Source: refpolicy Version: 2:2.20140421-9 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi, While working on the "reproducible builds" effort [1], we have noticed that refpolicy could not be built reproducibly. The attached patch removes timestamps from the build system. Once applied, refpolicy can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
diff -urNad refpolicy.orig/refpolicy-2.20140421/debian/rules refpolicy/refpolicy-2.20140421/debian/rules --- refpolicy.orig/refpolicy-2.20140421/debian/rules 2015-02-12 12:32:58.370078238 +0000 +++ refpolicy/refpolicy-2.20140421/debian/rules 2015-02-12 13:31:55.910717307 +0000 @@ -10,6 +10,8 @@ UBAC_mls = n UNK_PERMS_mls = deny +BUILD_DATE := $(shell dpkg-parsechangelog --show-field Date) + %: dh $@ @@ -152,6 +154,6 @@ $(CURDIR)/debian/tmp/etc/selinux/default/src/policy/build.conf (cd $(CURDIR)/debian/tmp/etc/selinux/default/src/; mv policy selinux-policy-src; \ rm selinux-policy-src/support/pyplate.pyc; \ - tar zfc $(CURDIR)/debian/tmp/usr/src/selinux-policy-src.tar.gz selinux-policy-src) + GZIP="-9n" tar zfc $(CURDIR)/debian/tmp/usr/src/selinux-policy-src.tar.gz --mtime="$(BUILD_DATE)" selinux-policy-src) rm -rf $(CURDIR)/debian/tmp/etc/selinux/default/src/ touch $@
_______________________________________________ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds