Source: libsdl2-gfx Version: 1.0.1+dfsg-3 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: fileordering timestamps X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Hi! While working on the "reproducible builds" effort [1], we have noticed that libsdl2-gfx could not be built reproducibly. The example tarball still has time and order variations. The attached patch fixes this by telling tar to sort the file list and clamp the mtime at SOURCE_DATE_EPOCH. Regards, Reiner [1]: https://wiki.debian.org/ReproducibleBuilds
diff --git a/debian/control b/debian/control
index 2e710d7..1a0beeb 100644
--- a/debian/control
+++ b/debian/control
@@ -13,6 +13,7 @@ Build-Depends: autoconf,
dh-autoreconf,
libsdl2-dev,
libtool,
+ tar (>= 1.28),
pkg-config
Build-Depends-Indep: doxygen
Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-sdl/packages/libsdl2-gfx.git
diff --git a/debian/rules b/debian/rules
index f6272fe..b4f2b2a 100755
--- a/debian/rules
+++ b/debian/rules
@@ -31,7 +31,7 @@ override_dh_install:
override_dh_auto_build:
dh_auto_build
- tar -cvz --transform='s,^test,examples,' -f debian/examples.tar.gz --mode=go=rX,u+rw,a-s --owner=root --group=root --numeric-owner test
+ tar -cvz --transform='s,^test,examples,' -f debian/examples.tar.gz --clamp-mtime --mtime="@$(SOURCE_DATE_EPOCH)" --sort=name --mode=go=rX,u+rw,a-s --owner=root --group=root --numeric-owner test
override_dh_auto_build-indep:
doxygen Docs/html.doxyfile
signature.asc
Description: Digital signature
_______________________________________________ Reproducible-builds mailing list Reproducible-builds@lists.alioth.debian.org http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/reproducible-builds
