixes.1/debian/rules --- argus-client-2.0.6.fixes.1/debian/rules +++ argus-client-2.0.6.fixes.1/debian/rules @@ -16,6 +16,8 @@ OLDSUB=./config/config.sub OLDGUESS=./config/config.guess +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + ifneq (,$(findstring noopt,$(DEB_BUILD_OPTIONS))) CFLAGS += -O0 else @@ -185,6 +187,8 @@ dpkg-shlibdeps $(tmp)/$(bindir)/* dpkg-gencontrol -ips -p$(PACKAGE) -P$(tmp) + find $(tmp) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(tmp) .. diff -u argus-client-2.0.6.fixes.1/debian/changelog argus-client-2.0.6.fixes.1/debian/changelog --- argus-client-2.0.6.fixes.1/debian/changelog +++ argus-client-2.0.6.fixes.1/debian/changelog @@ -1,3 +1,10 @@ +argus-client (2.0.6.fixes.1-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 23:26:49 +0200 + argus-client (2.0.6.fixes.1-3) unstable; urgency=low * Applied patch from Xavier Renaut to make ragraph generate PNG graphs
Bug#792945: authbind : please make the build reproducible
Source: authbind Version: 3.0.3.5 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that authbind could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru authbind-2.1.1/debian/changelog authbind-2.1.1+nmu1/debian/changelog --- authbind-2.1.1/debian/changelog 2012-06-11 00:17:19.0 +0200 +++ authbind-2.1.1+nmu1/debian/changelog2015-07-15 23:42:10.0 +0200 @@ -1,3 +1,10 @@ +authbind (2.1.1+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 23:40:51 +0200 + authbind (2.1.1) unstable; urgency=low * Manpage has an example of which files will be checked and read diff -Nru authbind-2.1.1/debian/rules authbind-2.1.1+nmu1/debian/rules --- authbind-2.1.1/debian/rules 2012-06-03 02:45:04.0 +0200 +++ authbind-2.1.1+nmu1/debian/rules2015-07-15 23:37:33.0 +0200 @@ -29,6 +29,8 @@ arch = $(shell dpkg --print-architecture) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + INSTALL = install INSTALL_FILE= $(INSTALL) -p-o root -g root -m 644 INSTALL_PROGRAM = $(INSTALL) -p-o root -g root -m 755 @@ -90,6 +92,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
Bug#792944: authbind : please make the build reproducible
Source: authbind Version: 3.0.3.5 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that authbind could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru authbind-2.1.1/debian/changelog authbind-2.1.1+nmu1/debian/changelog --- authbind-2.1.1/debian/changelog 2012-06-11 00:17:19.0 +0200 +++ authbind-2.1.1+nmu1/debian/changelog2015-07-15 23:42:10.0 +0200 @@ -1,3 +1,10 @@ +authbind (2.1.1+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 23:40:51 +0200 + authbind (2.1.1) unstable; urgency=low * Manpage has an example of which files will be checked and read diff -Nru authbind-2.1.1/debian/rules authbind-2.1.1+nmu1/debian/rules --- authbind-2.1.1/debian/rules 2012-06-03 02:45:04.0 +0200 +++ authbind-2.1.1+nmu1/debian/rules2015-07-15 23:37:33.0 +0200 @@ -29,6 +29,8 @@ arch = $(shell dpkg --print-architecture) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + INSTALL = install INSTALL_FILE= $(INSTALL) -p-o root -g root -m 644 INSTALL_PROGRAM = $(INSTALL) -p-o root -g root -m 755 @@ -90,6 +92,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
Bug#792983: gerstensaft: please make the build reproducible
Source: gerstensaft Version: 0.3-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that gerstensaft could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u gerstensaft-0.3/debian/rules gerstensaft-0.3/debian/rules --- gerstensaft-0.3/debian/rules +++ gerstensaft-0.3/debian/rules @@ -17,6 +17,8 @@ # SHELL=/bin/bash +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + # The name and version of the source # source = $(shell grep ^Source: debian/control|head -1|sed 's/Source: \(.*\)/\1/g') @@ -85,6 +87,8 @@ # dpkg-shlibdeps debian/tmp/usr/bin/beer dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch diff -u gerstensaft-0.3/debian/changelog gerstensaft-0.3/debian/changelog --- gerstensaft-0.3/debian/changelog +++ gerstensaft-0.3/debian/changelog @@ -1,3 +1,10 @@ +gerstensaft (0.3-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 13:59:51 +0200 + gerstensaft (0.3-4) unstable; urgency=low * Properly separate homepage
Bug#792984: integrit: please make the build reproducible
Source: integrit Version: 4.1-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that integrit could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u integrit-4.1/debian/changelog integrit-4.1/debian/changelog --- integrit-4.1/debian/changelog +++ integrit-4.1/debian/changelog @@ -1,3 +1,10 @@ +integrit (4.1-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 14:26:24 +0200 + integrit (4.1-1) unstable; urgency=low * new upstream release. diff -u integrit-4.1/debian/rules integrit-4.1/debian/rules --- integrit-4.1/debian/rules +++ integrit-4.1/debian/rules @@ -7,6 +7,7 @@ DEB_HOST_GNU_TYPE ?=$(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?=$(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) DEB_HOST_ARCH ?=$(shell dpkg-architecture -qDEB_HOST_ARCH) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) DIET_ARCHS =alpha amd64 arm hppa i386 ia64 mips mipsel powerpc ppc64 s390 sparc ifeq (,$(findstring $(DEB_HOST_ARCH),$(DIET_ARCHS))) @@ -101,6 +102,8 @@ binary-arch: deb-checkdir deb-checkuid install integrit.deb dpkg-gencontrol -isp -pintegrit -P'$(DIR)' + find '$(DIR)' -newermt '$(BUILD_DATE)' -print0 | \ +xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)' .. binary: binary-indep binary-arch
Bug#792986: uruk: please make the build reproducible
Source: uruk Version:20150401-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that uruk could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Once applied, uruk can be built reproducibly in our current experimental framework. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru uruk-20150401/debian/changelog uruk-20150401/debian/changelog --- uruk-20150401/debian/changelog 2015-05-12 21:21:41.0 +0200 +++ uruk-20150401/debian/changelog 2015-07-14 15:07:03.0 +0200 @@ -1,3 +1,10 @@ +uruk (20150401-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 15:06:27 +0200 + uruk (20150401-1) unstable; urgency=low * New upstream release: The Gorp en Roovert Release (missed: uruk version diff -Nru uruk-20150401/debian/rules uruk-20150401/debian/rules --- uruk-20150401/debian/rules 2015-05-12 21:21:41.0 +0200 +++ uruk-20150401/debian/rules 2015-07-14 15:03:38.0 +0200 @@ -17,6 +17,8 @@ package=uruk docdir = debian/$(package)/usr/share/doc/$(package) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + define checkdir test -f debian/rules endef @@ -89,6 +91,8 @@ done chown -R root.root debian/$(package) chmod -R go=rX debian/$(package) + find debian/$(package) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/$(package) .. binary-arch: checkroot build
Bug#792988: xbs: please make the build reproducible
Source: xbs Version: 0-9 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that xbs could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Once applied, xbs can be built reproducibly in our current experimental framework. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru xbs-0/debian/changelog xbs-0/debian/changelog --- xbs-0/debian/changelog 2015-03-07 23:59:59.0 +0100 +++ xbs-0/debian/changelog 2015-07-14 15:14:23.0 +0200 @@ -1,3 +1,10 @@ +xbs (0-9.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages + + -- akira marival...@gmail.com Tue, 14 Jul 2015 15:13:30 +0200 + xbs (0-9) unstable; urgency=low * patch from Sylvestre Ledru sylves...@debian.org to make this build diff -Nru xbs-0/debian/rules xbs-0/debian/rules --- xbs-0/debian/rules 2015-03-07 23:58:40.0 +0100 +++ xbs-0/debian/rules 2015-07-14 15:13:21.0 +0200 @@ -7,6 +7,8 @@ ddir=`pwd`/debian/tmp +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(checkdir) make @@ -70,6 +72,8 @@ # clean permissions and build chown -R root:root debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. define checkdir
Bug#792977: luakit: please make the build reproducible
Source: luakit Version: 2012.09.13-r1-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that luakit could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru luakit-2012.09.13-r1/debian/changelog luakit-2012.09.13-r1/debian/changelog --- luakit-2012.09.13-r1/debian/changelog 2015-05-26 03:46:14.0 +0200 +++ luakit-2012.09.13-r1/debian/changelog 2015-07-14 21:45:24.0 +0200 @@ -1,3 +1,9 @@ +luakit (2012.09.13-r1-5) UNRELEASED; urgency=medium + + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 21:45:01 +0200 + luakit (2012.09.13-r1-4) unstable; urgency=medium * Patch from Chris Lamb to make the build reproducible. diff -Nru luakit-2012.09.13-r1/debian/rules luakit-2012.09.13-r1/debian/rules --- luakit-2012.09.13-r1/debian/rules 2015-05-26 03:45:48.0 +0200 +++ luakit-2012.09.13-r1/debian/rules 2015-07-14 21:43:50.0 +0200 @@ -13,6 +13,8 @@ DEB_BUILD_GNU_TYPE = $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) DEB_HOST_GNU_TYPE = $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + STRIP=strip ifneq ($(DEB_BUILD_GNU_TYPE),$(DEB_HOST_GNU_TYPE)) @@ -81,6 +83,8 @@ chmod a-x debian/$(package)/usr/share/luakit/lib/lousy/*.lua chown -R root:root debian/$(package) chmod -R go=rX debian/$(package) + find debian/luakit -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/$(package) ..
Bug#792974: liblockfile: please make the build reproducible
Source: liblockfile Version: 1.09-6 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that liblockfile could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru liblockfile-1.09/debian/changelog liblockfile-1.09/debian/changelog --- liblockfile-1.09/debian/changelog 2013-06-02 11:46:21.0 +0200 +++ liblockfile-1.09/debian/changelog 2015-07-14 17:12:57.0 +0200 @@ -1,3 +1,10 @@ +liblockfile (1.09-6.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 17:12:23 +0200 + liblockfile (1.09-6) unstable; urgency=low * Merge 1.09-5ubuntu1 diff -Nru liblockfile-1.09/debian/rules liblockfile-1.09/debian/rules --- liblockfile-1.09/debian/rules 2012-06-13 13:26:39.0 +0200 +++ liblockfile-1.09/debian/rules 2015-07-14 17:12:20.0 +0200 @@ -20,6 +20,8 @@ DEB_HOST_MULTIARCH ?= $(shell dpkg-architecture -qDEB_HOST_MULTIARCH) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build-arch:config.status $(checkdir) make @@ -68,6 +70,8 @@ $(do_md5sums) dpkg-shlibdeps liblockfile.so dpkg-gencontrol -pliblockfile1 -P$(tmp) -isp + find $(tmp) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(tmp) .. # # Build liblockfile-bin @@ -97,6 +101,8 @@ $(do_md5sums) dpkg-shlibdeps dotlockfile dpkg-gencontrol -pliblockfile-bin -P$(tmp) -isp + find $(tmp) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(tmp) .. # # Build liblockfile-dev @@ -132,6 +138,8 @@ $(tmp)/usr/share/doc/liblockfile-dev/copyright $(do_md5sums) dpkg-gencontrol -pliblockfile-dev -P$(tmp) -isp + find $(tmp) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(tmp) ..
Bug#792970: fortunes-bg: please make the build reproducible
Source: fortunes-bg Version: 1.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that fortunes-bg could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru fortunes-bg-1.1/changelog fortunes-bg-1.1+nmu1/changelog --- fortunes-bg-1.1/changelog 2004-11-30 04:56:58.0 +0100 +++ fortunes-bg-1.1+nmu1/changelog 2015-07-17 22:23:40.0 +0200 @@ -1,3 +1,10 @@ +fortunes-bg (1.1+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 22:23:29 +0200 + fortunes-bg (1.1) unstable; urgency=low * The text of GPL (ver. 1) included directly in the copyright file. diff -Nru fortunes-bg-1.1/Makefile fortunes-bg-1.1+nmu1/Makefile --- fortunes-bg-1.1/Makefile2004-11-09 02:40:45.0 +0100 +++ fortunes-bg-1.1+nmu1/Makefile 2015-07-17 22:23:26.0 +0200 @@ -10,6 +10,8 @@ FORTUNEROOT=/usr/share/games/fortunes +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(compiled) $(u8) rm -r bg/ mkdir bg @@ -42,6 +44,8 @@ dpkg-gencontrol -isp chown -R root.root tmp chmod -R go=rX,u=rwX tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build tmp .. binary-arch: checkroot build diff -Nru fortunes-bg-1.1/rules fortunes-bg-1.1+nmu1/rules --- fortunes-bg-1.1/rules 2004-11-09 02:40:45.0 +0100 +++ fortunes-bg-1.1+nmu1/rules 2015-07-17 22:23:26.0 +0200 @@ -10,6 +10,8 @@ FORTUNEROOT=/usr/share/games/fortunes +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(compiled) $(u8) rm -r bg/ mkdir bg @@ -42,6 +44,8 @@ dpkg-gencontrol -isp chown -R root.root tmp chmod -R go=rX,u=rwX tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build tmp .. binary-arch: checkroot build
Bug#792961: enemies-of-carlotta: please make the build reproducible
Source: enemies-of-carlotta Version: 1.2.6-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that enemies-of-carlotta could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u enemies-of-carlotta-1.2.6/debian/rules enemies-of-carlotta-1.2.6/debian/rules --- enemies-of-carlotta-1.2.6/debian/rules +++ enemies-of-carlotta-1.2.6/debian/rules @@ -2,6 +2,8 @@ package=enemies-of-carlotta +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(MAKE) check @@ -41,6 +43,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R o-s,go=u,go-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary-arch: diff -u enemies-of-carlotta-1.2.6/debian/changelog enemies-of-carlotta-1.2.6/debian/changelog --- enemies-of-carlotta-1.2.6/debian/changelog +++ enemies-of-carlotta-1.2.6/debian/changelog @@ -1,3 +1,10 @@ +enemies-of-carlotta (1.2.6-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 18:02:51 +0200 + enemies-of-carlotta (1.2.6-4) unstable; urgency=high * Switched from deprecated md5 to hashlib (closes: #596623)
Bug#792969: flowscan: please make the build reproducible
Source: flowscan Version: 1.006-13.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that flowscan could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u flowscan-1.006/debian/rules flowscan-1.006/debian/rules --- flowscan-1.006/debian/rules +++ flowscan-1.006/debian/rules @@ -9,6 +9,8 @@ binary: binary-arch binary-indep +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + binary-arch: binary-indep: build @@ -59,6 +61,8 @@ dpkg-shlibdeps debian/tmp/usr/bin/* dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. build: diff -u flowscan-1.006/debian/changelog flowscan-1.006/debian/changelog --- flowscan-1.006/debian/changelog +++ flowscan-1.006/debian/changelog @@ -1,3 +1,10 @@ +flowscan (1.006-13.3) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 22:20:28 +0200 + flowscan (1.006-13.2) unstable; urgency=low * Non-maintainer upload.
Bug#792958: dtaus: please make the build reproducible
Source: dtaus Version: 0.9-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dtaus could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u dtaus-0.9/debian/rules dtaus-0.9/debian/rules --- dtaus-0.9/debian/rules +++ dtaus-0.9/debian/rules @@ -24,6 +24,8 @@ version = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + installbin = install -g root -o root -m 755 installdoc = install -g root -o root -m 644 @@ -80,6 +82,8 @@ # dpkg-shlibdeps debian/tmp/usr/bin/dtaus dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch diff -u dtaus-0.9/debian/changelog dtaus-0.9/debian/changelog --- dtaus-0.9/debian/changelog +++ dtaus-0.9/debian/changelog @@ -1,3 +1,10 @@ +dtaus (0.9-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:54:58 +0200 + dtaus (0.9-1) unstable; urgency=low * New upstream version
Bug#792952: dhcpdump : please make the build reproducible
Source: dhcpdump Version: 1.8-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dhcpdump could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u dhcpdump-1.8/debian/rules dhcpdump-1.8/debian/rules --- dhcpdump-1.8/debian/rules +++ dhcpdump-1.8/debian/rules @@ -24,6 +24,8 @@ version = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + installbin = install -g root -o root -m 755 installdoc = install -g root -o root -m 644 @@ -74,6 +76,8 @@ # dpkg-shlibdeps debian/tmp/usr/sbin/dhcpdump dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch diff -u dhcpdump-1.8/debian/changelog dhcpdump-1.8/debian/changelog --- dhcpdump-1.8/debian/changelog +++ dhcpdump-1.8/debian/changelog @@ -1,3 +1,10 @@ +dhcpdump (1.8-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:18:14 +0200 + dhcpdump (1.8-2) unstable; urgency=low * Bump standards-version
Bug#792953: dhcping: please make the build reproducible
Source: dhcping Version: 1.2-4.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dhcping could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u dhcping-1.2/debian/changelog dhcping-1.2/debian/changelog --- dhcping-1.2/debian/changelog +++ dhcping-1.2/debian/changelog @@ -1,3 +1,10 @@ +dhcping (1.2-4.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:22:57 +0200 + dhcping (1.2-4.1) unstable; urgency=low * Non-maintainer upload. diff -u dhcping-1.2/debian/rules dhcping-1.2/debian/rules --- dhcping-1.2/debian/rules +++ dhcping-1.2/debian/rules @@ -24,6 +24,8 @@ version = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(source) debian/changelog|head -1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + installbin = install -g root -o root -m 755 installdoc = install -g root -o root -m 644 @@ -76,6 +78,8 @@ # dpkg-shlibdeps debian/tmp/usr/sbin/dhcping dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
Bug#792979: runit: please make the build reproducible
Source: runit Version: 2.1.2-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that runit could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u runit-2.1.2/debian/changelog runit-2.1.2/debian/changelog --- runit-2.1.2/debian/changelog +++ runit-2.1.2/debian/changelog @@ -1,3 +1,10 @@ +runit (2.1.2-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 17:10:54 +0200 + runit (2.1.2-3) unstable; urgency=medium * workaround #766187 by copying from sysvinit-2.88dsf: diff -u runit-2.1.2/debian/rules runit-2.1.2/debian/rules --- runit-2.1.2/debian/rules +++ runit-2.1.2/debian/rules @@ -12,6 +12,8 @@ CPPFLAGS =$(shell DEB_BUILD_MAINT_OPTIONS=$(DEB_BUILD_MAINT_OPTIONS) \ dpkg-buildflags --get CPPFLAGS) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + DEB_HOST_GNU_TYPE =$(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE =$(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) ifneq ($(DEB_HOST_GNU_TYPE),$(DEB_BUILD_GNU_TYPE)) @@ -144,6 +146,8 @@ test '$(CC)' != 'gcc' || \ dpkg-shlibdeps '$(DIR)'/usr/sbin/* '$(DIR)'/usr/bin/* dpkg-gencontrol -isp -prunit -P'$(DIR)' + find '$(DIR)' -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)' .. binary: binary-indep binary-arch
Bug#792980: tworld: please make the build reproducible
Source: tworld Version: 1.3.0-6 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that tworld could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u tworld-1.3.0/debian/rules tworld-1.3.0/debian/rules --- tworld-1.3.0/debian/rules +++ tworld-1.3.0/debian/rules @@ -18,6 +18,7 @@ DEB_HOST_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) DEB_BUILD_GNU_TYPE ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) CFLAGS = -Wall -W -fomit-frame-pointer -DNDEBUG LDFLAGS = -Wall -W @@ -114,6 +115,8 @@ -p$(PKG1) -P$(TMP1) cd $(TMP1) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP1) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(TMP1) .. $(INSTALL_FILE) debian/copyright debian/README.Debian \ @@ -125,6 +128,8 @@ -p$(PKG2) -P$(TMP2) cd $(TMP2) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP2) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(TMP2) .. binary: binary-indep binary-arch diff -u tworld-1.3.0/debian/changelog tworld-1.3.0/debian/changelog --- tworld-1.3.0/debian/changelog +++ tworld-1.3.0/debian/changelog @@ -1,3 +1,10 @@ +tworld (1.3.0-6.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 19:14:15 +0200 + tworld (1.3.0-6) unstable; urgency=low [ Peter Pentchev ]
Bug#792981: wmweather: please make the build reproducible
Source: wmweather Version: 2.4.5-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that wmweather could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru wmweather-2.4.5/debian/changelog wmweather-2.4.5/debian/changelog --- wmweather-2.4.5/debian/changelog2013-12-30 16:28:13.0 +0100 +++ wmweather-2.4.5/debian/changelog2015-07-15 19:36:09.0 +0200 @@ -1,3 +1,10 @@ +wmweather (2.4.5-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 19:35:49 +0200 + wmweather (2.4.5-2) unstable; urgency=low * Updated build system. diff -Nru wmweather-2.4.5/debian/rules wmweather-2.4.5/debian/rules --- wmweather-2.4.5/debian/rules2013-12-30 16:15:09.0 +0100 +++ wmweather-2.4.5/debian/rules2015-07-15 19:35:47.0 +0200 @@ -17,6 +17,8 @@ export CFLAGS export LDFLAGS +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + clean: $(testdir) rm -f build-stamp debian/files debian/substvars @@ -66,6 +68,8 @@ dpkg-shlibdeps debian/wmweather/usr/bin/wmweather dpkg-gencontrol -isp -pwmweather -Pdebian/wmweather chmod -R u+w,go=u-w debian/wmweather + find debian/wmweather -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/wmweather .. binary-indep:
Bug#792989: freecdb: please make the build reproducible
Source: freecdb Version: 0.75 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that freecdb could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru freecdb-0.75/debian/changelog freecdb-0.75+nmu1/debian/changelog --- freecdb-0.75/debian/changelog 2006-01-13 22:12:00.0 +0100 +++ freecdb-0.75+nmu1/debian/changelog 2015-07-19 13:45:25.0 +0200 @@ -1,3 +1,10 @@ +freecdb (0.75+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 13:45:01 +0200 + freecdb (0.75) unstable; urgency=low * take over upstream (closes: #272127). diff -Nru freecdb-0.75/debian/rules freecdb-0.75+nmu1/debian/rules --- freecdb-0.75/debian/rules 2006-01-13 22:12:00.0 +0100 +++ freecdb-0.75+nmu1/debian/rules 2015-07-19 13:44:58.0 +0200 @@ -12,6 +12,8 @@ DIR =$(shell pwd)/debian/freecdb +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: deb-checkdir build-stamp build-stamp: $(MAKE) CC='$(CC)' @@ -40,6 +42,8 @@ binary-arch: install freecdb.deb test '$(CC)' != 'gcc' || dpkg-shlibdeps '$(DIR)'/usr/bin/* dpkg-gencontrol -isp -pfreecdb -P'$(DIR)' + find '$(DIR)' -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)' .. binary: binary-indep binary-arch
Bug#792985: ipsvd: please make the build reproducible
Source: ipsvd Version: 1.0.0-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ipsvd could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u ipsvd-1.0.0/debian/changelog ipsvd-1.0.0/debian/changelog --- ipsvd-1.0.0/debian/changelog +++ ipsvd-1.0.0/debian/changelog @@ -1,3 +1,10 @@ +ipsvd (1.0.0-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 14:42:34 +0200 + ipsvd (1.0.0-3) unstable; urgency=low * debian/rules: no longer install the sslsvd, sslio programs and man diff -u ipsvd-1.0.0/debian/rules ipsvd-1.0.0/debian/rules --- ipsvd-1.0.0/debian/rules +++ ipsvd-1.0.0/debian/rules @@ -14,6 +14,8 @@ DIR =$(shell pwd)/debian/ipsvd +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + patch: deb-checkdir patch-stamp patch-stamp: for i in `ls -1 debian/diff/*.diff || :`; do \ @@ -68,6 +70,8 @@ binary-arch: install ipsvd.deb test '$(CC)' != 'gcc' || dpkg-shlibdeps '$(DIR)'/usr/bin/* dpkg-gencontrol -isp -pipsvd -P'$(DIR)' + find '$(DIR)' -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)' .. binary: binary-indep binary-arch
Bug#792987: jargon: please make the build reproducible
Source: jargon Version: 4.0.0-5.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that jargon could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u jargon-4.0.0/debian/changelog jargon-4.0.0/debian/changelog --- jargon-4.0.0/debian/changelog +++ jargon-4.0.0/debian/changelog @@ -1,3 +1,10 @@ +jargon (4.0.0-5.2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 14:50:54 +0200 + jargon (4.0.0-5.1) unstable; urgency=medium * Non-maintainer upload. diff -u jargon-4.0.0/debian/rules jargon-4.0.0/debian/rules --- jargon-4.0.0/debian/rules +++ jargon-4.0.0/debian/rules @@ -11,6 +11,8 @@ MANDIR=$(DESTDIR)/usr/share/man INFODIR=$(DESTDIR)/usr/share/info +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(checkdir) touch build @@ -52,6 +54,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary-arch: checkroot build
Bug#792947: cvs-mailcommit: please make the build reproducible
Source: cvs-mailcommit Version: 1.19-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that cvs-mailcommit could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u cvs-mailcommit-1.19/debian/changelog cvs-mailcommit-1.19/debian/changelog --- cvs-mailcommit-1.19/debian/changelog +++ cvs-mailcommit-1.19/debian/changelog @@ -1,3 +1,10 @@ +cvs-mailcommit (1.19-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 16:35:27 +0200 + cvs-mailcommit (1.19-2) unstable; urgency=medium * Added the missing dependency to RCS *sigh* diff -u cvs-mailcommit-1.19/debian/rules cvs-mailcommit-1.19/debian/rules --- cvs-mailcommit-1.19/debian/rules +++ cvs-mailcommit-1.19/debian/rules @@ -24,6 +24,8 @@ version = $(shell grep ^$(source) debian/changelog|head -n 1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(source) debian/changelog|head -n 1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + installbin = install -g root -o root -m 755 installdoc = install -g root -o root -m 644 @@ -67,6 +69,8 @@ # dpkg-shlibdeps debian/tmp/usr/bin/* dpkg-gencontrol -isp chown root.root debian/tmp/DEBIAN/control + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
Bug#792951: dbview: please make the build reproducible
Source: dbview Version: 1.0.4-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dbview could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u dbview-1.0.4/debian/changelog dbview-1.0.4/debian/changelog --- dbview-1.0.4/debian/changelog +++ dbview-1.0.4/debian/changelog @@ -1,3 +1,10 @@ +dbview (1.0.4-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:09:05 +0200 + dbview (1.0.4-1) unstable; urgency=low * Fixed typo in NMU-Disclaimer, thanks to Petter Reinholdtsen (See: diff -u dbview-1.0.4/debian/rules dbview-1.0.4/debian/rules --- dbview-1.0.4/debian/rules +++ dbview-1.0.4/debian/rules @@ -24,6 +24,8 @@ version = $(shell grep ^$(package) debian/changelog|head -1 |sed 's/.*(\(.*\)\-[^\-]*).*/\1/g') revision = $(shell grep ^$(package) debian/changelog|head -1 |sed 's/.*([^\-]*\-\(.*\)).*/\1/g') +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + installbin = install -o root -g root -m 755 installdoc = install -o root -g root -m 644 @@ -74,6 +76,8 @@ # dpkg-shlibdeps debian/tmp/usr/bin/dbview dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch
Bug#792949: chimera2: please make the build reproducible
Source: chimera2 Version: 2.0a19-8 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that chimera2 could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u chimera2-2.0a19/debian/rules chimera2-2.0a19/debian/rules --- chimera2-2.0a19/debian/rules +++ chimera2-2.0a19/debian/rules @@ -9,6 +9,8 @@ package=chimera2 +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + ifneq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALLOPT= else @@ -63,6 +65,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. define checkdir diff -u chimera2-2.0a19/debian/changelog chimera2-2.0a19/debian/changelog --- chimera2-2.0a19/debian/changelog +++ chimera2-2.0a19/debian/changelog @@ -1,3 +1,10 @@ +chimera2 (2.0a19-8.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 16:05:52 +0200 + chimera2 (2.0a19-8) unstable; urgency=low * Fix segfault with font handling - Thanks to Flos Lonicera for patch
Bug#792950: ccze: please make the build reproducible
Source: ccze Version: 0.2.1-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ccze could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u ccze-0.2.1/debian/changelog ccze-0.2.1/debian/changelog --- ccze-0.2.1/debian/changelog +++ ccze-0.2.1/debian/changelog @@ -1,3 +1,10 @@ +ccze (0.2.1-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Thu, 16 Jul 2015 23:52:43 +0200 + ccze (0.2.1-2) unstable; urgency=low * Add myself as Maintainer, as Gergely seems to be MIA diff -u ccze-0.2.1/debian/rules ccze-0.2.1/debian/rules --- ccze-0.2.1/debian/rules +++ ccze-0.2.1/debian/rules @@ -8,6 +8,7 @@ CFLAGS ?= -g BGT:= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) HGT:= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) ifneq (,$(findstring noopt,${DEB_BUILD_OPTIONS})) CFLAGS += -O0 @@ -81,6 +82,9 @@ ## Generate DEBIAN/control dpkg-gencontrol -isp -p${PACKAGE} -Tdebian/${PACKAGE}.substvars \ -P${PKGDIR} +## Fix mtimes before building binary packages + find ${PKGDIR} -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' ## Build the binary package dpkg --build ${PKGDIR} ..
Bug#792993: cgoban: please make the build reproducible
Source: cgoban Version: 1.9.14-17 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that cgoban could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Once applied, cgoban can be built reproducibly in our current experimental framework. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru cgoban-1.9.14/debian/changelog cgoban-1.9.14/debian/changelog --- cgoban-1.9.14/debian/changelog 2012-05-06 20:31:51.0 +0200 +++ cgoban-1.9.14/debian/changelog 2015-07-14 11:33:04.0 +0200 @@ -1,3 +1,11 @@ +cgoban (1.9.14-17.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible +output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 11:32:08 +0200 + cgoban (1.9.14-17) unstable; urgency=low * Fixed crash on maximization, closes: #387209. diff -Nru cgoban-1.9.14/debian/rules cgoban-1.9.14/debian/rules --- cgoban-1.9.14/debian/rules 2012-05-06 20:31:30.0 +0200 +++ cgoban-1.9.14/debian/rules 2015-07-14 14:34:19.0 +0200 @@ -3,6 +3,8 @@ testdir = test -f src/goBoard.c test -f debian/rules testroot = test x`whoami` = xroot +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + # FOR AUTOCONF 2.52 AND NEWER ONLY ifeq ($(DEB_BUILD_GNU_TYPE), $(DEB_HOST_GNU_TYPE)) CONFFLAGS += --build $(DEB_HOST_GNU_TYPE) @@ -72,6 +74,8 @@ dpkg-shlibdeps debian/cgoban/usr/games/cgoban dpkg-gencontrol -isp -pcgoban -Pdebian/cgoban chmod -R u+w,go=u-w debian/cgoban + find debian/cgoban -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/cgoban .. .PHONY: clean binary binary-arch binary-indep
Bug#792990: skalibs: please make the build reproducible
Source: skalibs Version: 0.47-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that skalibs could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u skalibs-0.47/debian/changelog skalibs-0.47/debian/changelog --- skalibs-0.47/debian/changelog +++ skalibs-0.47/debian/changelog @@ -1,3 +1,10 @@ +skalibs (0.47-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Wed, 15 Jul 2015 18:15:29 +0200 + skalibs (0.47-1) unstable; urgency=low * new upstream version. diff -u skalibs-0.47/debian/rules skalibs-0.47/debian/rules --- skalibs-0.47/debian/rules +++ skalibs-0.47/debian/rules @@ -14,6 +14,8 @@ DIR =$(shell pwd)/debian/skalibs +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + configure: deb-checkdir configure-stamp configure-stamp: ln -s skalibs-0.47 skalibs @@ -81,10 +83,14 @@ binary-indep: install-indep skalibs-doc.deb dpkg-gencontrol -isp -pskalibs-doc -P'$(DIR)'-doc + find '$(DIR)'-doc -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)'-doc .. binary-arch: install-arch skalibs-dev.deb dpkg-gencontrol -isp -pskalibs-dev -P'$(DIR)'-dev + find '$(DIR)'-dev -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)'-dev .. binary: binary-indep binary-arch
Bug#792991: gpsmanshp: please make the build reproducible
Source: gpsmanshp Version: 1.2.3-4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that gpsmanshp could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru gpsmanshp-1.2.3/debian/changelog gpsmanshp-1.2.3/debian/changelog --- gpsmanshp-1.2.3/debian/changelog2013-10-11 09:06:04.0 +0200 +++ gpsmanshp-1.2.3/debian/changelog2015-07-19 14:06:26.0 +0200 @@ -1,3 +1,10 @@ +gpsmanshp (1.2.3-4.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 14:06:15 +0200 + gpsmanshp (1.2.3-4) unstable; urgency=low * Fixed permissions of some control files diff -Nru gpsmanshp-1.2.3/debian/rules gpsmanshp-1.2.3/debian/rules --- gpsmanshp-1.2.3/debian/rules2013-10-11 09:18:35.0 +0200 +++ gpsmanshp-1.2.3/debian/rules2015-07-19 14:06:12.0 +0200 @@ -10,6 +10,8 @@ LDFLAGS:=$(shell dpkg-buildflags --get LDFLAGS) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(MAKE) -f Makefile TCLVERSION=$(TCLVERSION) LDFLAGS=$(LDFLAGS) @@ -53,6 +55,8 @@ dpkg-shlibdeps $(INSTALLDIR)/gpsmanshp.so dpkg-gencontrol -isp (cd $(TMPROOT) ; md5sum usr/lib/tcl$(TCLVERSION)/gpsmanshp.so DEBIAN/md5sums ; md5sum usr/share/doc/gpsmanshp/* DEBIAN/md5sums ; md5sum usr/share/doc/gpsmanshp/html/*DEBIAN/md5sums ; chmod 644 DEBIAN/md5sums) + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ +xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg-deb --build $(TMPROOT) .. binary: binary-arch
Bug#792982: ftpcopy: please make the build reproducible
Source: ftpcopy Version: 0.6.7-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that ftpcopy could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u ftpcopy-0.6.7/debian/changelog ftpcopy-0.6.7/debian/changelog --- ftpcopy-0.6.7/debian/changelog +++ ftpcopy-0.6.7/debian/changelog @@ -1,3 +1,10 @@ +ftpcopy (0.6.7-3.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Sun, 19 Jul 2015 13:51:02 +0200 + ftpcopy (0.6.7-3) unstable; urgency=medium * debian/diff/disable--html-option.diff: the --html option is no diff -u ftpcopy-0.6.7/debian/rules ftpcopy-0.6.7/debian/rules --- ftpcopy-0.6.7/debian/rules +++ ftpcopy-0.6.7/debian/rules @@ -17,6 +17,8 @@ DIR =$(shell pwd)/debian/ftpcopy +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + unpack: deb-checkdir unpack-stamp unpack-stamp: rm -rf web @@ -70,7 +72,9 @@ binary-arch: deb-checkdir deb-checkuid install-arch ftpcopy.deb test '$(DIET)' -ne 0 || dpkg-shlibdeps '$(DIR)'/usr/bin/* - dpkg-gencontrol -isp -pftpcopy -P'$(DIR)' + dpkg-gencontrol -isp -pftpcopy -P'$(DIR)' + find '$(DIR)' -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg -b '$(DIR)' .. binary-indep: deb-checkdir deb-checkuid install-indep
Bug#792963: erc: please make the build reproducible
Source: erc Version: 5.3-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that erc could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u erc-5.3/debian/rules erc-5.3/debian/rules --- erc-5.3/debian/rules +++ erc-5.3/debian/rules @@ -13,6 +13,8 @@ configure-stamp: touch configure-stamp +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: configure-stamp build-stamp build-stamp: # Comply with Debian vote 2006-1 @@ -87,6 +89,9 @@ find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums ## Generate DEBIAN/control dpkg-gencontrol -isp -p${PACKAGE} -P${PKGDIR} +## Fix mtimes before building binary packages + find ${PKGDIR} -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' ## Build the binary package dpkg --build ${PKGDIR} .. diff -u erc-5.3/debian/changelog erc-5.3/debian/changelog --- erc-5.3/debian/changelog +++ erc-5.3/debian/changelog @@ -1,3 +1,10 @@ +erc (5.3-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 22:06:13 +0200 + erc (5.3-1) unstable; urgency=low * debian/control:
Bug#792976: logapp: please make the build reproducible
Source: logapp Version: 0.15-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that logapp could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u logapp-0.15/debian/rules logapp-0.15/debian/rules --- logapp-0.15/debian/rules +++ logapp-0.15/debian/rules @@ -34,6 +34,8 @@ INSTALL_PROGRAM += -s endif +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: build-stamp build-stamp: patch @@ -82,6 +84,8 @@ $(INSTALL_DIR) $(PACKAGE_DIR)/DEBIAN cd $(PACKAGE_DIR) find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums dpkg-gencontrol -p$(PACKAGE_NAME) -P$(PACKAGE_DIR) + find $(PACKAGE_DIR) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg-deb --build $(PACKAGE_DIR) .. binary: binary-indep binary-arch diff -u logapp-0.15/debian/changelog logapp-0.15/debian/changelog --- logapp-0.15/debian/changelog +++ logapp-0.15/debian/changelog @@ -1,3 +1,10 @@ +logapp (0.15-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 21:36:22 +0200 + logapp (0.15-1) unstable; urgency=low * New upstream release
Bug#792971: junior-doc: please make the build reproducible
Source: junior-doc Version: 1.16.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that junior-doc could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru junior-doc-1.16.1/debian/changelog junior-doc-1.16.1+nmu1/debian/changelog --- junior-doc-1.16.1/debian/changelog 2010-03-28 12:42:45.0 +0200 +++ junior-doc-1.16.1+nmu1/debian/changelog 2015-07-14 16:22:09.0 +0200 @@ -1,3 +1,10 @@ +junior-doc (1.16.1+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to make reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 16:21:30 +0200 + junior-doc (1.16.1) unstable; urgency=low [Jari Aalto] diff -Nru junior-doc-1.16.1/debian/rules junior-doc-1.16.1+nmu1/debian/rules --- junior-doc-1.16.1/debian/rules 2003-03-23 20:35:56.0 +0100 +++ junior-doc-1.16.1+nmu1/debian/rules 2015-07-14 16:40:10.0 +0200 @@ -6,6 +6,8 @@ examplesdir = $(docdir)/examples scriptsdir = $(examplesdir)/scripts +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: stamp-build stamp-build: test -d quickguide -a -f debian/rules @@ -42,6 +44,8 @@ gzip -c9 debian/changelog $(docdir)/changelog.gz chown -R root.root $(tmp) chmod -R go=rX $(tmp) dpkg-gencontrol -isp + find $(tmp) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(tmp) .. # If we were including the quickguide in ftp/doc, we would do the
Bug#792973: liblip: please make the build reproducible
Source: liblip Version: 2.0.0-1.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that liblip could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u liblip-2.0.0/debian/changelog liblip-2.0.0/debian/changelog --- liblip-2.0.0/debian/changelog +++ liblip-2.0.0/debian/changelog @@ -1,3 +1,10 @@ +liblip (2.0.0-1.3) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 16:59:54 +0200 + liblip (2.0.0-1.2) unstable; urgency=low * Non-maintainer upload. diff -u liblip-2.0.0/debian/rules liblip-2.0.0/debian/rules --- liblip-2.0.0/debian/rules +++ liblip-2.0.0/debian/rules @@ -4,6 +4,8 @@ STRIP = strip --strip-unneeded --remove-section=.comment --remove-section=.note +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: $(checkdir) cp -f /usr/share/misc/config.sub . @@ -69,6 +71,8 @@ chown -R root.root debian/liblip2 chmod -x debian/liblip2/usr/lib/lip/* chmod -R go=rX debian/liblip2 + find debian/liblip2 -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/liblip2 .. dpkg-gencontrol -isp -pliblip-dev -Pdebian/liblip-dev @@ -77,6 +81,8 @@ chmod -x debian/liblip-dev/usr/lib/lip/liblip.a chmod -x debian/liblip-dev/usr/lib/lip/liblip.la chmod -R go=rX debian/liblip-dev + find debian/liblip-dev -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/liblip-dev .. define checkdir
Bug#793001: blosxom: please make the build reproducible
Source: blosxom Version: 2.1.2-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that blosxom could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u blosxom-2.1.2/debian/changelog blosxom-2.1.2/debian/changelog --- blosxom-2.1.2/debian/changelog +++ blosxom-2.1.2/debian/changelog @@ -1,3 +1,10 @@ +blosxom (2.1.2-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Thu, 16 Jul 2015 23:03:56 +0200 + blosxom (2.1.2-1) unstable; urgency=high * New upstream release: Fixes Cross-Site Scripting (XSS) vulnerability with diff -u blosxom-2.1.2/debian/rules blosxom-2.1.2/debian/rules --- blosxom-2.1.2/debian/rules +++ blosxom-2.1.2/debian/rules @@ -12,7 +12,7 @@ INSTALL_SCRIPT = $(INSTALL) -p-oroot -groot -m755 INSTALL_DIR = $(INSTALL) -p -d -oroot -groot -m755 - +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) clean: $(checkdir) @@ -72,6 +72,8 @@ dpkg-gencontrol -ldebian/changelog -isp -p$(PKG) -P$(TMP) cd $(TMP) find * -type f ! -regex '^DEBIAN/.*' -print0 | \ xargs -r0 md5sum DEBIAN/md5sums + find $(TMP) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(TMP) ..
Bug#792998: chiark-utils: please make the build reproducible
Source: chiark-utils Version: 4.4.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that chiark-utils could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru chiark-utils-4.4.2/debian/changelog chiark-utils-4.4.2+nmu1/debian/changelog --- chiark-utils-4.4.2/debian/changelog 2014-12-21 16:14:10.0 +0100 +++ chiark-utils-4.4.2+nmu1/debian/changelog2015-07-17 00:14:23.0 +0200 @@ -1,3 +1,10 @@ +chiark-utils (4.4.2+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 00:14:00 +0200 + chiark-utils (4.4.2) unstable; urgency=low Copyright licencing fixes: diff -Nru chiark-utils-4.4.2/debian/rules chiark-utils-4.4.2+nmu1/debian/rules --- chiark-utils-4.4.2/debian/rules 2014-10-26 15:20:47.0 +0100 +++ chiark-utils-4.4.2+nmu1/debian/rules2015-07-17 00:13:56.0 +0200 @@ -9,6 +9,8 @@ packages_arch= chiark-rwbuffer chiark-really chiark-utils-bin packages= $(packages_indep) $(packages_arch) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + cwd= $(shell pwd) d= $(cwd)/debian t= $d/tmp @@ -113,6 +115,8 @@ chown -R root.root debian/tmp chmod -R g-ws debian/tmp debian/rules binary-hook-$p + find $t/$p -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $t/$p .. binary-indep: checkroot build binary-prep
Bug#792999: console-cyrillic: please make the build reproducible
Source: console-cyrillic Version: 0.9-16.2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that console-cyrillic could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u console-cyrillic-0.9/debian/changelog console-cyrillic-0.9/debian/changelog --- console-cyrillic-0.9/debian/changelog +++ console-cyrillic-0.9/debian/changelog @@ -1,3 +1,10 @@ +console-cyrillic (0.9-16.3) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 16:29:06 +0200 + console-cyrillic (0.9-16.2) unstable; urgency=low * Non-maintainer upload. diff -u console-cyrillic-0.9/debian/rules console-cyrillic-0.9/debian/rules --- console-cyrillic-0.9/debian/rules +++ console-cyrillic-0.9/debian/rules @@ -14,6 +14,8 @@ kazakh=debian/binary/console-kazakh-0.2b +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + debian/binary.tar.gz.uu: $(checkdir) cd debian tar cf - binary | gzip -9 | uuencode binary.tar.gz binary.tar.gz.uu @@ -140,6 +142,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R go=rX,u=rwX debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary-arch: checkroot build
Bug#792954: dpatch: please make the build reproducible
Source: dpatch Version: 2.0.35 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dpatch could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru dpatch-2.0.35/debian/changelog dpatch-2.0.35+nmu1/debian/changelog --- dpatch-2.0.35/debian/changelog 2012-02-07 10:09:06.0 +0100 +++ dpatch-2.0.35+nmu1/debian/changelog 2015-07-17 17:32:07.0 +0200 @@ -1,3 +1,10 @@ +dpatch (2.0.35+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:31:49 +0200 + dpatch (2.0.35) unstable; urgency=low * Mark the package Multi-Arch: foreign, thanks Riku Voipio diff -Nru dpatch-2.0.35/debian/rules dpatch-2.0.35+nmu1/debian/rules --- dpatch-2.0.35/debian/rules 2011-10-23 23:17:10.0 +0200 +++ dpatch-2.0.35+nmu1/debian/rules 2015-07-17 17:31:46.0 +0200 @@ -9,6 +9,8 @@ DOCS = README.History README.source README.svn-mergeWithUpstream +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build-dpatch: test -e debian/control ${MAKE} @@ -72,6 +74,8 @@ find ${DPATCH} -type f -name '*.gz' | xargs chmod 0644 find ${DPATCH}/DEBIAN -type f | xargs chmod 0644 dpkg-gencontrol -isp -P${DPATCH} + find ${DPATCH} -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build ${DPATCH} .. binary-indep: binary-dpatch
Bug#792959: elida: please make the build reproducible
Source: elida Version: 0.4+nmu1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that elida could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru elida-0.4+nmu1/debian/changelog elida-0.4+nmu2/debian/changelog --- elida-0.4+nmu1/debian/changelog 2010-03-19 09:55:42.0 +0100 +++ elida-0.4+nmu2/debian/changelog 2015-07-17 17:58:58.0 +0200 @@ -1,3 +1,10 @@ +elida (0.4+nmu2) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:58:37 +0200 + elida (0.4+nmu1) unstable; urgency=low * Non-maintainer upload to fix release goal. diff -Nru elida-0.4+nmu1/debian/rules elida-0.4+nmu2/debian/rules --- elida-0.4+nmu1/debian/rules 2009-07-05 05:11:47.0 +0200 +++ elida-0.4+nmu2/debian/rules 2015-07-17 17:58:30.0 +0200 @@ -3,6 +3,8 @@ P = elida T = debian/tmp +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: binary: binary-arch binary-indep @@ -34,6 +36,8 @@ dpkg-gencontrol -isp chown -R root.root $T chmod -R o-s,go=u,go-ws $T + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $T .. binary-arch:
Bug#792955: dput: please make the build reproducible
Source: dput Version: 0.9.6.4 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that dput could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru dput-0.9.6.4/debian/changelog dput-0.9.6.4+nmu1/debian/changelog --- dput-0.9.6.4/debian/changelog 2013-07-19 13:08:40.0 +0200 +++ dput-0.9.6.4+nmu1/debian/changelog 2015-07-17 17:40:02.0 +0200 @@ -1,3 +1,10 @@ +dput (0.9.6.4+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Fri, 17 Jul 2015 17:39:50 +0200 + dput (0.9.6.4) unstable; urgency=low [ Salvatore Bonaccorso ] diff -Nru dput-0.9.6.4/debian/rules dput-0.9.6.4+nmu1/debian/rules --- dput-0.9.6.4/debian/rules 2013-07-19 12:48:57.0 +0200 +++ dput-0.9.6.4+nmu1/debian/rules 2015-07-17 17:39:47.0 +0200 @@ -3,6 +3,8 @@ PACKAGE := dput TMPDIR := debian/tmp +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: build-arch build-indep build-arch: build-stamp build-indep: build-stamp @@ -61,6 +63,8 @@ install --mode=0755 debian/prerm $(TMPDIR)/DEBIAN install --mode=0755 debian/postinst $(TMPDIR)/DEBIAN dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(TMPDIR) .. # Build architecture-dependent files here.
Bug#792994: angband-doc: please make the build reproducible
Source: angband-doc Version: 3.0.3.5 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that angband-doc could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Once applied, angband-doc can be built reproducibly in our current experimental framework. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru angband-doc-3.0.3.5/debian/changelog angband-doc-3.0.3.5+nmu1/debian/changelog --- angband-doc-3.0.3.5/debian/changelog2009-06-25 16:25:54.0 +0200 +++ angband-doc-3.0.3.5+nmu1/debian/changelog 2015-07-14 15:23:55.0 +0200 @@ -1,3 +1,10 @@ +angband-doc (3.0.3.5+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to make reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 15:23:14 +0200 + angband-doc (3.0.3.5) unstable; urgency=low * New bug fixing release diff -Nru angband-doc-3.0.3.5/debian/local.mk angband-doc-3.0.3.5+nmu1/debian/local.mk --- angband-doc-3.0.3.5/debian/local.mk 2008-11-30 04:51:09.0 +0100 +++ angband-doc-3.0.3.5+nmu1/debian/local.mk2015-07-14 15:23:12.0 +0200 @@ -21,10 +21,11 @@ debian/stamp/INST/angband-doc: debian/stamp/install/angband-doc debian/stamp/BIN/angband-doc: debian/stamp/binary/angband-doc +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + CLEAN/angband-doc:: -rm -rf $(TMPTOP) - debian/stamp/install/angband-doc: $(checkdir) $(REASON) @@ -59,6 +60,8 @@ $(create_md5sum) $(TMPTOP) chown -R root$(TMPTOP) chmod -R u+w,go=rX $(TMPTOP) + find $(TMPTOP) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build $(TMPTOP) .. @test -d debian/stamp/binary || mkdir -p debian/stamp/binary @echo done $@
Bug#792975: libmsv: please make the build reproducible
Source: libmsv Version: 1.1-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that libmsv could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -Nru libmsv-1.1/debian/changelog libmsv-1.1/debian/changelog --- libmsv-1.1/debian/changelog 2014-03-14 18:19:51.0 +0100 +++ libmsv-1.1/debian/changelog 2015-07-14 20:36:34.0 +0200 @@ -1,3 +1,10 @@ +libmsv (1.1-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 19:53:34 +0200 + libmsv (1.1-1) unstable; urgency=medium * New upstream version. diff -Nru libmsv-1.1/debian/rules libmsv-1.1/debian/rules --- libmsv-1.1/debian/rules 2014-03-14 18:16:54.0 +0100 +++ libmsv-1.1/debian/rules 2015-07-14 19:53:27.0 +0200 @@ -9,6 +9,7 @@ DEB_BUILD_ARCH_OS ?= $(shell dpkg-architecture -qDEB_BUILD_ARCH_OS) DEB_BUILD_GNU_TYPE = $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE) DEB_HOST_GNU_TYPE = $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE) +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) STRIP=strip @@ -80,12 +81,16 @@ dpkg-gencontrol -ldebian/changelog -isp -p$(package) -Tdebian/$(package).substvars -Pdebian/$(package) chown -R root:root debian/$(package) chmod -R go=rX debian/$(package) + find debian/$(package) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/$(package) .. cd debian/$(devpkg) find * -type f ! -regex '^DEBIAN/.*' -print0 | xargs -r0 md5sum DEBIAN/md5sums dpkg-gencontrol -ldebian/changelog -isp -p$(devpkg) -Tdebian/$(devpkg).substvars -Pdebian/$(devpkg) chown -R root:root debian/$(devpkg) chmod -R go=rX debian/$(devpkg) + find debian/$(devpkg) -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/$(devpkg) ..
Bug#792972: libjama: please make the build reproducible
Source: libjama Version: 1.2.4-2 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that libjama could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u libjama-1.2.4/debian/changelog libjama-1.2.4/debian/changelog --- libjama-1.2.4/debian/changelog +++ libjama-1.2.4/debian/changelog @@ -1,3 +1,10 @@ +libjama (1.2.4-2.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 16:33:43 +0200 + libjama (1.2.4-2) unstable; urgency=low * Fixed include path to TNT, closes: #383466. diff -u libjama-1.2.4/debian/rules libjama-1.2.4/debian/rules --- libjama-1.2.4/debian/rules +++ libjama-1.2.4/debian/rules @@ -4,6 +4,8 @@ binary: binary-arch binary-indep +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + binary-arch: binary-indep: build @@ -25,6 +27,8 @@ chmod 644 debian/tmp/usr/share/doc/libjama-dev/html-jama.tar.gz dpkg-gencontrol -isp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. build:
Bug#792978: nec: please make the build reproducible
Source: nec Version: 2-16 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that nec could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u nec-2/debian/changelog nec-2/debian/changelog --- nec-2/debian/changelog +++ nec-2/debian/changelog @@ -1,3 +1,10 @@ +nec (2-16.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Tue, 14 Jul 2015 21:55:17 +0200 + nec (2-16) unstable; urgency=low * fix spelling error in nec2small binary * remove duplicate priority field in control file diff -u nec-2/debian/rules nec-2/debian/rules --- nec-2/debian/rules +++ nec-2/debian/rules @@ -16,7 +16,9 @@ ifeq (,$(findstring nostrip,$(DEB_BUILD_OPTIONS))) INSTALL_PROGRAM += -s -endif +endif + +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) build: $(checkdir) @@ -99,6 +101,8 @@ dh_md5sums --tmpdir=debian/tmp chown -R root.root debian/tmp chmod -R go=rX debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. define checkdir
Bug#793000: beav : please make the build reproducible
Source: beav Version: 1:1.40-18 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org Hi! While working on the “reproducible builds” effort [1], we have noticed that beav could not be built reproducibly. The attached patch sets the mtimes of all files which are modified during the built to the date of the last changelog entry in order to produce files with reproducible metadata. Cheers, akira [1]: https://wiki.debian.org/ReproducibleBuilds diff -u beav-1.40/debian/rules beav-1.40/debian/rules --- beav-1.40/debian/rules +++ beav-1.40/debian/rules @@ -7,6 +7,8 @@ ARCH = $(shell dpkg --print-installation-architecture) STRIP=strip --strip-unneeded --remove-section=.note --remove-section=.comment +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + build: # Builds the binary package. make CFLAGS=$(CFLAGS) LDFLAGS=$(LDFLAGS) @@ -40,6 +42,8 @@ dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. binary: binary-indep binary-arch diff -u beav-1.40/debian/changelog beav-1.40/debian/changelog --- beav-1.40/debian/changelog +++ beav-1.40/debian/changelog @@ -1,3 +1,10 @@ +beav (1:1.40-18.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Fix mtimes before building binary packages to produce reproducible output + + -- akira marival...@gmail.com Thu, 16 Jul 2015 20:58:48 +0200 + beav (1:1.40-18) unstable; urgency=low * Repackaged with the original 1.40 source so that we get a proper diff.gz.