reproducible.debian.net status changes for lucene-solr

2017-05-01 Thread Reproducible builds folks 
2017-05-01 12:58 
https://tests.reproducible-builds.org/debian/unstable/amd64/lucene-solr changed 
from FTBFS -> unreproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for guava-libraries

2017-05-01 Thread Reproducible builds folks 
2017-05-01 13:29 
https://tests.reproducible-builds.org/debian/unstable/amd64/guava-libraries 
changed from reproducible -> unreproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

reproducible.debian.net status changes for eclipse-mercurialeclipse

2017-05-01 Thread Reproducible builds folks 
2017-05-01 13:03 
https://tests.reproducible-builds.org/debian/unstable/amd64/eclipse-mercurialeclipse
 changed from reproducible -> unreproducible

__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.

[Branch ~openjdk/openjdk/openjdk8] Rev 704: openjdk-8 (8u131-b11-1) unstable; urgency=high

2017-05-01 Thread noreply 

revno: 704
committer: Matthias Klose 
branch nick: openjdk8
timestamp: Tue 2017-05-02 00:51:00 +0700
message:
  openjdk-8 (8u131-b11-1) unstable; urgency=high
  
* Update to 8u131-b11, Hotspot 8u112-b12 for AArch64.
* Security fixes:
  - S8167110, CVE-2017-3514: Windows peering issue.
  - S8165626, CVE-2017-3512: Improved window framing.
  - S8163528, CVE-2017-3511: Better library loading.
  - S8169011, CVE-2017-3526: Resizing XML parse trees.
  - S8163520, CVE-2017-3509: Reuse cache entries.
  - S8171533, CVE-2017-3544: Better email transfer.
  - S8170222, CVE-2017-3533: Better transfers of files.
  - S8171121, CVE-2017-3539: Enhancing jar checking.
  
[ Tiago Stürmer Daitx ]
* d/p/jdk-ppc64el-S8165231.diff: fixes java.nio.Bits.unaligned() on
  ppc64el. LP: #1677612.
* debian/buildwatch.sh: updated to stop it if no 'make' process is running,
  as it probably means that the build failed - otherwise buildwatch keeps
  the builder alive until it exits after the timer (3 hours by default)
  expires.
removed:
  debian/patches/sec-webrev-8u121-aarch64-hotspot-8159507.patch
  debian/patches/sec-webrev-8u121-aarch64-hotspot-8161218.patch
  debian/patches/sec-webrev-8u121-aarch64-hotspot-8167104.patch
added:
  debian/patches/jdk-ppc64el-S8165231.diff
modified:
  corba.tar.xz
  debian/buildwatch.sh
  debian/changelog
  debian/rules
  hotspot-aarch64.tar.xz
  hotspot.tar.xz
  jaxp.tar.xz
  jaxws.tar.xz
  jdk.tar.xz
  langtools.tar.xz
  nashorn.tar.xz
  root.tar.xz


--
lp:~openjdk/openjdk/openjdk8
https://code.launchpad.net/~openjdk/openjdk/openjdk8

Your team Debian Java Maintainers is subscribed to branch 
lp:~openjdk/openjdk/openjdk8.
To unsubscribe from this branch go to 
https://code.launchpad.net/~openjdk/openjdk/openjdk8/+edit-subscription
=== modified file 'corba.tar.xz'
Binary files corba.tar.xz	2017-01-23 10:05:20 + and corba.tar.xz	2017-05-01 17:51:00 + differ
=== modified file 'debian/buildwatch.sh'
--- debian/buildwatch.sh	2014-05-29 08:50:43 +
+++ debian/buildwatch.sh	2017-05-01 17:51:00 +
@@ -1,40 +1,58 @@
 #! /bin/sh
 
+#
+# Output something to stdout every so often so buildd won't kill
+# the build when building 
+#
+
 builddir=$1
 
 echo $$ > buildwatch.pid
 
-maxwait=$(expr 180 \* 60)
-wait=$maxwait
-ival=$(expr 30 \* 60)
-#ival=3
-
-while [ $wait -gt 0 ]; do
-sleep $ival
-wait=$(expr $wait - $ival)
-state=
-if ps x | grep -v grep | egrep -qs '/cc1|jar|java|gij'; then
-	state="compiler/java/jar running ..."
-	wait=$maxwait
-fi
-
+time_unit="m"
+timer=0
+sleep_for=3
+time_up_at=180
+upd_every=30 # use a multiple of $sleep_for
+
+reset_timer() { timer=0; }
+inc_timer()   { timer=$(expr $timer + $sleep_for); }
+time_up() { [ $timer -ge $time_up_at ]; }
+can_update()  { [ $(expr $timer % $upd_every) -eq 0 ]; }
+do_sleep(){ sleep ${sleep_for}${time_unit} && inc_timer; }
+
+is_running() { 
+ps x | grep -v grep | egrep -qs $@
+return $?
+}
+
+while ! time_up; do
+if [ ! -f buildwatch.pid ]; then
+echo "[$0] pidfile removed" && break
+fi
+if ! is_running '/make'; then
+echo "[$0] no make process detected (build done?)" && break
+fi
+
+do_sleep
+can_update || continue
+
+new_noisy=$(ls -l test/jtreg_output-* 2>&1 | md5sum)
 new_quiet=$(ls -l $builddir/openjdk*/build/*/tmp/rt-orig.jar $builddir/openjdk*/build/*/lib/tools.jar $builddir/openjdk*/build/*/lib/ct.sym 2>&1 | md5sum)
-if [ "$old_quiet" != "$new_quiet" ]; then
-	state="assembling jar file ..."
-	wait=$maxwait
+if [ -n "$old_noisy" -a "$old_noisy" != "$new_noisy" ]; then
+# jtreg updated test files, so it should be updating stdout in its own
+	# keep quiet and restart timer
+reset_timer
+elif [ -n "$old_quiet" -a "$old_quiet" != "$new_quiet" ]; then
+reset_timer
+echo "[$0] assembling jar file ..."
+elif is_running '/cc1|jar|java|gij'; then
+echo "[$0] compiler/java/jar running ..."
+reset_timer
 fi
+old_noisy=$new_noisy
 old_quiet=$new_quiet
-
-new_noisy=$(ls -l $builddir/mauve-*/mauve_output* jtreg_output-* 2>&1 | md5sum)
-if [ "$old_noisy" != "$new_noisy" ]; then
-	wait=$maxwait
-elif [ -n "$state" ]; then
-	echo $state
-fi
-old_noisy=$new_noisy
-
-if [ ! -f buildwatch.pid ]; then
-	echo "buildwatch exit"
-	exit 0
-fi
 done
+
+echo "[$0] exiting"
+rm -f buildwatch.pid

=== modified file 'debian/changelog'
--- debian/changelog	2017-04-16 07:23:46 +
+++ debian/changelog	2017-05-01 17:51:00 +
@@ -1,10 +1,38 @@
-openjdk-8 (8u121-b13-5) UNRELEASED; urgency=medium
-
+openjdk-8 (8u131-b11-1) unstable; urgency=high
+
+  * Update to 8u131-b11, Hotspot 8u112-b12 for AArch64.
+  * Security fixes:
+- S8167110, CVE-2017-3514: Windows peering issue.
+- S8165626, CVE-2017-3512: Improved window

Bug#861608: sbt: please make the build reproducible

2017-05-01 Thread Chris Lamb 
Source: sbt
Version: 0.13.13-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that sbt could not be built reproducibly.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
  ,''`.
 : :'  : Chris Lamb
 `. `'`  la...@debian.org / chris-lamb.co.uk
   `-
--- a/debian/patches/reproducible_build.patch   1970-01-01 01:00:00.0 
+0100
--- b/debian/patches/reproducible_build.patch   2017-05-01 13:31:44.909639506 
+0100
@@ -0,0 +1,17 @@
+Description: Make the build reproducible
+Author: Chris Lamb 
+Last-Update: 2017-05-01
+
+--- sbt-0.13.13.orig/project/Util.scala
 sbt-0.13.13/project/Util.scala
+@@ -62,7 +62,9 @@ object Util {
+   import java.util.{ Date, TimeZone }
+   val formatter = new java.text.SimpleDateFormat("MMdd'T'HHmmss")
+   formatter.setTimeZone(TimeZone.getTimeZone("GMT"))
+-  val timestamp = formatter.format(new Date)
++  var timestamp = formatter.format(new Date)
++  try { timestamp = formatter.format(new 
Date(sys.env("SOURCE_DATE_EPOCH").toLong * 1000L)) }
++  catch { case e: Exception => s.log.warn("Could not read 
SOURCE_DATE_EPOCH"); Nil }
+   val content = versionLine(version) + "\ntimestamp=" + timestamp
+   val f = dir / "xsbt.version.properties"
+   if (!f.exists || f.lastModified < lastCompilationTime(analysis) || 
!containsVersion(f, version)) {
--- a/debian/patches/series 2017-05-01 13:31:30.973574029 +0100
--- b/debian/patches/series 2017-05-01 13:31:44.909639506 +0100
@@ -4,3 +4,4 @@
 #add-default-local-debian-resolver.patch
 add-local-debian-maven-repo.patch
 base-on-scala211.patch
+reproducible_build.patch
__
This is the maintainer address of Debian's Java team
. 
Please use
debian-j...@lists.debian.org for discussions and questions.