Debian Bug report logs - #1003993
cryptominisat: reproducible-builds: BuildId differences triggered by RPATH

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: cryptominisat: reproducible-builds: BuildId differences triggered by RPATH

Date: Tue, 18 Jan 2022 17:16:45 -0800

[Message part 1 (text/plain, inline)]

Source: cryptominisat
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The RPATH contains the build path resulting in different buildid:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/cryptominisat.html

The attached patch to debian/rules passes
-DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via a dh_auto_configure override,
which should use a relative path for RPATH.

Alternately, updating the packaging to debhelper compat level 14 should
fix this, although it is currently an experimental compat level.

With this patch applied, cryptominisat should build reproducibly on
tests.reproducible-builds.org!

Thanks for maintaining cryptominisat!

live well,
  vagrant

[0001-debian-rules-Pass-DCMAKE_BUILD_RPATH_USE_ORIGIN-ON-v.patch (text/x-diff, inline)]

From d7cc13a8591f27a4d1bba970ed5b772c4f22aeb8 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 19 Jan 2022 01:14:28 +0000
Subject: [PATCH] debian/rules: Pass -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON via
 dh_auto_configure override.

This avoids embedding the full path in RPATH, which triggers BuildId
differences.

https://tests.reproducible-builds.org/debian/issues/unstable/cmake_rpath_contains_build_path_issue.html
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index de585fc..82ecfa8 100755
--- a/debian/rules
+++ b/debian/rules
@@ -13,3 +13,6 @@ override_dh_auto_configure:
 override_dh_install:
 	find debian/tmp -name "*.cmake" -delete
 	dh_install
+
+override_dh_auto_configure:
+	dh_auto_configure -- -DCMAKE_BUILD_RPATH_USE_ORIGIN=ON
-- 
2.34.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1003993-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1003993-close@bugs.debian.org

Subject: Bug#1003993: fixed in cryptominisat 5.8.0+dfsg1-2

Date: Tue, 22 Feb 2022 13:34:00 +0000

Source: cryptominisat
Source-Version: 5.8.0+dfsg1-2
Done: Julien Puydt <jpuydt@debian.org>

We believe that the bug you reported is fixed in the latest version of
cryptominisat, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1003993@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Julien Puydt <jpuydt@debian.org> (supplier of updated cryptominisat package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 22 Feb 2022 14:17:45 +0100
Source: cryptominisat
Architecture: source
Version: 5.8.0+dfsg1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Julien Puydt <jpuydt@debian.org>
Closes: 1003993
Changes:
 cryptominisat (5.8.0+dfsg1-2) unstable; urgency=medium
 .
   * Try to make the build reproducible (Closes: #1003993).
   * Bump standards-version to 4.6.0.
   * Document reproducible-build.patch as Debian-specific.
Checksums-Sha1:
 634a2ad66f37ad1765849f5d7983b9fab3c7f4a3 2408 cryptominisat_5.8.0+dfsg1-2.dsc
 7d741c4dbe968dd52427c310142d9ed570f0eea2 6264 cryptominisat_5.8.0+dfsg1-2.debian.tar.xz
 e582621ccf5f929a9e0c1cacf1b3646b3225cb93 8411 cryptominisat_5.8.0+dfsg1-2_source.buildinfo
Checksums-Sha256:
 10aceca40908d4d4247c4edd9987e044a4fdb8653d43f9160eccd0fb1588c806 2408 cryptominisat_5.8.0+dfsg1-2.dsc
 cc55a518449703e3d2695cc59a3fcaeb4cf908aa73d207596800843c1d0be69a 6264 cryptominisat_5.8.0+dfsg1-2.debian.tar.xz
 eeafbe6f6c94fa6e419d77fa934fcf10e13277043fd4aa8b47678ea567269fef 8411 cryptominisat_5.8.0+dfsg1-2_source.buildinfo
Files:
 55f6a2505dca543462059cc245ec44c9 2408 math optional cryptominisat_5.8.0+dfsg1-2.dsc
 51986ea3ab347f952c9450418e4aa869 6264 math optional cryptominisat_5.8.0+dfsg1-2.debian.tar.xz
 b6d981e9bf5c8df6c76c1e58685a9e87 8411 math optional cryptominisat_5.8.0+dfsg1-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=A3lu
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.