Re: [Reproducible-builds] Bug#803482: ncurses: please make the build reproducible, take two

2015-10-31 Thread Sven Joachim
On 2015-10-31 10:48 +0100, Esa Peuha wrote:

> On Fri, Oct 30, 2015 at 10:44 PM, Sven Joachim  wrote:
>> Certainly aclocal.m4 is _not_ a generated file in ncurses,
>
> Not in the Debian package, but upstream must be generating it from
> configure.in by running aclocal.

I don't think so.

>> Possible
>> solutions are to run dh_strip_nondeterminism on the -dbg packages, or to
>> just remove the static debug libraries (I don't think they actually
>> work anyway, see #556378 for reasons).
>
> I don't know if the static debug libraries work or not (wouldn't the
> latter mean that #556378 isn't really fixed?), but I think
> dh_strip_nondeterminism is probably the best option here.

I've tested linking a program with "-lncurses_g -ltinfo_g" today, and it
didn't work, so my conclusion is that nobody has been using the static
debug libraries for ages.  Hence I'm going to remove them, unless
somebody comes up with a fix to the build system that removes the
necessity of building the static libraries separately.

Cheers,
   Sven

___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds


Re: [Reproducible-builds] Bug#803482: ncurses: please make the build reproducible, take two

2015-10-31 Thread Esa Peuha
On Fri, Oct 30, 2015 at 10:44 PM, Sven Joachim  wrote:
> Certainly aclocal.m4 is _not_ a generated file in ncurses,

Not in the Debian package, but upstream must be generating it from
configure.in by running aclocal.

> Possible
> solutions are to run dh_strip_nondeterminism on the -dbg packages, or to
> just remove the static debug libraries (I don't think they actually
> work anyway, see #556378 for reasons).

I don't know if the static debug libraries work or not (wouldn't the
latter mean that #556378 isn't really fixed?), but I think
dh_strip_nondeterminism is probably the best option here.

___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds


Re: [Reproducible-builds] Bug#803482: ncurses: please make the build reproducible, take two

2015-10-30 Thread Sven Joachim
On 2015-10-30 14:32 +0100, Esa Peuha wrote:

> While ncurses 6.0+20151017-1 fixed the earlier reproducibility bug
> #801864, it also introduced a reproducibility regression; now all the
> lib*_g.a files in the lib*-dbg packages are affected by the umask,
> uid/gid and build time of the build environment. The reason for this
> regression is upstream patch 20151010, specifically the update of
> CF_AR_FLAGS in aclocal.m4 (which is propagated to configure) that
> causes the static libraries to be generated with "ar -curvU".

The NEWS entry for the patch in question mentions a reason:

,
|   + add workaround for breakage of POSIX makefiles by recent binutils
| change.
`

This seems to refer to make's implicit rule for archive members[1]:

,
| If a target or prerequisite contains parentheses, it shall be treated as
| a member of an archive library. For the lib( member .o) expression lib
| refers to the name of the archive library and member .o to the member
| name. The application shall ensure that the member is an object file
| with the .o suffix. The modification time of the expression is the
| modification time for the member as kept in the archive library; see ar.
`

> I don't
> really know where this should be fixed (patching aclocal.m4 doesn't
> seem right since it's a generated file) so I can't suggest a patch.

Certainly aclocal.m4 is _not_ a generated file in ncurses, but given the
above I'd be reluctant to revert the upstream change.  Possible
solutions are to run dh_strip_nondeterminism on the -dbg packages, or to
just remove the static debug libraries (I don't think they actually
work anyway, see #556378 for reasons).

Cheers,
   Sven


1. http://pubs.opengroup.org/onlinepubs/009695399/utilities/make.html

___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds


[Reproducible-builds] Bug#803482: ncurses: please make the build reproducible, take two

2015-10-30 Thread Esa Peuha
Source: ncurses
Version: 6.0+20151024-1
Severity: wishlist
User: reproducible-builds@lists.alioth.debian.org
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While ncurses 6.0+20151017-1 fixed the earlier reproducibility bug
#801864, it also introduced a reproducibility regression; now all the
lib*_g.a files in the lib*-dbg packages are affected by the umask,
uid/gid and build time of the build environment. The reason for this
regression is upstream patch 20151010, specifically the update of
CF_AR_FLAGS in aclocal.m4 (which is propagated to configure) that
causes the static libraries to be generated with "ar -curvU". I don't
really know where this should be fixed (patching aclocal.m4 doesn't
seem right since it's a generated file) so I can't suggest a patch.

___
Reproducible-builds mailing list
Reproducible-builds@lists.alioth.debian.org
http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds