On 2020-12-03, Vagrant Cascadian wrote: > From a88dfde16b4aac231342bbdd07ec25180dded8f7 Mon Sep 17 00:00:00 2001 > From: Vagrant Cascadian <vagr...@reproducible-builds.org> > Date: Thu, 3 Dec 2020 08:09:10 +0000 > Subject: [PATCH] debian/rules: Pass MVPROG=/bin/mv to configure to ensure > reproducible build. > > When built on a system with usrmerge enabled, and a system without > usrmerge enabled, the visudo binary embeds different paths for the > "mv" program. > > Passing the /bin location to configure ensures using the most > compatible path, as a usrmerge system should have compatibility > symlinks available for /bin, while a non-usrmerge system is unlikely > to have compatibility symlinks for the /usr/bin location. > --- > debian/rules | 4 ++++ > 1 file changed, 4 insertions(+) > > diff --git a/debian/rules b/debian/rules > index 5b438ea..1117b57 100755 > --- a/debian/rules > +++ b/debian/rules > @@ -14,6 +14,10 @@ ifeq ($(DEB_HOST_ARCH_OS),linux) > configure_args += --with-selinux --with-linux-audit --enable-tmpfiles.d=yes > endif > > +# Consistently use /bin/mv to ensure reproducible builds regardless of > +# building on a usrmerge or non-usrmerge system. > +configure_args += MVPROG=/bin/mv > + > reconf-stamp: > cp -f /usr/share/misc/config.sub config.sub > cp -f /usr/share/misc/config.guess config.guess > -- > 2.20.1
Any chance you would be able to consider this patch in time for bullseye? sudo is a rather important package to have building reproducibly, in my opinion. :) live well, vagrant
signature.asc
Description: PGP signature
