[Reproducible-builds] Bug#779602: desktop-profiles: please make the build reproducible
Source: desktop-profiles Version: 1.4.20 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, While working on the reproducible builds effort [1], we have noticed that desktop-profiles could not be built reproducibly. The attached patch removes timestamps from the build system. Once applied, desktop-profiles can be built reproducibly in our reproducible toolchain. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- diff -urNad desktop-profiles.orig/desktop-profiles-1.4.20/Makefile desktop-profiles/desktop-profiles-1.4.20/Makefile --- desktop-profiles.orig/desktop-profiles-1.4.20/Makefile 2015-03-02 22:23:08.587486477 + +++ desktop-profiles/desktop-profiles-1.4.20/Makefile 2015-03-02 22:31:27.329936879 + @@ -3,6 +3,8 @@ DESTDIR = PREFIX = /usr +BUILD_DATE = $(shell dpkg-parsechangelog --show-field Date) + build: documentation l10n check documentation: dh_installlisting.1 @@ -39,7 +41,11 @@ ./dh_installlisting zip-tests: - tar -cvzf tests.tgz tests + find tests -not -type d -print0 | \ + LC_ALL=C sort --zero-terminated | \ + GZIP=-9n tar --create --gzip --null --files-from=- \ + --file=tests.tgz --mtime=$(BUILD_DATE) \ + --owner=root --group=root --numeric-owner check: zip-tests ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#779605: php-apigen: please make the output reproducible
Source: php-apigen
Version: 2.8.0+dfsg-3
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: toolchain timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi,
While working on the reproducible builds effort [1], we have noticed
that php-apigen is generating non-reproducible output.
The attached patch adds a --reproducible option that removes timestamps
and so forth. Once applied, packages that use php-apigen can be built
reproducibly in our reproducible toolchain.
[1]: https://wiki.debian.org/ReproducibleBuilds
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-
diff --git a/ApiGen-2.8.0/ApiGen/Config.php b/ApiGen-2.8.0/ApiGen/Config.php
index ea35741..7a9e925 100644
--- a/ApiGen-2.8.0/ApiGen/Config.php
+++ b/ApiGen-2.8.0/ApiGen/Config.php
@@ -73,6 +73,7 @@ class Config
'progressbar' = true,
'colors' = true,
'updateCheck' = true,
+ 'reproducible' = true,
'debug' = false
);
@@ -565,6 +566,7 @@ Options:
@option@--progressbar@c @value@yes@c|@value@no@cDisplay
progressbars, default @value@yes@c
@option@--colors@c @value@yes@c|@value@no@cUse colors,
default @value@no@c on Windows, @value@yes@c on other systems
@option@--update-check@c @value@yes@c|@value@no@cCheck for
update, default @value@yes@c
+ @option@--reproducible@c @value@yes@c|@value@no@cTry and make
output reproducible, default @value@yes@c
@option@--debug@c@value@yes@c|@value@no@cDisplay
additional information in case of an error, default @value@no@c
@option@--help@c|@option@-h@c Display this help
diff --git a/ApiGen-2.8.0/ApiGen/Generator.php
b/ApiGen-2.8.0/ApiGen/Generator.php
index 56e8418..e87f8f8 100644
--- a/ApiGen-2.8.0/ApiGen/Generator.php
+++ b/ApiGen-2.8.0/ApiGen/Generator.php
@@ -1393,12 +1393,19 @@ class Generator extends Nette\Object
throw new RuntimeException('Could not open ZIP
archive');
}
- $archive-setArchiveComment(trim(sprintf('%s API documentation
generated by %s %s on %s', $this-config-title, self::NAME, self::VERSION,
date('Y-m-d H:i:s';
+ $comment = sprintf('%s API documentation generated by %s %s',
$this-config-title, self::NAME, self::VERSION);
+ if (!$this-config-reproducible) {
+ $comment .= sprintf(' on %s', date('Y-m-d H:i:s'));
+ }
+ $archive-setArchiveComment(trim($comment));
$directory = Nette\Utils\Strings::webalize(trim(sprintf('%s API
documentation', $this-config-title)), null, false);
$destinationLength = strlen($this-config-destination);
foreach ($this-getGeneratedFiles() as $file) {
if (is_file($file)) {
+ if ($this-config-reproducible) {
+ touch($file, 0);
+ }
$archive-addFile($file, $directory .
DIRECTORY_SEPARATOR . substr($file, $destinationLength + 1));
}
}
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Missing dependencies aren't actually missing
On Mar 02 2015, Mattia Rizzolo mattia-p8aev1vil9rafugrpc6...@public.gmane.org wrote: On Mon, Mar 02, 2015 at 08:42:32AM -0800, Nikolaus Rath wrote: On Mar 01 2015, Mattia Rizzolo mattia-p8aev1vil9rafugrpc6...@public.gmane.org wrote: On Sun, Mar 01, 2015 at 12:04:13PM -0800, Nikolaus Rath wrote: On Mar 01 2015, Mattia Rizzolo mattia-p8aev1vil9rafugrpc6...@public.gmane.org wrote: On Sat, Feb 28, 2015 at 09:59:01PM -0800, Nikolaus Rath wrote: https://reproducible.debian.net/rb-pkg/s3ql.html claims that S3QL has We performed a rebuild, and your package still FTBFS. This time it looks like it fails at a test with the error dugong.ConnectionClosed: connection closed unexpectedly which is quite nasty at the sight (I don't know what that means). Does this mean that the package tries to connect to the internet? No, it should not. It opens its own mock server on localhost using the any available port. Are you sure about the any available port part? Almost certain. I could be certain if I could see the log with the failed test, but it seems that port 80 on reproducible.debian.net is down at the moment: $weird_things_happen again. https://reproducible.debian.net/rbuild/sid/amd64/s3ql_2.13+dfsg-1.rbuild.log not sure what's wrong at that time. Yes, 100% positive. The tests do not listen to a specific port, they pick an available one at runtime. Whatever goes wrong is more complex than that (and so far specific to the reproducible-builds server). Best, -Nikolaus -- GPG encrypted emails preferred. Key id: 0xD113FCAC3C4E599F Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F »Time flies like an arrow, fruit flies like a Banana.« signature.asc Description: PGP signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#779566: zsh: Making the build reproducible
Source: zsh Version: 5.0.7-5 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps Control: block -1 by 778462 Hi, this bug report is only there to track the state of reproducible zsh builds in Debian. The current state is visible at https://reproducible.debian.net/rb-pkg/sid/amd64/zsh.html The only issue currently are timestamps in PDF documents generated with pdflatex: https://wiki.debian.org/ReproducibleBuilds/TimestampsInPDFGeneratedByLaTeX I've tried to fix that in https://anonscm.debian.org/cgit/collab-maint/zsh.git/commit/?id=0dc9a03cbd0520a5566fbb264741d221c7972904 but it then started to FTBFS on our Jenkins CI instance at http://jenkins.grml.org/view/Debian/job/zsh-binaries/architecture=amd64/174/console It turned out that faketime from Jessie/Sid has issues when being run in a chroot on a Wheezy host. See https://bugs.debian.org/778462 for the according bug report and details. So for now I've reverted the commit mentioned above (and in the notes of the reproducible builds project) to be able to build zsh again until #778462 is fixed or another solution turns up. Chris (or someone else from the reproducible builds project): Can you please update the notes on https://reproducible.debian.net/rb-pkg/sid/amd64/zsh.html to mention that this is no more fixed in git but blocked by #778462? (I've already mentioned #778462 on https://wiki.debian.org/ReproducibleBuilds/TimestampsInPDFGeneratedByLaTeX) Regards, Axel -- ,''`. | Axel Beckert a...@debian.org, http://people.debian.org/~abe/ : :' : | Debian Developer, ftp.ch.debian.org Admin `. `' | 1024D: F067 EA27 26B9 C3FC 1486 202E C09E 1D89 9593 0EDE `-| 4096R: 2517 B724 C5F6 CA99 5329 6E61 2FF9 CD59 6126 16B5 ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Bug#779566: zsh: Making the build reproducible
Hi Axel, thanks for this bug and caring about reproducible builds! On Montag, 2. März 2015, Axel Beckert wrote: Chris (or someone else from the reproducible builds project): Can you please update the notes on https://reproducible.debian.net/rb-pkg/sid/amd64/zsh.html to mention that this is no more fixed in git but blocked by #778462? done. cheers, Holger signature.asc Description: This is a digitally signed message part. ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Missing dependencies aren't actually missing
On Mar 01 2015, Mattia Rizzolo mat...@mapreri.org wrote: On Sun, Mar 01, 2015 at 12:04:13PM -0800, Nikolaus Rath wrote: On Mar 01 2015, Mattia Rizzolo mattia-p8aev1vil9rafugrpc6...@public.gmane.org wrote: On Sat, Feb 28, 2015 at 09:59:01PM -0800, Nikolaus Rath wrote: https://reproducible.debian.net/rb-pkg/s3ql.html claims that S3QL has We performed a rebuild, and your package still FTBFS. This time it looks like it fails at a test with the error dugong.ConnectionClosed: connection closed unexpectedly which is quite nasty at the sight (I don't know what that means). Does this mean that the package tries to connect to the internet? No, it should not. It opens its own mock server on localhost using the any available port. Are you sure about the any available port part? Almost certain. I could be certain if I could see the log with the failed test, but it seems that port 80 on reproducible.debian.net is down at the moment: $ ping reproducible.debian.net PING reproducible.debian.net (46.16.73.183) 56(84) bytes of data. 64 bytes from ip46-16-73-183.pbiaas.com (46.16.73.183): icmp_seq=1 ttl=53 time=177 ms 64 bytes from ip46-16-73-183.pbiaas.com (46.16.73.183): icmp_seq=2 ttl=53 time=178 ms 64 bytes from ip46-16-73-183.pbiaas.com (46.16.73.183): icmp_seq=3 ttl=53 time=178 ms ^C --- reproducible.debian.net ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2002ms rtt min/avg/max/mdev = 177.500/177.979/178.224/0.338 ms $ wget http://reproducible.debian.net/ --2015-03-02 08:40:00-- http://reproducible.debian.net/ Resolving reproducible.debian.net (reproducible.debian.net)... 46.16.73.183 Connecting to reproducible.debian.net (reproducible.debian.net)|46.16.73.183|:80... [timeout] Is there any way I could ssh into your build host to debug locally? I just became Debian Maintainer. Any chance this is also due to $weird_things? Both the reguphinxar unstable build and the last ci test from two days ago with don't have that problem (cf. http://ci.debian.net/packages/s/s3ql/unstable/amd64/). Anyway, I performed a local build and this is what debbindiff outputs: http://volatile.mapreri.org/2015-03-01/b46eb200e612629e11c7b6a1c925da36/s3ql.dbd.html e.g. timestamps in sphinx docs. I'll look into that, thanks. Best, -Nikolaus -- GPG encrypted emails preferred. Key id: 0xD113FCAC3C4E599F Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F »Time flies like an arrow, fruit flies like a Banana.« signature.asc Description: PGP signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] randomness_in_objects_inv
Nikolaus Rath: Can someone give me more information about how to reproduce this issue? I tried to change the file system order of the sphinx documents, but got identical results: […] You could try with the little LD_PRELOAD library that I had found on Stack Overflow: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=719845#39 http://stackoverflow.com/a/8866709 It will return files from readdir() in reverse order, so if you run it twice on the same set of files, you have a strong guarantee that it's going to be in a different order in a subsequent build. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Missing dependencies aren't actually missing
On Mon, Mar 02, 2015 at 08:42:32AM -0800, Nikolaus Rath wrote: On Mar 01 2015, Mattia Rizzolo mat...@mapreri.org wrote: On Sun, Mar 01, 2015 at 12:04:13PM -0800, Nikolaus Rath wrote: On Mar 01 2015, Mattia Rizzolo mattia-p8aev1vil9rafugrpc6...@public.gmane.org wrote: On Sat, Feb 28, 2015 at 09:59:01PM -0800, Nikolaus Rath wrote: https://reproducible.debian.net/rb-pkg/s3ql.html claims that S3QL has We performed a rebuild, and your package still FTBFS. This time it looks like it fails at a test with the error dugong.ConnectionClosed: connection closed unexpectedly which is quite nasty at the sight (I don't know what that means). Does this mean that the package tries to connect to the internet? No, it should not. It opens its own mock server on localhost using the any available port. Are you sure about the any available port part? Almost certain. I could be certain if I could see the log with the failed test, but it seems that port 80 on reproducible.debian.net is down at the moment: $weird_things_happen again. https://reproducible.debian.net/rbuild/sid/amd64/s3ql_2.13+dfsg-1.rbuild.log not sure what's wrong at that time. -- regards, Mattia Rizzolo GPG Key: 4096R/B9444540 http://goo.gl/I8TMB more about me: http://mapreri.org Launchpad User: https://launchpad.net/~mapreri Ubuntu Wiki page: https://wiki.ubuntu.com/MattiaRizzolo signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#779588: libjs-jcrop: please make the build reproducible
Source: libjs-jcrop Version: 0.9.12+dfsg-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi, While working on the reproducible builds effort [1], we have noticed that libjs-jcrop could not be built reproducibly. The attached patch removes timestamps from the build system. Once applied, libjs-jcrop can be built reproducibly in our reproducible toolchain. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `- diff -urNad libjs-jcrop.orig/libjs-jcrop-0.9.12+dfsg/debian/rules libjs-jcrop/libjs-jcrop-0.9.12+dfsg/debian/rules --- libjs-jcrop.orig/libjs-jcrop-0.9.12+dfsg/debian/rules 2015-03-02 19:02:30.404243842 + +++ libjs-jcrop/libjs-jcrop-0.9.12+dfsg/debian/rules2015-03-02 19:05:59.722506687 + @@ -1,4 +1,7 @@ #!/usr/bin/make -f + +export JCROP_BUILD = debian/$(shell dpkg-parsechangelog --show-field Version) + %: dh $@ ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] randomness_in_objects_inv
On Mar 02 2015, Jérémy Bobbio lunar-8fiuurrzop0dnm+yrof...@public.gmane.org wrote: Nikolaus Rath: Can someone give me more information about how to reproduce this issue? I tried to change the file system order of the sphinx documents, but got identical results: […] You could try with the little LD_PRELOAD library that I had found on Stack Overflow: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=719845#39 http://stackoverflow.com/a/8866709 It will return files from readdir() in reverse order, so if you run it twice on the same set of files, you have a strong guarantee that it's going to be in a different order in a subsequent build. Did you read the example in my mail? ls -U shows the files in readdir order, and for the second build the positions of file1 and file2 were switched - yet the sphinx output unchanged. Best, -Nikolaus -- GPG encrypted emails preferred. Key id: 0xD113FCAC3C4E599F Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F »Time flies like an arrow, fruit flies like a Banana.« signature.asc Description: PGP signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Предложение за вашият сайт и бизнес
Click on the link below to open the message in a browser: http://mandrillapp.com/track/click/30119679/shoutout.wix.com?p=eyJzIjoiZnVuOE55ZXJVVlhYa3BZS2lxUjJoUFhxeGM0IiwidiI6MSwicCI6IntcInVcIjozMDExOTY3OSxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvc2hvdXRvdXQud2l4LmNvbVxcXC9zb1xcXC9mS2xRaV9Fcj9jaWQ9NjNjZDg2ZDMtZGNkMy00ODBiLWExYjgtMGQ1ZDI1YjQyOGY5XCIsXCJpZFwiOlwiMDliMjk2YWExZDJlNGE2NGE1MDMyZGE1NjNmYTc3NmFcIixcInVybF9pZHNcIjpbXCI1MWNkZjgwNzNmMGEyZGVjMTNiNGJiMmVlOWYzOWIxYjdmZjBkMjJkXCJdfSJ9 You've received this email because you are a subscriber of http://mandrillapp.com/track/click/30119679/visitsltd.wix.com?p=eyJzIjoiZ1ZWUWcxc1MtM0FGc2VhRTFRSnczeEJsREZJIiwidiI6MSwicCI6IntcInVcIjozMDExOTY3OSxcInZcIjoxLFwidXJsXCI6XCJodHRwOlxcXC9cXFwvdmlzaXRzbHRkLndpeC5jb21cXFwvcGFnZTY0XCIsXCJpZFwiOlwiMDliMjk2YWExZDJlNGE2NGE1MDMyZGE1NjNmYTc3NmFcIixcInVybF9pZHNcIjpbXCJmODJmMGNiMWU2NDYyNmNlMGQwMzI4YmIyZWRhZTMyYmFhYWNlMWQ1XCJdfSJ9. If you feel you received it by mistake or wish to unsubscribe, click http://www.wix.com/my-account/contacts/unsubscribe?siteName=page64metaSiteId=db514935-2bd1-4fe2-ba02-92789d33adfcunsubscribeToken=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. ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
