[Reproducible-builds] Bug#815723: fonts-justin: please make the build reproducible (timestamps)

[Scarlett Clark]

Package: fonts-dustin
Version: 20030517-10
Severity: wishlist
Tags: patch

User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that fonts-justin could not be built reproducibly.

The attached patch sets TZ=UTC prior to unzip call to achieve consistent
timezones in the timestamps after unpacking.
fonts-justin can be built reproducibly in our current experimental framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds



-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru fonts-dustin-20030517/debian/changelog fonts-dustin-20030517/debian/changelog
--- fonts-dustin-20030517/debian/changelog	2013-05-11 14:14:04.0 -0700
+++ fonts-dustin-20030517/debian/changelog	2016-02-23 16:30:44.0 -0800
@@ -1,3 +1,10 @@
+fonts-dustin (20030517-10.0~reproducible1) UNRELEASED; urgency=medium
+
+  * Add export TZ=UTC to fix timestamp timezone inconsistancy
+to produce a reprociblbe build. 
+
+ -- Scarlett Clark   Tue, 23 Feb 2016 16:29:11 -0800
+
 fonts-dustin (20030517-10) unstable; urgency=low
 
   * Bump standards to 3.9.4 (checked)
diff -Nru fonts-dustin-20030517/debian/rules fonts-dustin-20030517/debian/rules
--- fonts-dustin-20030517/debian/rules	2013-05-11 14:06:46.0 -0700
+++ fonts-dustin-20030517/debian/rules	2016-02-23 18:17:50.0 -0800
@@ -5,11 +5,11 @@
 override_dh_install:
 	# Installing package
 	install -d -m 0755 debian/fonts-dustin/usr/share/fonts/truetype/dustin
-
+	
 	cd debian/fonts-dustin/usr/share/fonts/truetype/dustin && \
 	for ARCHIVE in $(CURDIR)/*.zip; \
 	do \
-		unzip $$ARCHIVE '*.ttf' || exit 1; \
+		TZ=UTC unzip $$ARCHIVE '*.ttf' || exit 1; \
 	done
 
 	# Fixing file names
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

[Reproducible-builds] Bug#815716: pairs: please make the build reproducible (username)

[Scarlett Clark]

Package: pairs
Version: 4.14.1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: username

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that pairs could not be built reproducibly.

The attached patch removes extra timestamps from the build system 
and
ensure a stable file order when creating the source archive. Once 
applied,
pairs can be built reproducibly in our current experimental framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 4.3.0-1-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
diff -Nru pairs-4.14.1/debian/changelog pairs-4.14.1/debian/changelog
--- pairs-4.14.1/debian/changelog	2014-09-17 00:44:43.0 -0700
+++ pairs-4.14.1/debian/changelog	2016-02-23 11:38:38.0 -0800
@@ -1,3 +1,10 @@
+pairs (4:4.14.1-1.0~reproducible1) UNRELEASED; urgency=medium
+
+  * Add --owner=root --group=root --numeric-owner to tar command line
+patch to make package build reproducibly. 
+
+ -- Scarlett Clark   Tue, 23 Feb 2016 11:35:26 -0800
+
 pairs (4:4.14.1-1) unstable; urgency=medium
 
   * New upstream release (4.14.1).
diff -Nru pairs-4.14.1/debian/patches/series pairs-4.14.1/debian/patches/series
--- pairs-4.14.1/debian/patches/series	1969-12-31 16:00:00.0 -0800
+++ pairs-4.14.1/debian/patches/series	2016-02-23 13:12:06.0 -0800
@@ -0,0 +1 @@
+update_tar_flags_reproducibility_timestamps.diff
diff -Nru pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff
--- pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff	1969-12-31 16:00:00.0 -0800
+++ pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff	2016-02-23 13:09:07.0 -0800
@@ -0,0 +1,18 @@
+Description: Add --owner=root --group=root --numeric-owner to tar command line. 
+ To fix buid reproducibility. 
+Forwarded: TBD
+Author: Scarlett Clark 
+
+diff --git a/themes/CMakeLists.txt b/themes/CMakeLists.txt
+index fa3ae67..8597ccb 100644
+--- a/themes/CMakeLists.txt
 b/themes/CMakeLists.txt
+@@ -47,7 +47,7 @@ function(create_theme _baseName)
+ else(WIN32)
+ add_custom_command(OUTPUT ${_template}
+ COMMAND tar ARGS cjf
+-${_template} ${_files}
++${_template} --owner=root --group=root --numeric-owner ${_files}
+ DEPENDS "${CMAKE_CURRENT_SOURCE_DIR}/${_baseName}"
+ WORKING_DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}/${_baseName}"
+ )
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

Re: [Reproducible-builds] Bug#815171: Bug#815171: Bug#815171: Bug#815171: diffoscope: build time tests fail on armhf

[Jérémy Bobbio]

Holger Levsen:
> But given the above (100% build failure on armhf and 33% 
> failure on am64) I now think this is indeed a serious 
> issue, thus it should be treated as such. 

I've removed myself from Uploaders. As you are listed there, feel free
to fix the bug as you see fit.

-- 
Lunar.''`. 
lu...@debian.org: :Ⓐ  :  # apt-get install anarchism
`. `'` 
  `-   


signature.asc
Description: Digital signature
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

[Reproducible-builds] Bug#815171: Bug#815171: Bug#815171: Bug#815171: diffoscope: build time tests fail on armhf

[Holger Levsen]

Hi,

On Montag, 22. Februar 2016, Jérémy Bobbio wrote:
> Because it's just a test that is brittle. It doesn't 
affect normal use
> of the installed package and does only prevent a 
successful build one
> times out of ten.

only counting version 47+48, it caused 5 build failures 
out of 5 build attempts on reproducible.debian.net on 
armhf and 3 build failures out of 9 build attempts on 
amd64, thus I will upgrade the severity of this bug to 
serious again.
 
(I havent checked closely whether due to the same issue 
but versions 45+46 also showed random build successes and 
failures on armhf…)

https://tests.reproducible-
builds.org/history/diffoscope.html is where I got this 
numbers from.

> To please the cruel god of FTBFS I can also disable 
running the test
> suite entirely at build time. 

WTF. I'm not working here to please the "cruel gods of 
reproducibility" but because I think it's a worthwhile 
goal. Similar, FTBFS is a serious issue.

Did you really have to ridicule my argument? :-(

"The cruel gods of FTBFS" might be a funny expression in 
general, but it is not, if you are being told your 
bugreport is silly. Think about it.

> I believe this would be the wrong thing to
> do, but if you insist, I'll just do that.

No, what I initially wanted (well, after your first 
reply…) was that this bug was _not_ treated as a "normal" 
one, but as an "important" one, that's all. 

(And to me that's an important disctinction. I read the 
downgrade to "normal" as "bah, I dont care" while I would 
have read "important" as "sure, we will fix this" but it's 
not that serious as the package works fine and we're still 
in the development phase of stretch".)

But given the above (100% build failure on armhf and 33% 
failure on am64) I now think this is indeed a serious 
issue, thus it should be treated as such. 

If your only solution is to disable the test, so be it. 
I'd rather not have this test than having this package 
unreproducibly failing to build.

We cannot^wmust not point fingers^w^wfile serious bugs at 
other packages while having other standards for our 
packages.


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

[Reproducible-builds] Processed: as explained but feel free to downgrade to important…

[Debian Bug Tracking System]

Processing commands for cont...@bugs.debian.org:

> severity 815171 serious
Bug #815171 [src:diffoscope] diffoscope: tests for directory are brittle
Severity set to 'serious' from 'normal'
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
815171: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815171
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems

___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds

Re: [Reproducible-builds] package uploaded to our repo

[Holger Levsen]

Hi,

On Samstag, 20. Februar 2016, Reiner Herrmann wrote:
> strip-nondeterminism_0.015-1.0~reproducible1.dsc has just 
been uploaded to

shouldnt this go to sid instead?


cheers,
Holger


signature.asc
Description: This is a digitally signed message part.
___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds