Package: debian-keyring Version: 2015.03.04 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi, While working on the "reproducible builds" effort [1], we have noticed that debian-keyring could not be built reproducibly. The attached patch removes timestamps from the build system. Once applied, debian-keyring can be built reproducibly in our current experimental framework. I'm sorry for this second bug, I hope we have not bothered you too much. [1]: https://wiki.debian.org/ReproducibleBuilds -- regards, Mattia Rizzolo GPG Key: 4096R/B9444540 http://goo.gl/I8TMB more about me: http://mapreri.org Launchpad User: https://launchpad.net/~mapreri Ubuntu Wiki page: https://wiki.ubuntu.com/MattiaRizzolo
diff -Nru debian-keyring-2015.03.04/debian/changelog debian-keyring-2015.03.04+nmu1/debian/changelog --- debian-keyring-2015.03.04/debian/changelog 2015-03-04 16:22:02.000000000 +0100 +++ debian-keyring-2015.03.04+nmu1/debian/changelog 2015-03-06 22:20:17.000000000 +0100 @@ -1,3 +1,10 @@ +debian-keyring (2015.03.04+nmu1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * Really made the package build reproducible. + + -- Mattia Rizzolo <mat...@mapreri.org> Fri, 06 Mar 2015 22:20:01 +0100 + debian-keyring (2015.03.04) unstable; urgency=medium [ Gunnar Wolf ] diff -Nru debian-keyring-2015.03.04/debian/rules debian-keyring-2015.03.04+nmu1/debian/rules --- debian-keyring-2015.03.04/debian/rules 2015-03-04 16:22:02.000000000 +0100 +++ debian-keyring-2015.03.04+nmu1/debian/rules 2015-03-06 22:19:54.000000000 +0100 @@ -9,6 +9,8 @@ # paternity under the Copyright, Designs and Patents Act 1988.) # This file may have to be extensively modified +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + install_dir=install -d -m 755 install_file=install -m 644 install_script=install -m 755 @@ -53,6 +55,9 @@ cd debian/tmp && find . -type f ! -regex '.*DEBIAN/.*' -printf '%P\0' | xargs -r0 md5sum > DEBIAN/md5sums + find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \ + xargs -0r touch --no-dereference --date='$(BUILD_DATE)' + dpkg --build debian/tmp .. binary-arch:
signature.asc
Description: Digital signature
_______________________________________________ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
