Re: [Reproducible-builds] Heads-up! (was: [dpkg] 07/07: Document 1.18.5.0~reproducible1)
Hi Lunar, thanks for rebasing our changes on the latest master branch! On Freitag, 4. März 2016, Jérémy Bobbio wrote: > This versions implement changes discussed in #138409. One is that we are > now capturing some environment variables in .buildinfo files. In the > case of tests.reproducible-builds.org and the prebuilder script that means > that, as it is, every package would fail to be reproducible with the > current comparison. which environment variables are put into the .buildinfo files so that the comparison will fail? or maybe rather: why cant we make the .changes file include reproducible .buildinfo files? > So I refrained from uploading binaries yet. > > Couple of ways out I can think of: > > 1. Easy quick fix: use sed to remove .buildinfo from both .changes > file, then give .changes file to diffoscope. > 2. Slightly more complicated: change diffoscope to ignore most > fields in .buildinfo files. > 3. More involved: finally add “ignore modules” to diffoscope and > write a module to ignore most fields in .buildinfo files. I > would enable such a module by default. 4. teach diffoscope to ignore .buildinfo files when processing .changes files? > (I won't have time to work on any of this before probably 8-10 days.) > > Just for the record, Guillem said on IRC that he was waiting for us to > test the treewalk code before uploading dpkg/1.18.5 which ought to fix > file ordering issues. /me nods. cheers, Holger signature.asc Description: This is a digitally signed message part. ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Heads-up! (was: [dpkg] 07/07: Document 1.18.5.0~reproducible1)
Jérémy Bobbio: > --- a/debian/changelog > +++ b/debian/changelog > @@ -1,3 +1,15 @@ > +dpkg (1.18.5.0~reproducible1) UNRELEASED; urgency=low > + > + * Use a single timestamp for ar headers when building a .deb. > + * Use the common build timestamp for all files created at a later time if > +tar supports then --clamp-mtime option. > + * Allow to set the build timestamp using SOURCE_DATE_EPOCH. > + * Preset build timestamp to latest changelog entry. Closes: #759886, > #75 > + * Normalize file permissions when creating control.tar. Closes: #787980 > + * Add support for .buildinfo files. Closes: #138409 This versions implement changes discussed in #138409. One is that we are now capturing some environment variables in .buildinfo files. In the case of tests.reproducible-builds.org and the prebuilder script that means that, as it is, every package would fail to be reproducible with the current comparison. So I refrained from uploading binaries yet. Couple of ways out I can think of: 1. Easy quick fix: use sed to remove .buildinfo from both .changes file, then give .changes file to diffoscope. 2. Slightly more complicated: change diffoscope to ignore most fields in .buildinfo files. 3. More involved: finally add “ignore modules” to diffoscope and write a module to ignore most fields in .buildinfo files. I would enable such a module by default. (I won't have time to work on any of this before probably 8-10 days.) Just for the record, Guillem said on IRC that he was waiting for us to test the treewalk code before uploading dpkg/1.18.5 which ought to fix file ordering issues. -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
