[Reproducible-builds] Bug#807829: 4ti2: please make the build reproducible

2015-12-13 Thread Reiner Herrmann
Source: 4ti2 Version: 1.6.7+ds-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps locale X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi! While working on the "reproducible builds" effort [1], we have noticed that 4ti2 could not

[Reproducible-builds] Bug#807838: graphite2: please make the build reproducible

2015-12-13 Thread Reiner Herrmann
Source: graphite2 Version: 1.3.4-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: randomness X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi! While working on the "reproducible builds" effort [1], we have noticed that graphite2 could not

[Reproducible-builds] Bug#807837: lxc: please make the build reproducible

2015-12-13 Thread Reiner Herrmann
Source: lxc Version: 1:1.0.8-1 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org Hi! While working on the "reproducible builds" effort [1], we have noticed that lxc could not be built

Re: [Reproducible-builds] How to react on "the second build failed, even though the first build was successful" ?

2015-12-13 Thread Esa Peuha
On Sat, Dec 12, 2015 at 6:14 PM, Chris Lamb wrote: > I've lost my scrollback apologies but IIRC it wasn't anything beyond > acknowledgement of the issue which I felt was enough to share with Thomas to > prevent him thinking it was "his" issue to debug. OK, no problem. I was

[Reproducible-builds] Broken HTML on diffoscope.org

2015-12-13 Thread Axel Beckert
Hi, there seems to be a missing "" on https://diffoscope.org/ behind the link to http://brew.sh/. Well, actually it's a "" which behaves like a missing one. Regards, Axel -- ,''`. | Axel Beckert , http://people.debian.org/~abe/ : :' : | Debian Developer,

[Reproducible-builds] Bug#807669: dh-strip-nondeterminism: Breaks some jar file

2015-12-13 Thread Andrew Ayer
Hi Sophie, I took a look at dirbuster, and it looks like it doesn't actually build anything; instead it just installs a signed .jar that is shipped with the source, and strip-nondeterminism's modifications break the signature. Therefore, my recommendation is that you continue to disable

[Reproducible-builds] Bug#807876: strip-nondeterminism: should ignore signed JARs

2015-12-13 Thread Andrew Ayer
Package: strip-nondeterminism Severity: wishlist It would be nice for strip-nondeterminism to ignore signed JARs (but print a warning), since its modifications will break the signature. According to the jarsigner(1) man page, a signed JAR will have .DSA and .SF files in the META-INF, so we can