Debian Bug report logs -
#1003808
libvcflib: reproducible-builds: BuildId differences triggered by RPATH
Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 16 Jan 2022 01:51:01 UTC
Severity: normal
Tags: patch
Fixed in version libvcflib/1.0.2+dfsg-5
Done: Andreas Tille <tille@debian.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>:
Bug#1003808; Package src:libvcflib.
(Sun, 16 Jan 2022 01:51:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>.
(Sun, 16 Jan 2022 01:51:03 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: libvcflib
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
The RPATH contains the build path resulting in different buildid:
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/libvcflib.html
The attached patch to debian/rules passes
-DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via a dh_auto_configure override,
which should use a relative path for RPATH.
Alternately, updating the packaging to debhelper compat level 14 should
fix this, although it is currently an experimental compat level.
With this patch applied, libvcflib should build reproducibly on
tests.reproducible-builds.org!
Thanks for maintaining libvcflib!
live well,
vagrant
[0001-debian-rules-Pass-DCMAKE_BUILD_RPATH_USE_ORIGIN-ON-v.patch (text/x-diff, inline)]
From 28fa4ee3a093404e5bb38df628660a8c004f3666 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sat, 15 Jan 2022 23:00:25 +0000
Subject: [PATCH] debian/rules: Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via
dh_auto_configure override.
This avoids embedding the full path in RPATH, which triggers BuildId
differences.
https://tests.reproducible-builds.org/debian/issues/unstable/cmake_rpath_contains_build_path_issue.html
---
debian/rules | 1 +
1 file changed, 1 insertion(+)
diff --git a/debian/rules b/debian/rules
index c66b57f..03cb3e7 100755
--- a/debian/rules
+++ b/debian/rules
@@ -20,6 +20,7 @@ endif
override_dh_auto_configure:
dh_auto_configure -- \
-DDOCS=$(BUILDDOC) \
+ -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON \
-DPYTHON=ON
# https://github.com/AcademySoftwareFoundation/Imath/issues/226
--
2.34.1
[signature.asc (application/pgp-signature, inline)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>:
Bug#1003808; Package src:libvcflib.
(Mon, 17 Jan 2022 12:33:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Andreas Tille <andreas@an3as.eu>:
Extra info received and forwarded to list. Copy sent to Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>.
(Mon, 17 Jan 2022 12:33:02 GMT) (full text, mbox, link).
Message #10 received at 1003808@bugs.debian.org (full text, mbox, reply):
Hi Vagrant
are you sure you picked the right code to patch? The code in Git[1]
is very different from the chunk your patch claims to replace. While
I could easily add -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON to dh_auto_configure
but I wanted to make sure that there is no other package you intended
to fix that way.
Kind regards
Andreas.
[1] https://salsa.debian.org/med-team/libvcflib/-/blob/master/debian/rules#L22
Am Sat, Jan 15, 2022 at 05:48:50PM -0800 schrieb Vagrant Cascadian:
> Source: libvcflib
> Severity: normal
> Tags: patch
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: buildpath
> X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
>
> The RPATH contains the build path resulting in different buildid:
>
> https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/libvcflib.html
>
> The attached patch to debian/rules passes
> -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via a dh_auto_configure override,
> which should use a relative path for RPATH.
>
> Alternately, updating the packaging to debhelper compat level 14 should
> fix this, although it is currently an experimental compat level.
>
>
> With this patch applied, libvcflib should build reproducibly on
> tests.reproducible-builds.org!
>
>
> Thanks for maintaining libvcflib!
>
>
> live well,
> vagrant
> From 28fa4ee3a093404e5bb38df628660a8c004f3666 Mon Sep 17 00:00:00 2001
> From: Vagrant Cascadian <vagrant@reproducible-builds.org>
> Date: Sat, 15 Jan 2022 23:00:25 +0000
> Subject: [PATCH] debian/rules: Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via
> dh_auto_configure override.
>
> This avoids embedding the full path in RPATH, which triggers BuildId
> differences.
>
> https://tests.reproducible-builds.org/debian/issues/unstable/cmake_rpath_contains_build_path_issue.html
> ---
> debian/rules | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/debian/rules b/debian/rules
> index c66b57f..03cb3e7 100755
> --- a/debian/rules
> +++ b/debian/rules
> @@ -20,6 +20,7 @@ endif
> override_dh_auto_configure:
> dh_auto_configure -- \
> -DDOCS=$(BUILDDOC) \
> + -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON \
> -DPYTHON=ON
>
> # https://github.com/AcademySoftwareFoundation/Imath/issues/226
> --
> 2.34.1
>
> _______________________________________________
> Debian-med-packaging mailing list
> Debian-med-packaging@alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-med-packaging
--
http://fam-tille.de
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>:
Bug#1003808; Package src:libvcflib.
(Mon, 17 Jan 2022 19:21:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Extra info received and forwarded to list. Copy sent to Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>.
(Mon, 17 Jan 2022 19:21:03 GMT) (full text, mbox, link).
Message #15 received at 1003808@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
On 2022-01-17, Andreas Tille wrote:
> are you sure you picked the right code to patch? The code in Git[1]
> is very different from the chunk your patch claims to replace. While
> I could easily add -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON to dh_auto_configure
> but I wanted to make sure that there is no other package you intended
> to fix that way.
Oops, must have gotten the patch mixed up with another package!
The originally intended patch should be attached.
live well,
vagrant
[0001-debian-rules-Pass-DCMAKE_BUILD_RPATH_USE_ORIGIN-ON-v.patch (text/x-diff, inline)]
From b7e78e09b4c2f4589f33f987718640a49d5f719f Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 16 Jan 2022 01:44:10 +0000
Subject: [PATCH] debian/rules: Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via
dh_auto_configure override.
This avoids embedding the full path in RPATH, which triggers BuildId
differences.
https://tests.reproducible-builds.org/debian/issues/unstable/cmake_rpath_contains_build_path_issue.html
---
debian/rules | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/debian/rules b/debian/rules
index f8da7b8..1e87b1f 100755
--- a/debian/rules
+++ b/debian/rules
@@ -20,7 +20,7 @@ override_dh_auto_clean:
dh_auto_clean || true
override_dh_auto_configure:
- dh_auto_configure -- -DOPENMP=ON
+ dh_auto_configure -- -DOPENMP=ON -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON
override_dh_auto_build:
dh_auto_build
--
2.34.1
[signature.asc (application/pgp-signature, inline)]
Reply sent
to Andreas Tille <tille@debian.org>:
You have taken responsibility.
(Mon, 17 Jan 2022 21:09:04 GMT) (full text, mbox, link).
Notification sent
to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer.
(Mon, 17 Jan 2022 21:09:04 GMT) (full text, mbox, link).
Message #20 received at 1003808-close@bugs.debian.org (full text, mbox, reply):
Source: libvcflib
Source-Version: 1.0.2+dfsg-5
Done: Andreas Tille <tille@debian.org>
We believe that the bug you reported is fixed in the latest version of
libvcflib, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1003808@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated libvcflib package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Mon, 17 Jan 2022 20:53:03 +0100
Source: libvcflib
Architecture: source
Version: 1.0.2+dfsg-5
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 1003808
Changes:
libvcflib (1.0.2+dfsg-5) unstable; urgency=medium
.
[ Vagrant Cascadian ]
* Enable reproducible by avoid to embed the full path in RPATH
Closes: #1003808
.
[ Andreas Tille ]
* Add missing build dependency on dh addon.
Checksums-Sha1:
6a0d024c4f7796a0297d530bae4bb44330ae0139 2301 libvcflib_1.0.2+dfsg-5.dsc
16f0767276656e27392c7e3b32f55810f717f7eb 9508 libvcflib_1.0.2+dfsg-5.debian.tar.xz
322e24c31ff36c02c89919a428000b5f5047cad6 8630 libvcflib_1.0.2+dfsg-5_amd64.buildinfo
Checksums-Sha256:
190e3eba15e0886dbb052a64395ed4c335fb4495a3b3a12bd5968843b941b320 2301 libvcflib_1.0.2+dfsg-5.dsc
3afc75dad5250bef2afed1928eb7b3c2620d2e00afc1a3a692580f802db57da2 9508 libvcflib_1.0.2+dfsg-5.debian.tar.xz
99362783b91d80316c6a55d43c364538d10610bd0d847ee407e0f4586182b299 8630 libvcflib_1.0.2+dfsg-5_amd64.buildinfo
Files:
16a5d25386f33fbf397609c88a35f20e 2301 science optional libvcflib_1.0.2+dfsg-5.dsc
ee445813f2d594c2693ea84c7c30e8d4 9508 science optional libvcflib_1.0.2+dfsg-5.debian.tar.xz
3623dc9e947484268cfafb486530580b 8630 science optional libvcflib_1.0.2+dfsg-5_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=60FJ
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Thu, 17 Feb 2022 07:24:51 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed May 17 11:03:59 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.