Re: [Reproducible-builds] Bug#786846: alt-ergo: [PATCH] please make the build reproducible - set build date
Juan Picca: --- a/Makefile.users +++ b/Makefile.users @@ -1,4 +1,5 @@ ARCH = $(shell uname -m) +BUILD_DATE = $(shell LANG=en_US; date) I would use `?=` instead of `=` here to highlight that it can be preset. I'm actually suprised that it works like this, but tests confirmed it. But hey, you learn every day: https://www.gnu.org/software/make/manual/html_node/Overriding.html Thanks Juan. :) -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Bug#786846: alt-ergo: [PATCH] please make the build reproducible - set build date
Hi Jérémy! Thanks for your comments, i will change it soon. Maybe we need change too the wiki pages as https://wiki.debian.org/ReproducibleBuilds/TimestampsInManpagesGeneratedBySphinx ? Greetings On Tue, May 26, 2015 at 5:29 AM, Jérémy Bobbio lu...@debian.org wrote: Juan Picca: --- a/Makefile.users +++ b/Makefile.users @@ -1,4 +1,5 @@ ARCH = $(shell uname -m) +BUILD_DATE = $(shell LANG=en_US; date) I would use `?=` instead of `=` here to highlight that it can be preset. I'm actually suprised that it works like this, but tests confirmed it. But hey, you learn every day: https://www.gnu.org/software/make/manual/html_node/Overriding.html Thanks Juan. :) -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Bug#782878: [debhelper-devel] Bug#782879 + Bug#782878: lib{test-log4perl, scalar-defer}-perl: please make the build reproducible
Hi, Russ Allbery wrote: My feeling is that the date in the man page serves a useful purpose for the end user by communicating some idea of the staleness of the documentation and the recentness of the last release of the software. While this isn't a huge deal, it does feel somewhat less than ideal to lose that data. Replacing it with the last modification date of the Debian package isn't perfect, but it's fairly reasonable. I'm suffering this issue in a different context, which is a binary package that ships a tarball of the kfreebsd (kernel) source. Some of those files are patched by dpkg-source. From #759404 I can see why dpkg-source can't really help with this. It would be a shame to lose / reset all the timestamps, because: * it's useful to know how old a file is, if Debian didn't patch it, * installing the package, extracting files with newer timestamps, could mean some systems for backup or deduplication must treat the files as though they are new/changed, * in a new package revision, if the files in a particular .deb didn't change, it would be nice if the data.tar.xz didn't change; this would be helpful to future work on .deb deltas or deduplication. I suggest to only 'clamp' timestamps to the latest entry in debian/changelog. I think only timestamps newer than this are likely an issue for reproducibility. Older timestamps are potentially still useful. Regards, -- Steven Chamberlain ste...@pyro.eu.org ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] debug-sym packages?
Joachim Breitner: it seems that the GHC build builds some auxiliary binaries (e.g. unlit, hp2hs) with the bootstrapping compiler, so for a chance of a fully reproducible build, the ghc package used needs to be fixed as well. That should be the case with ghc-7.8.4-7, uploaded to unstable today. I've scheduled another test for the version in experimental, and it now builds reproducibly! :) https://reproducible.debian.net/rb-pkg/experimental/amd64/ghc.html -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Bug#786846: alt-ergo: [PATCH] please make the build reproducible - set build date
Please, ignore the previous email. I did not realize that the set of the variable is in debian/rules. On Tue, May 26, 2015 at 7:45 AM, Juan Picca jumap...@gmail.com wrote: Hi Jérémy! Thanks for your comments, i will change it soon. Maybe we need change too the wiki pages as https://wiki.debian.org/ReproducibleBuilds/TimestampsInManpagesGeneratedBySphinx ? Greetings On Tue, May 26, 2015 at 5:29 AM, Jérémy Bobbio lu...@debian.org wrote: Juan Picca: --- a/Makefile.users +++ b/Makefile.users @@ -1,4 +1,5 @@ ARCH = $(shell uname -m) +BUILD_DATE = $(shell LANG=en_US; date) I would use `?=` instead of `=` here to highlight that it can be preset. I'm actually suprised that it works like this, but tests confirmed it. But hey, you learn every day: https://www.gnu.org/software/make/manual/html_node/Overriding.html Thanks Juan. :) -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] Bug#782878: Bug#782878: [debhelper-devel] Bug#782879 + Bug#782878: lib{test-log4perl, scalar-defer}-perl: please make the build reproducible
Steven Chamberlain: * run it on a directory before generating a .deb; might make the data.tar.xz reproducible in some cases even without patching dpkg yet? We are doing that in `dh_builddeb`. An extra 20% of the archive became reproducible when we moved the fix here instead of a separate helper. See: https://anonscm.debian.org/cgit/reproducible/debhelper.git/commit/?h=pu/reproducible_buildsid=d2b62ecd -- Lunar.''`. lu...@debian.org: :Ⓐ : # apt-get install anarchism `. `'` `- signature.asc Description: Digital signature ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Processed: Re: Bug#785742: dh-strip-nondeterminism: Causes package-contains-timestamped-gzip in lintian test suite
Processing commands for cont...@bugs.debian.org: tags 785742 + pending Bug #785742 [dh-strip-nondeterminism] dh-strip-nondeterminism: Causes package-contains-timestamped-gzip in lintian test suite Added tag(s) pending. thanks Stopping processing here. Please contact me if you need assistance. -- 785742: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=785742 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#785742: dh-strip-nondeterminism: Causes package-contains-timestamped-gzip in lintian test suite
tags 785742 + pending thanks On Tue, 19 May 2015 20:56:17 +0200 Niels Thykier ni...@thykier.net wrote: Debugging the lintian FTBFS on reproducible.d.n[1], I have found that if I override on dh_strip-nondeterminism in the test's rules file, the unexpected package-contains-timestamped-gzip tag goes away. In general, all gzip files in the lintian test suite are generated with gzip -n exactly to avoid this tag. Thanks for the report, Niels. strip-nondeterminism was actually adding back the timestamp using the time from the first entry in debian/changelog. I've just fixed it to not add a timestamp if the gzip file doesn't already have one. That said, I'm now concerned about how strip-nondeterminism interacts with the package-contains-timestamped-gzip tag. At some point after package-contains-timestamped-gzip was first proposed, we reproducible builds folks decided that instead of eliminating timestamps, we should normalize them with the time from the first entry in debian/changelog, to satisfy developers who like timestamps. That means that timestamped gzips aren't bad, as long as the timestamp is reproducible. Other reproducible folks, is this still our position on timestamps? If so, what should become of package-contains-timestamped-gzip? -- Andrew ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
Re: [Reproducible-builds] debug-sym packages?
Am 26. Mai 2015 14:57:13 MESZ, schrieb Jérémy Bobbio lu...@debian.org: I've scheduled another test for the version in experimental, and it now builds reproducibly! :) https://reproducible.debian.net/rb-pkg/experimental/amd64/ghc.html \o/ ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#786927: flowscan: please make the build reproducible
Source: flowscan Version: 1.006-13.2 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps Hi! While working on the “reproducible builds” effort [1], we have noticed that flowscan could not be built reproducibly. The attached patch removes extra timestamps from the gzipped docs and fixes the files mtime before building the binary packages. Once applied, flowscan can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds -- Dhole diff --git a/flowscan-1.006/debian/rules b/flowscan-1.006/debian/rules index feb2edb..d5b1ead 100755 --- a/flowscan-1.006/debian/rules +++ b/flowscan-1.006/debian/rules @@ -6,6 +6,7 @@ CF = -g -Wall -D_REENTRANT -fPIC TMP =$(CURDIR)/debian/$(PACKAGE) +BUILD_DATE=$(shell dpkg-parsechangelog --show-field Date) binary: binary-arch binary-indep @@ -25,7 +26,7 @@ binary-indep: build install -d -m 755 debian/tmp/usr/share/man/man1 install -p -m 644 man/*.1 debian/tmp/usr/share/man/man1 - gzip -9 debian/tmp/usr/share/man/man1/*.1 + gzip -9n debian/tmp/usr/share/man/man1/*.1 install -d -m 755 debian/tmp/usr/share/doc/flowscan install -p -m 644 Changes debian/tmp/usr/share/doc/flowscan/changelog @@ -33,7 +34,7 @@ binary-indep: build install -p -m 644 INSTALL debian/tmp/usr/share/doc/flowscan/UserManual install -p -m 644 debian/changelog debian/tmp/usr/share/doc/flowscan/changelog.Debian install -p -m 644 debian/README.Debian debian/tmp/usr/share/doc/flowscan - gzip -9 debian/tmp/usr/share/doc/flowscan/* + gzip -9n debian/tmp/usr/share/doc/flowscan/* install -d -m 755 debian/tmp/usr/share/doc/flowscan/html install -d -m 755 debian/tmp/usr/share/doc/flowscan/pod install -p -m 644 CampusIO.html README.html SubNetIO.html debian/tmp/usr/share/doc/flowscan/html @@ -47,7 +48,7 @@ binary-indep: build install -p -m 644 cf/* debian/tmp/etc/flowscan install -p -m 644 cf/* debian/tmp/usr/share/doc/flowscan/examples/cf install -p -m 644 rc/linux/* debian/tmp/usr/share/doc/flowscan/examples/rc - gzip -r9 debian/tmp/usr/share/doc/flowscan/examples/* + gzip -r9n debian/tmp/usr/share/doc/flowscan/examples/* install -p -m 644 debian/conffiles debian/tmp/DEBIAN # install -p -m 755 debian/config debian/preinst debian/tmp/DEBIAN @@ -59,6 +60,8 @@ binary-indep: build dpkg-shlibdeps debian/tmp/usr/bin/* dpkg-gencontrol -isp + find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. build: ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
[Reproducible-builds] Bug#777308: fixed in dhcp-helper 1.1-2
Source: dhcp-helper Version: 1.1-2 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps Hi, While working on the reproducible builds effort [1], we have noticed that dhcp-helper could not be built reproducibly. The attached patch fixes the mtime of the files before building the binary packages. Once applied, dhcp-helper can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds -- Dhole diff --git a/dhcp-helper-1.1/debian/rules b/dhcp-helper-1.1/debian/rules index 0ff9269..e949ba3 100755 --- a/dhcp-helper-1.1/debian/rules +++ b/dhcp-helper-1.1/debian/rules @@ -15,6 +15,7 @@ CFLAGS = $(shell export DEB_BUILD_OPTIONS=$(DEB_BUILD_OPTIONS); dpkg-buildflags CFLAGS += $(shell dpkg-buildflags --get CPPFLAGS) CFLAGS += $(shell dpkg-buildflags --get LDFLAGS) CFLAGS += -Wall -W +BUILD_DATE=$(shell dpkg-parsechangelog --show-field Date) build: $(checkdir) @@ -67,6 +68,8 @@ endif dpkg-gencontrol -isp chown -R root.root debian/tmp chmod -R g-ws debian/tmp + find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' dpkg --build debian/tmp .. define checkdir ___ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds