Debian Bug report logs - #1003316
python-cooler: reproducible builds: tests tarball includes file mode and timestamps

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: python-cooler: reproducible builds: tests tarball includes file mode and timestamps

Date: Fri, 07 Jan 2022 21:20:51 -0800

[Message part 1 (text/plain, inline)]

Source: python-cooler
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: umask timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The generated tarball /usr/share/doc/python3-cooler/tests.tar.xz
includes the file mode and timestamp of the archived files:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/python-cooler.html

  drwxr-xr-x ... 2023-02-03·11:19:21.000000·tests/
vs.
  drwxrwxr-x ... 2022-01-01·05:00:28.000000·tests/


The attached patch fixes this by passing the --mode and --mtime
arguments to the tar command used in debian/rules.


Thanks for maintaining python-cooler!


live well,
  vagrant

[0001-debian-rules-Pass-mtime-and-mode-arguments-to-tar-fo.patch (text/x-diff, inline)]

From 937dcde974e616b7d96592db3d38e66cc364f60f Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sat, 8 Jan 2022 05:12:21 +0000
Subject: [PATCH] debian/rules: Pass --mtime and --mode arguments to tar for
 example tests tarball.

https://reproducible-builds.org/docs/archives/
---
 debian/rules | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index efbc531..3d40ce9 100755
--- a/debian/rules
+++ b/debian/rules
@@ -9,4 +9,4 @@ export PYBUILD_NAME=cooler
 
 override_dh_installexamples:
 	dh_installexamples
-	cd debian/python3-$(PYBUILD_NAME)-examples/usr/share/doc/python3-$(PYBUILD_NAME) && tar --create --owner=0 --group=0 --numeric-owner --sort=name --file tests.tar.xz tests && rm -rf tests
+	cd debian/python3-$(PYBUILD_NAME)-examples/usr/share/doc/python3-$(PYBUILD_NAME) && tar --create --owner=0 --group=0 --numeric-owner --sort=name --mtime="@$(SOURCE_DATE_EPOCH)" --mode=u=wrX,og=rX --file tests.tar.xz tests && rm -rf tests
-- 
2.30.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1003316-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1003316-close@bugs.debian.org

Subject: Bug#1003316: fixed in python-cooler 0.8.11-2

Date: Mon, 10 Jan 2022 07:33:30 +0000

Source: python-cooler
Source-Version: 0.8.11-2
Done: Andreas Tille <tille@debian.org>

We believe that the bug you reported is fixed in the latest version of
python-cooler, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1003316@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated python-cooler package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 10 Jan 2022 08:15:46 +0100
Source: python-cooler
Architecture: source
Version: 0.8.11-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 1003316
Changes:
 python-cooler (0.8.11-2) unstable; urgency=medium
 .
   [ Vagrant Cascadian ]
   * Do not include file mode and timestamps in tarball
     Closes: #1003316
Checksums-Sha1:
 ba0d851a794cac53ca3d14ba62710ac2354722dc 2464 python-cooler_0.8.11-2.dsc
 fada8a5b0d86f7d66612e4479167dc311fef9e89 5884 python-cooler_0.8.11-2.debian.tar.xz
 eb4dabc4d291c6ea2b310f49e68bdbf3cd430815 8158 python-cooler_0.8.11-2_amd64.buildinfo
Checksums-Sha256:
 79fabf0c4b51499270324962e7bf0d2fd25a55c6a73a88e6fa697555ab3e5900 2464 python-cooler_0.8.11-2.dsc
 02684ef09e551930c8ab66b5fd9335ce5e0456a66b5a764ef956529cbde358d4 5884 python-cooler_0.8.11-2.debian.tar.xz
 4375933dde9e78de1b6d8c70552576d7a89d793baca6aeccce69ddb5175c51a1 8158 python-cooler_0.8.11-2_amd64.buildinfo
Files:
 bed4af2b6e0d739d4ce9f79c2eb2811e 2464 science optional python-cooler_0.8.11-2.dsc
 3012ceab144c547147ca40af8a5f4a3f 5884 science optional python-cooler_0.8.11-2.debian.tar.xz
 e9cb762a298516a1bb969b9c690cc1ec 8158 science optional python-cooler_0.8.11-2_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=/+3H
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.