Gustavo Noronha Silva:
On Qui, 2013-08-01 at 11:24 -0300, Rogério Brito wrote:
It seems that the current JSHint is *not* licensed under the no evil
license:
https://github.com/jshint/jshint/blob/master/LICENSE
It would be lovely to have JSHint and others in our repository.
Control: retitle -1 ITP: ruby-packetfu -- PacketFu is a mid-level packet
Control: owner -1 !
intrig...@debian.org:
* Package name: ruby-packetfu
Version : 1.1.8
Upstream Author : Tod Beardsley
* URL or Web page : https://github.com/todb/packetfu
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
Control: block 719297 by -1
* Package name: ruby-pcaprub
Version : 0.11.3-1
Upstream Author : shadowbq shado...@gmail.com
* URL : https://github.com/shadowbq/pcaprub
* License : LGPL-2
Hi Paul,
Paul van Tilburg:
On Sat, Aug 24, 2013 at 06:49:05PM +0200, Jérémy Bobbio wrote:
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
Control: block 719297 by -1
* Package name: ruby-pcaprub
Version : 0.11.3-1
Upstream Author : shadowbq
Ben Armstrong:
lib/taskwarrior-web/public/css/bootstrap.min.css
lib/taskwarrior-web/public/css/bootstrap-responsive.min.css
lib/taskwarrior-web/public/js/bootstrap.js
Copyright 2012 Twitter Inc, ASL 2.0
Packaged in libjs-twitter-bootstrap.
lib/taskwarrior-web/public/css/datepicker.css
Control: tag -1 + upstream
Hi Francesco,
Francesco Poli (wintermute):
First of all, thanks a lot for fixing the bugs I have previously
reported (#684182, #684184, and #692487)!
And thanks for your reports! :)
I noticed something new in rxgettext, and it looks like a newly
introduced bug.
Hi!
Guillem Jover:
I've been thinking about this, and I think you might be trying to
solve the problem in the wrong place(s), and possibly there's a need
to step back and ponder about what do you really want out of all this,
to know where or how to best fix it.
[…]
My ideal scenario is the
In order to make the build reproducible, we ensure that the files are
written to the .deb in a deterministic file order.
---
Here is a test case for pkg-tests that should ensure that files are
always written in the same order in the control and data tarball,
despite what readdir() says.
Guillem Jover:
On Tue, 2013-08-27 at 23:12:34 +0200, Jérémy Bobbio wrote:
In order to make the build reproducible, we ensure that the files are
written to the .deb in a deterministic file order.
---
Here is a test case for pkg-tests that should ensure that files are
always written
Jérémy Bobbio:
Guillem Jover:
The timestamp on the ar member let's you know when the package got
built.
I don't believe this add much value: we have this information in the
.changes files already.
Anyway, I was thinking of adding a `--timestamp=1377619307` option to
`dpkg-deb
Package: lintian
Version: 2.5.17
Severity: minor
Tags: patch
Hi dear Lintian maintainers,
Could you please update the list of known restrictions for autopkgtest?
It looks like `allow-stderr` is missing.
I believe the attached patch written against the master branch will do
the trick.
Thanks!
Jonathan Nieder:
I disagree that this is important information. Most packages that I have
seen so far do not propagate timestamps when copying a file from source.
Could you give me an example of one that would do so?
See http://www.debian.org/doc/debian-policy/ch-source.html#s-timestamps
Jérémy Bobbio:
Jonathan Nieder:
I disagree that this is important information. Most packages that I have
seen so far do not propagate timestamps when copying a file from source.
Could you give me an example of one that would do so?
See http://www.debian.org/doc/debian-policy/ch
Ivan Sergio Borgonovo:
calling aptitude [] runs apt-listbugs that fails with
/usr/lib/ruby/vendor_ruby/gettext/mo.rb:46: undefined method
`force_encoding' for \225\004\022\336:String (NoMethodError)
from /usr/lib/ruby/vendor_ruby/gettext/text_domain.rb:16:in
`require'
Control: severity -1 serious
Hi!
Ruby 1.8 is unsupported upstream and should not be part of Jessie.
Please update apt-listbugs to make it works with newer Ruby versions.
See also:
http://release.debian.org/transitions/html/ruby1.8-removal.html
Thanks!
--
Lunar
Package: schleuder
Version: 2.2.1-3
Severity: serious
Justification: unsuitable for release
Hi!
schleuder currently depends on ruby1.8. Ruby 1.8 is unsupported upstream
and unsuitable for release. We would like to remove it from the archive
soon. See:
Package: ftp.debian.org
Hi!
Please remove ruby-pcap from the archive. It has no reverse
dependencies.
Upstream is inactive for years. Other developers resumed work around a
pcap binding for ruby in the pcaprub project. The later library entered
the archive as ruby-pcaprub today.
Thanks!
--
Hleb Valoshka:
The bug really lies in ruby-gettext which does not currently parse
LC_MESSAGES at all. It should, just like GNU gettext.
Are you sure? GNU gettext uses LC_MESSAGES only indirectly, calling
_nl_locale_name (see intl/dcigettext.c), but it never checks its value by
itself.
Hi Raphael,
Raphael Hertzog:
On Sun, 28 Jul 2013, Marcelo Jorge Vieira wrote:
There is a big problem, Grunt depends on the JSHint and it is not
DFSG-compatible (Crockford's license).
Please read this:
Control: forwaded -1 f.agr...@gmail.com
Hi Michael,
Michael Billington:
If florence is killed/terminated, any keys which are down will remain down.
I think that the program should release anything it's holding when it is
closed.
Thanks for your report. I have forwarded your suggestion to
issues.
-- Jérémy Bobbio lu...@debian.org Tue, 16 Oct 2012 20:33:40 +0200
(Note that this package is not in Wheezy for that reason.)
--
Lunar.''`.
lu...@debian.org: :Ⓐ : # apt-get install anarchism
Patrick Zanon:
It would be nice if tor installation scripts could ask the user if to change
the polipo option socksParentProxy = localhost:9050 so that polipo would
start
using tor infrastructure...
The Tor project recommends against polipo since Firefox finally
implemented SOCKS properly.
-extra: […]
I am waiting for Roundcube 0.9 to land in unstable before updating
roundcube-plugins-extra. Roundcube 0.9.1 is in the NEW queue right now:
https://ftp-master.debian.org/new/roundcube_0.9.1-1.html
--
Jérémy Bobbio.''`.
lu...@debian.org: :Ⓐ
Package: e17
Version: 0.17.3-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps
Hi!
As part of the effort to have byte-to-byte identical reproducible
builds [1], I've noticed that e17 currently stores a timestamp in the
gzip header of some of
Package: python-gnupg
Severity: wishlist
Hi!
Would it be possible to package gnupg 1.2.2? The later comes from a new
active upstream and is now gnupg on PyPI:
https://pypi.python.org/pypi/gnupg
Thanks,
--
Lunar.''`.
lu...@debian.org: :Ⓐ :
Package: python-qrcode
Version: 4.0.1-1
Severity: grave
Hi!
It looks like python-qrcode is missing a Depends on python-six.
# apt-get install python-qrcode
[…]
The following NEW packages will be installed:
liblcms1 python-imaging python-qrcode
[…]
$ echo 'bla' | qr
Traceback (most recent
Package: ruby-packetfu
Version: 1.1.8-2
Severity: wishlist
Forwarded: https://github.com/todb/packetfu/issues/28
Hi!
ruby-packetfu should be made compatible with ruby2.0. Hopefully,
upstream will sort it out soon.
--
Lunar.''`.
lu...@debian.org
Package: hello
Version: 2.8-4
Severity: wishlist
Tags: patch
Hi!
In the quest to get deterministic/reproducible builds [1], I have
noticed that the result of building hello currently varies according to
its build path.
The attached patch use the debugedit tool to prevent such variation by
Hi!
Santiago Vila:
In the quest to get deterministic/reproducible builds [1], I have
noticed that the result of building hello currently varies according to
its build path.
[…]
While I can agree that reproducible builds is a good thing (I added
gzip -n recently), the proposed patch makes
Package: gem2deb
Severity: wishlist
Hi!
gem2deb should ensure that Ruby extensions are built using the
compilation flags available from dpkg-buildflags.
Right now, this will enable hardening flags on Debian.
In the future, it might help to have deterministic builds:
Package: bobcat
Version: 3.15.00-1
Severity: wishlist
Hi!
In the effort of making Debian binary package build reproducible [1], I
have noticed that your package currently ship gz compressed files with a
timestamp.
Adding the `-n` or `--no-name` flag to the various calls to `gzip` made
in
Control: tags -1 + patch
tony mancill:
Thanks for the suggestion and for looking into the cause of the issue
with the bobcat build. I'm suspect that Frank, the upstream developer,
will be willing to address this in a future upstream release.
Great! Attached is a patch that indeed did the
2013-09-08 23:22:26.0 +0200
@@ -1,3 +1,10 @@
+dh-buildinfo (0.9+nmu2) UNRELEASED; urgency=low
+
+ * Do not record timestamps when compressing buildinfo file.
+ * Output packages sorted by name.
+
+ -- Jérémy Bobbio lu...@debian.org Sun, 08 Sep 2013 20:59:23 +
+
dh-buildinfo (0.9+nmu1
Hi Frank,
Frank B. Brokken:
Of course I am. Could somebody please enlighten me what the problem actually
is? This is the first time in my l-o-o-o-o-ng life that I learn about a thing
called a `timestamp of a gzip file' and that it may cause problems.
In Debian context, it currently can pause
Control: forwarded -1 https://coquelicot.potager.org/TODO
Hi Shawn,
Shawn Landden:
I tried to install coquelicot under /images on my domain using
nginx's rewrite directive, and the main page shows up, but I cannot upload
as it goes to /upload.
There should be an easy way to tell coquelicot
Source: geoip-database
Severity: wishlist
Hi!
ooni-probe [1] which I am trying to package requires GeoLiteCity.dat and
GeoIPASNum.dat for some tests to work.
They are respectively available at:
http://geolite.maxmind.com/download/geoip/database/GeoLiteCity.dat.gz
and:
Control: tags -1 + patch
Hi!
Here are four patches based on the current master (1e059955) that will
write files in deterministic order in the control and data archives.
File names are sorted by forking `sort` before being piped to `tar`.
They have been tested with the test case previously sent
Control: tags -1 + pending
Dylan Thurston:
What's the justification for putting florence in the web category?
Surely 'x11' would be a better fit? It doesn't seem specific to web
browsing at all.
Indeed! Thanks for spotting the mistake.
--
Lunar.''`.
Control: reassign -1 tasksel
Jeffrey Walton:
It would probably be very beneficial to install an entropy gatherer by
default.
I am unconvinced that haveged is the answer here, but reassigning to the
proper package.
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr
Stephan Sürken:
Maybe 'sphinx/pycode' is new in 1.2.1, but just not installed?
# dpkg -L python-sphinx | grep Grammar-py2.txt
/usr/share/pyshared/sphinx/pycode/Grammar-py2.txt
The file is right there but the code is not properly looking for it.
--
Lunar.''`.
Axel Wagner:
It has been quite a while since jekyll has been updated. Some releases
also contain security fixes. Since I would like to use jekyll in
$dayjob, I am quite interested in a good health of this package. So if
the delay in uploading new versions is for a lack of manpower, I would
Hi Robert,
Robert Millan:
I just wanted to step in and give my point of view, which I think is quite
similar to that of the Tor project. […]
In the meantime, I believe that providing torbutton does more harm than good,
because it provides the *illusion* of security rather than security
Tomasz Buchert:
+Severity: normal
It think it should be at most wishlist, perhaps even pedantic.
Let's make it pedantic, but hopefully one day
it will be normal.
Could we go for “wishlist” instead?
I know that switching to reproducible builds sounds like a major
shift in
Ondřej Surý:
Christian Hofstaedtler:
Please, if anyhow possible, fix schleuder so it no longer depends on
ruby-tmail or ruby-actionmailer (2.3), so we can go ahead with the
removal of ruby1.8.
It's not in testing, so it doesn't block the removal. Otherwise fill
the removal bug, the
changes.
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr : : : lu...@debian.org
`. `'` lu...@torproject.org
`-
signature.asc
Description: Digital signature
one.
I'll probably take care of this some day.
That would be lovely. Thank you! :)
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr : : : lu...@debian.org
`. `'` lu...@torproject.org
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
* Package name: ooniprobe
Version : 1.0.0-rc7
Upstream Author : Open Observatory of Network Interference
ooni-...@torproject.org
* URL : https://ooni.torproject.org/
* License : BSD-2
Control: tags -1 + moreinfo
Thorsten Glaser:
Source: haveged
Version: 1.4-4
Justification: fails to build from source (but built successfully in the past)
Severity: important
Please try again with 1.9.1-1.
--
Lunar.''`.
lu...@debian.org:
:(
Been watching it for hours doing that. Uses one CPU at 100%.
Upstream version 1.9.0 promisses improvements, although I have no idea
if those address the problem I'm reporting.
I have just uploaded 1.9.1-1. Please try it.
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr
that the port is actually 51161.
Thanks for noticing! It'll be fixed in the next upload. :)
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr : : : lu...@debian.org
`. `'` lu...@torproject.org
Aliaksandr Barouski:
When error logging in sinatra fails (with exception), it can't process
exception in right way.
Example:
Our code handles Errno:EROFS:
error Errno:EROFS do
#some processing
end
If standard logger (rack.error) starts failing (e.g. filesystem become
read only), our
the URL… and the URL will be
shown in the rule list.
I agree this is a major inconvenience though, especially if you wish to
renable CACert-supported rules.
--
Jérémy Bobbio.''`.
jeremy.bob...@irq7.fr : : : lu...@debian.org
Rowan Thorpe:
Just adding that this bug seems not to be limited to the IMAP authentication,
but is a general behaviour when receiving an exception from any of the
authentication modules. I know this because I just implemented LDAP
authentication, and any failed authentication from that spills
Control: tags -1 + moreinfo
YunQiang Su:
This package has one or more -L/usr/lib in its build system,
which will make it ftbfs if there is libraries under /usr/lib,
while is not the default architecture, mips* for example.
Is the problem still present in sid?
--
Lunar
Control: reassign -1 ruby-fast-gettext
Johannes Schauer:
Result:
poparser.ry:162:in `===': invalid byte sequence in US-ASCII (ArgumentError)
from poparser.ry:162:in `parse'
from /usr/lib/ruby/vendor_ruby/fast_gettext/po_file.rb:16:in
`to_mo_file'
That line says:
in ooniprobe itself from the stacktrace. Could
you please try to play with the yaml module or run other software which
depends on python-yaml?
I'm enclined to think the problem is on your hardware given the amount
of armhf users and the fact that no one reported an issue.
--
Jérémy Bobbio
Package: dh-python
Version: 1.20140511-1
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain
Hi!
It would help the “reproducible efforts” [1] if dh-python would output
dependencies in a stable order. Right now they are likely to be
different each
Hi!
Jérémy Bobbio:
Here are four patches based on the current master (1e059955) that will
write files in deterministic order in the control and data archives.
File names are sorted by forking `sort` before being piped to `tar`.
Attached are the same patches rebased on the current master
Paul Wise:
I've been submitting changes to the rules for debian.org/debian.net as
DSA add more SSL-enabled domains[1]. I'm not sure if upstream will make
a release containing them in time for the jessie release so I thought I
would submit a diff against 3.5.3 so we can at least have recent
Package: proot
Version: 4.0.0-1
Severity: normal
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain
Hi!
Some lines of shells are sometimes better than lengthly explainations:
$ mkdir -p /tmp/a
$ cd /tmp/a
$ proot -b /tmp/a:/test -w /test bash -c 'pwd'
/tmp/a
Package: debhelper
Version: 9.20140817
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain, timestamps
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi!
As part of the “reproducible builds” project [1], it would be great to
get the files shipped in the Debian
} \\);
+ }
+
+ complex_doit(find $tmp -newermt '$dh{DATE}' $find_options -print0,
+ 2/dev/null | xargs -0r touch --no-dereference --date='$dh{DATE}');
+}
+
+=head1 SEE ALSO
+
+Ldebhelper(7)
+
+This program is a part of debhelper.
+
+=head1 AUTHOR
+
+Jérémy Bobbio lu...@debian.org
+
+=cut
diff --git a/man
Package: debhelper
Version: 9.20140817
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain, timestamps
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi!
Currently, static libraries shipped in Debian package capture the time
when the package is built. As
Package: dpkg
Version: 1.17.14
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain, timestamps
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi!
`.deb` are ar archives. The archive internal headers currently capture
the time when the
js:
I upgraded torsocks from the 1.3.3 to 2.0.0 and it either SIGSEV on some
browsers
or else fails to anonimize others (in other words, running under tor they
cannot
access sites blocked by my firewall)
Please be aware that browsing the web with anything else than the Tor
Browser is not
Joey Hess:
Jérémy Bobbio wrote:
Currently, static libraries shipped in Debian package capture the time
when the package is built. As part of the “reproducible builds”
project [1], it would be great to have static libriaries normalized.
The attached patch will make `dh_strip` replace
Joey Hess:
Do you have a plan to get packages not using dh or cdbs to use this new
command?
Its heart is a single find+xargs+touch command. I had in mind that
packages not using dh or cdbs could have their own way on how to make
the mtimes deterministic. Possibly by adding such a find command
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org
* Package name: golang-siphash-dev
Version : 1.0.0
Upstream Author : Dmitry Chestnykh dmi...@codingrobots.com
* URL : https://github.com
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org
* Package name: golang-ed25519-dev
Version : HEAD
Upstream Author : Adam Langley a...@imperialviolet.org
* URL : https://github.com/agl
Package: wnpp
Severity: wishlist
Owner: Jérémy Bobbio lu...@debian.org
X-Debbugs-Cc: pkg-anonymity-to...@lists.alioth.debian.org
* Package name: obfs4proxy
Version : 0.0.1
Upstream Author : Yawning Angel yawn...@torproject.org
* URL :
https://gitweb.torproject.org
Package: debhelper
Version: 9.20141010
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain fileordering
Hi!
As part of the “reproducible builds” effort [1], we have noticed that
dh_installdeb is registering conffiles depending on the file system
Package: geoip-database
Hi!
According to http://dev.maxmind.com/geoip/legacy/geolite/,
“The GeoLite databases are distributed under the Creative Commons
Attribution-ShareAlike 3.0 Unported License”. This probably means that
debian/copyright should be updated.
But this also means that all
Control: tags -1 + fixed-upstream
Matt Kraai:
As described in the ooniprobe README, I ran
sudo ooniresources --update-inputs --update-geoip
which failed with the following error message:
Traceback (most recent call last):
File /usr/bin/ooniresources, line 11, in module
from
Package: dpkg-dev
Version: 1.17.16
Severity: minor
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain randomness
Hi!
As part of the “reproducible builds” effort [1], I came to investigate a
couple of failures related to dpkg-shlibdeps.
An example is visible in the
Package: systemd
Version: 215-5+b1
Hi!
What happened:
1. Install Debian with GNOME desktop using Jessie d-i beta 2.
2. Upgrade to sid.
3. Add new layouts in Input Sources through the Region Language
interface.
4. Install Plymouth.
5. Restart.
6. Be unable to enter disk passphrase.
I hadn't
methods in stable order when generating C code to make
+builds reproducible.
+
+ -- Jérémy Bobbio lu...@debian.org Sun, 21 Sep 2014 18:19:56 +
+
ifupdown (0.7.48.1) unstable; urgency=low
* Add --ignore-errors option.
diff -Nru ifupdown-0.7.48.1/defn2c.pl ifupdown-0.7.48.2~reproducible1
in order
+to get reproducible builds.
+
+ -- Jérémy Bobbio lu...@debian.org Sun, 21 Sep 2014 20:37:15 +
+
libgpg-error (1.16-1) unstable; urgency=medium
* New upstream release
diff -Nru libgpg-error-1.16/debian/patches/series libgpg-error-1.16/debian/patches/series
--- libgpg-error
+dfsg-1.0reproducible1) UNRELEASED; urgency=medium
+
+ * Allow LSOF_CCDATE to be overriden by an environment variable.
+ * Ensure build reproducibility by preventing Configure to capture
+username, hostname, kernel version, and build time.
+
+ -- Jérémy Bobbio lu...@debian.org Mon, 22 Sep 2014
Jeroen Dekkers:
Jérémy actually already wrote a patch for dpkg-buildpackage to export
DEB_BUILD_TIMESTAMP:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=75
But if we want to push these things upstream, wouldn't it be better to
remove the DEB_ prefix from the name of the
Package: discount
Version: 2.1.7-1
Severity: wishlist
Tags: patches
Forwarded: https://github.com/Orc/discount/pull/112
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Hi!
As part of the “reproducible builds” project [1], we have identified
that currently discount output
Control: tags -1 + patch
Jérémy Bobbio:
The attached patch changes the `mangle()` function accordingly.
For real, this time.
--
Lunar.''`.
lu...@debian.org: :Ⓐ : # apt-get install anarchism
to be reproducible.
+
+ -- Jérémy Bobbio lu...@debian.org Wed, 24 Sep 2014 09:05:52 +
+
cwidget (0.5.17-1) unstable; urgency=medium
* New upstream release
diff -Nru cwidget-0.5.17/debian/patches/do-not-write-timestamps-in-documentation cwidget-0.5.17/debian/patches/do-not-write-timestamps
+unreproducible.
+
+ -- Jérémy Bobbio lu...@debian.org Wed, 24 Sep 2014 10:08:36 +
+
python-apt (0.9.3.10) unstable; urgency=medium
* python/tag.cc: ensure that the final \n is there when
diff -Nru python-apt-0.9.3.10/python/apt_pkgmodule.cc python-apt-0.9.3.10.0reproducible1/python
in Doxygen generated documentation for
+reproducibility of the build process.
+
+ -- Jérémy Bobbio lu...@debian.org Wed, 24 Sep 2014 19:08:26 +
+
libdebian-installer (0.96) unstable; urgency=medium
* arm64: Detect UEFI based systems as efi subarch.
diff -Nru libdebian-installer-0.96/doc
Package: groff
Version: 1.22.2-8
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: toolchain timestamps
Hi!
For the reasons outlined in
https://lists.gnu.org/archive/html/groff/2014-08/msg00112.html, it
would be great if groff could be given a creation date instead
Manuel A. Fernandez Montecelo:
As part of the “reproducible builds” project [1], we have discovered
that the documentation generated by Doxygen during cwidget build process
contained timestamps.
Together with #762622, this prevents cwidget builds to be reproducible.
We believe that
Control: retitle -1 RFP: debbindiff
Holger Levsen:
please package git.debian.org/git/reproducible/misc.git - I mostly care about
having the diffp tool installable via apt-get, so maybe move this into an
existing package instead? But then I believe the other stuff is also useful,
hence this
-maintainer upload.
+ * Use source file mtime as creation and modfication time while converting
+icons for build reproducibility.
+
+ -- Jérémy Bobbio lu...@debian.org Wed, 01 Oct 2014 21:54:51 +
+
keepassx (0.4.3+dfsg-0.1) unstable; urgency=high
* Non-maintainer upload.
diff -Nru
Package: ftp.debian.org
Severity: wishlist
User: ftp.debian@packages.debian.org
Usertags: archive
Hi!
As part of the “reproducible builds” effort [1], we came up with the
idea of a new control file, currently named “.buildinfo”
.buildinfo files would capture from the build environment as
Jérémy Bobbio:
Here are four patches based on the current master (1e059955) that will
write files in deterministic order in the control and data archives.
File names are sorted by forking `sort` before being piped to `tar`.
Attached are the patch based on current master (36eda4c1bc
Jérémy Bobbio:
The first patch will modify `dpkg-deb` to use the same timestamp for
every member of the ar archive.
The second patch will:
1. Make `dpkg-deb` try to look for a timestamp to use in the
DEB_BUILD_TIMESTAMP environment variable in epoch format.
If not set
the build date to be set externally,
+and set it to the latest debian/changelog entry for reproducibility.
+
+ -- Jérémy Bobbio lu...@debian.org Mon, 06 Oct 2014 17:55:47 +0200
+
socat (1.7.2.4-1) unstable; urgency=low
* New upstream release, update patches.
diff -Nru socat-1.7.2.4/debian
Ian Jackson:
Jérémy Bobbio writes (Bug#764251: socat: please set the build timestamp to a
deterministic time):
As part of the “reproducible builds” effort, we have discovered that
socat is using the __DATE__ and __TIME__ C pre-processor macro to record
the time of the build. This prevent
Source: linux
Version: 3.16.7-2
Severity: wishlist
User: reproducible-bui...@lists.alioth.debian.org
Usertags: timestamps randomness
Control: block -1 by 759886
Hi!
I have been doing some experimentation on making linux build
reproducibly [1]. With the attached patches, we are down to three
Bastian Blank:
On Mon, Nov 17, 2014 at 12:46:45AM +0100, Jérémy Bobbio wrote:
The first patch adds call to `dh_strip_nondeterminism` and
`dh_fixmtimes`, both being part of the custom toolchain currently used
for reproducible builds. Hence not tagging the bug with “patch” until
user reproducible-bui...@lists.alioth.debian.org
usertags 769893 + toolchain randomness
Joachim Breitner:
It'd be much appreciated if this was applied to 7.6.3, which would affect
300
Haskell packages that are currently not reproducible.
glad to hear this!
Very good news! :)
So
Package: qa.debian.org
Severity: wishlist
Control: user qa.debian@packages.debian.org
Control: usertags -1 jenkins
Control: user reproducible-bui...@lists.alioth.debian.org
Control: usertags -1 infrastructure
Hi!
As part of the reproducible build pages on jenkins.d.n, it would be
great to
Package: qa.debian.org
Severity: normal
User: qa.debian@packages.debian.org
Usertags: debsources
Hi!
When visiting https://sources.debian.net/src/beignet/1.0.0-1/README.md/
I'm told “403 Permission Denied”. This is a bit annoying as the file is
listed on
Control: severity -1 wishlist
Jonas Smedegaard:
I am not a VIm user, however, and its hardcoded use of that editor is
strongly discouraging for me (no, I do not use emacs either).
Please consider recoding¹ to not rely on VIm-specific features, to
appeal also to users of other interactive
Package: libical-dev
Version: 1.0-1.1
Severity: critical
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that libical could not be built reproducibly:
701 - 800 of 1082 matches
Mail list logo
