Debian Bug report logs - #1007137
libranlip: reproducible-builds: BuildId differences in libranlip.so.1.0.0

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: libranlip: reproducible-builds: BuildId differences in libranlip.so.1.0.0

Date: Fri, 11 Mar 2022 12:11:40 -0800

[Message part 1 (text/plain, inline)]

Source: libranlip
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The Build ID for /usr/lib/ranlip/libranlip.so.1.0.0 varies depending on
the build path:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/libranlip.html

  Build·ID:·a99d3bbf470139d9c3b48e295c3bf5d9b822a109
  vs.
  Build·ID:·58af4d42dfae61ee9e85803662f2644afdd832e1

The attached patch to debian/rules fixes this by including the standard
flags from dpkg.

Alternately, updating the packaging to use dh/debhelper at a recent
compat level would also likely fix this, or passing
-ffile-prefix-map=$(CURDIR)=. in CFLAGS and CXXFLAGS.


There are several other very old outstanding patches that may still need
to be resolved (#846975, #788000), but with all three patches applied,
libranlip should build reproducibly on tests.reproducible-builds.org!


live well,
  vagrant

[0001-debian-rules-Use-standard-buildflags.patch (text/x-diff, inline)]

From b39263938fa2db1eceacddf0b8bd78b6937410db Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Fri, 11 Mar 2022 19:59:15 +0000
Subject: [PATCH] debian/rules: Use standard buildflags.

The default dpkg-buildflags include best practices flags, such as
passing -ffile-prefix-map to remove build paths.

https://reproducible-builds.org/docs/build-path/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 990a660..7fe5569 100755
--- a/debian/rules
+++ b/debian/rules
@@ -4,6 +4,9 @@
 
 STRIP      = strip --remove-section=.comment --remove-section=.note
 
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk
+
 build:
 	$(checkdir)
 	dh_autoreconf
-- 
2.35.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1007137@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@debian.org>

To: 788000@bugs.debian.org, 846975@bugs.debian.org, 1007137@bugs.debian.org

Subject: libranlip: please make the build reproducible

Date: Thu, 22 Sep 2022 11:26:35 -0700

[Message part 1 (text/plain, inline)]

Control: tags 788000 pending
Control: tags 846975 pending
Control: tags 1007137 pending

Uploaded an NMU fixing these three reproducible builds bugs to
DELAYED/10.

diff -u libranlip-1.0/debian/changelog libranlip-1.0/debian/changelog
--- libranlip-1.0/debian/changelog
+++ libranlip-1.0/debian/changelog
@@ -1,3 +1,22 @@
+libranlip (1.0-4.4) unstable; urgency=medium
+
+  * Non-maintainer upload.
+
+  [ Dhole ]
+  * Makefile.in: Pass -n via GZIP_ENV to avoid embedding
+    timestamps. (Closes: #788000)
+  * debian/rules: Pass -n to gzip when compressing files.
+    (Closes: #788000)
+  * debian/rules: Use consistent date in packaged files. (Closes: #788000)
+
+  [ Valerie R Young ]
+  * debian/rules: Sort md5sums files. (Closes: #846975)
+
+  [ Vagrant Cascadian ]
+  * debian/rules: Use standard buildflags. (Closes: #1007137)
+
+ -- Vagrant Cascadian <vagrant@reproducible-builds.org>  Thu, 22 Sep 2022 11:16:14 -0700
+
 libranlip (1.0-4.3) unstable; urgency=medium

   * Non-maintainer upload.
diff -u libranlip-1.0/debian/rules libranlip-1.0/debian/rules
--- libranlip-1.0/debian/rules
+++ libranlip-1.0/debian/rules
@@ -3,6 +3,10 @@
 # Copyright (c) 2005 Juan Esteban Monsalve Tobon <esteban@v7w.com>

 STRIP      = strip --remove-section=.comment --remove-section=.note
+BUILD_DATE=$(shell dpkg-parsechangelog --show-field Date)
+
+DPKG_EXPORT_BUILDFLAGS = 1
+include /usr/share/dpkg/buildflags.mk

 build:
        $(checkdir)
@@ -57,23 +61,27 @@
        cp -p debian/changelog debian/libranlip1c2/usr/share/doc/libranlip1c2/changelog.Debian
        cp -p docs/ranlip.ps debian/libranlip1c2/usr/share/doc/libranlip1c2/
        cp -p examples/ranliptest* examples/makefile debian/libranlip1c2/usr/share/doc/libranlip1c2/examples
-       cd debian/libranlip1c2/usr/share/doc/libranlip1c2 && gzip -9 changelog.Debian ranlip.ps examples/*
+       cd debian/libranlip1c2/usr/share/doc/libranlip1c2 && gzip -9n changelog.Debian ranlip.ps examples/*

        ln -s libranlip1c2 debian/libranlip-dev/usr/share/doc/libranlip-dev

        dpkg-shlibdeps debian/libranlip1c2/usr/lib/ranlip/*
        dpkg-gencontrol -isp -plibranlip1c2 -Pdebian/libranlip1c2
-       cd debian/libranlip1c2 && md5sum `find * -type f ! -regex "DEBIAN/.*"` > DEBIAN/md5sums
+       cd debian/libranlip1c2 && md5sum `find * -type f ! -regex "DEBIAN/.*"` | LC_ALL=C sort > DEBIAN/md5sums
        chown -R root.root debian/libranlip1c2
        chmod -x debian/libranlip1c2/usr/lib/ranlip/*
        chmod -R go=rX debian/libranlip1c2
+       find debian/libranlip1c2 -depth -newermt '$(BUILD_DATE)' -print0 | \
+               xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
        dpkg --build debian/libranlip1c2 ..

        dpkg-gencontrol -isp -plibranlip-dev -Pdebian/libranlip-dev
-       cd debian/libranlip-dev && md5sum `find * -type f ! -regex "DEBIAN/.*"` > DEBIAN/md5sums
+       cd debian/libranlip-dev && md5sum `find * -type f ! -regex "DEBIAN/.*"` | LC_ALL=C sort > DEBIAN/md5sums
        chown -R root.root debian/libranlip-dev
        chmod -x debian/libranlip-dev/usr/lib/ranlip/libranlip.a debian/libranlip-dev/usr/lib/ranlip/libranlip.la
        chmod -R go=rX debian/libranlip-dev
+       find debian/libranlip-dev -depth -newermt '$(BUILD_DATE)' -print0 | \
+               xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
        dpkg --build debian/libranlip-dev ..

 define checkdir
only in patch2:
unchanged:
--- libranlip-1.0.orig/Makefile.in
+++ libranlip-1.0/Makefile.in
@@ -409,7 +409,7 @@
     || { find $(distdir) -type d ! -perm -200 -exec chmod u+w {} ';' \
          && rm -fr $(distdir); }; }

-GZIP_ENV = --best
+GZIP_ENV = --best -n
 distuninstallcheck_listfiles = find . -type f -print
 distcleancheck_listfiles = find . -type f -print


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #17 received at 1007137-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1007137-close@bugs.debian.org

Subject: Bug#1007137: fixed in libranlip 1.0-4.4

Date: Sun, 02 Oct 2022 19:39:13 +0000

Source: libranlip
Source-Version: 1.0-4.4
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
libranlip, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1007137@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated libranlip package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Sep 2022 11:16:14 -0700
Source: libranlip
Architecture: source
Version: 1.0-4.4
Distribution: unstable
Urgency: medium
Maintainer: Juan Esteban Monsalve Tobon <esteban@v7w.com>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 788000 846975 1007137
Changes:
 libranlip (1.0-4.4) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Dhole ]
   * Makefile.in: Pass -n via GZIP_ENV to avoid embedding
     timestamps. (Closes: #788000)
   * debian/rules: Pass -n to gzip when compressing files.
     (Closes: #788000)
   * debian/rules: Use consistent date in packaged files. (Closes: #788000)
 .
   [ Valerie R Young ]
   * debian/rules: Sort md5sums files. (Closes: #846975)
 .
   [ Vagrant Cascadian ]
   * debian/rules: Use standard buildflags. (Closes: #1007137)
Checksums-Sha1:
 4be4b507fc35d8e14fac20a27b0e290d4efa6722 1322 libranlip_1.0-4.4.dsc
 92505b53263f871180fd7d40add7b5e3e8ebcc1e 4305 libranlip_1.0-4.4.diff.gz
Checksums-Sha256:
 518b36f6fc928be030160214fea76e9c9e559ab22699b4b149146fd0afba119d 1322 libranlip_1.0-4.4.dsc
 6d38ac3442a05494a426be392bd304a588b2690bbdd2b0dd679f111b3e05fb04 4305 libranlip_1.0-4.4.diff.gz
Files:
 ea7b7f8fe6b61535ddf70fbfe0cf6bc9 1322 math optional libranlip_1.0-4.4.dsc
 f0c16692f46d2b047a23b8f8c1d5a142 4305 math optional libranlip_1.0-4.4.diff.gz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYyynAiAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqh1fAP9rVK23VDHxc3Rk
qQyInH9GEHcENEhcO8Z3PjygvCStBAEA9mqtoKwN8eQtp1klZKjM8dqUxQxfUIJT
7nl/DvQFDQA=
=RFFV
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.