Debian Bug report logs - #1006252
cctbx: reproducible builds: Timestamps embedded in boost_python_meta_ext.so.0.0.1

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: cctbx: reproducible builds: Timestamps embedded in boost_python_meta_ext.so.0.0.1

Date: Mon, 21 Feb 2022 16:58:14 -0800

[Message part 1 (text/plain, inline)]

Source: cctbx
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in the boost_python_meta_ext.so.0.0.1
library and the corresponding debug symbols:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/cctbx.html

  /usr/lib/x86_64-linux-gnu/boost_python_meta_ext.so.0.0.1

  __TIMESTAMP__·=·Thu·Mar·23·02:40:09·2023
vs.
  __TIMESTAMP__·=·Fri·Feb·18·22:37:54·2022

The attached patch fixes this by removing the timestamp.

With this patch applied, cctbx should build reproducibly on
tests.reproducible-builds.org!


An alternate approach would be to replace it with the timestamp
specified in SOURCE_DATE_EPOCH, if for some reason this binary
absolutely needs an embedded timestamp:

  https://reproducible-builds.org/docs/source-date-epoch/


Thanks for maintaining cctbx!

live well,
  vagrant

[0001-boost_adaptbx-meta_ext.cpp-Remove-embedded-timestamp.patch (text/x-diff, inline)]

From e554ea5ffab260208f9ce81433005e612dc85bf5 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 22 Feb 2022 00:47:41 +0000
Subject: [PATCH] boost_adaptbx/meta_ext.cpp: Remove embedded timestamp.

https://reproducible-builds.org/docs/timestamps/
---
 boost_adaptbx/meta_ext.cpp | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/boost_adaptbx/meta_ext.cpp b/boost_adaptbx/meta_ext.cpp
index 5d2f45b..19f5782 100644
--- a/boost_adaptbx/meta_ext.cpp
+++ b/boost_adaptbx/meta_ext.cpp
@@ -207,9 +207,6 @@ namespace {
 #if defined(__TIME__)
     result += "__TIME__ = " __TIME__ "\n";
 #endif
-#if defined(__TIMESTAMP__)
-    result += "__TIMESTAMP__ = " __TIMESTAMP__ "\n";
-#endif
 #if defined(__alpha__)
     result += "__alpha__\n";
 #endif
-- 
2.30.2

[signature.asc (application/pgp-signature, inline)]

Message #18 received at 1006252-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1006252-close@bugs.debian.org

Subject: Bug#1006252: fixed in cctbx 2021.12+ds1-3

Date: Thu, 03 Mar 2022 10:49:22 +0000

Source: cctbx
Source-Version: 2021.12+ds1-3
Done: Neil Williams <codehelp@debian.org>

We believe that the bug you reported is fixed in the latest version of
cctbx, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1006252@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Neil Williams <codehelp@debian.org> (supplier of updated cctbx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 03 Mar 2022 09:36:43 +0000
Source: cctbx
Architecture: source
Version: 2021.12+ds1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Neil Williams <codehelp@debian.org>
Closes: 1006252
Changes:
 cctbx (2021.12+ds1-3) unstable; urgency=medium
 .
   * Apply patch from reproducible builds: Timestamps embedded in
     boost_python_meta_ext.so.0.0.1 (Closes: #1006252)
Checksums-Sha1:
 577733cfed42a0eba4af1ecc8d1e2e5a01f2148a 2727 cctbx_2021.12+ds1-3.dsc
 b4959396fb25623ec18a529408a8cc579deff464 23212 cctbx_2021.12+ds1-3.debian.tar.xz
 dfe969c3d5525bb7211afa6d43b6d57921d3e4d0 13509 cctbx_2021.12+ds1-3_amd64.buildinfo
Checksums-Sha256:
 aa310c9b42e91947f4141d4ce853de80789cc673bfdaf349251ed60e05ddcbd6 2727 cctbx_2021.12+ds1-3.dsc
 77d289601e11844e1160c01b33addd1f0f690cbc533d989e40ad9f271cc22571 23212 cctbx_2021.12+ds1-3.debian.tar.xz
 490e97c5489e5a45e2f1a271e4265252ebf3fa056141d824a97d5df569420200 13509 cctbx_2021.12+ds1-3_amd64.buildinfo
Files:
 00cc0105712e68d852f353d2d9790d74 2727 science optional cctbx_2021.12+ds1-3.dsc
 a6494cce973fcfe380835ac68d39623e 23212 science optional cctbx_2021.12+ds1-3.debian.tar.xz
 4e517fc639809928f043c3872592300e 13509 science optional cctbx_2021.12+ds1-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=F/4X
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.