Debian Bug report logs - #1010466
glob2: reproducible builds: Timestamps embedded in /usr/games/glob2

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: glob2: reproducible builds: Timestamps embedded in /usr/games/glob2

Date: Sun, 01 May 2022 20:21:50 -0700

[Message part 1 (text/plain, inline)]

Source: glob2
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in /usr/games/glob2.

  ./usr/games/glob2

  -02:00:33
  vs.
  +02:10:15

This is because scons does not pass the SOURCE_DATE_EPOCH environment
variable by default. The attached patch fixes this by explicitly setting
this in the SConstruct file.


With this patch applied, glob2 should build reproducibly on
tests.reproducible-builds.org!


Thanks for maintaining glob2!


live well,
  vagrant

[0001-SConstruct-Explicitly-add-SOURCE_DATE_EPOCH-to-the-e.patch (text/x-diff, inline)]

From c0f9d36907677eeef270fab53ea0ce24db8b0a2e Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 2 May 2022 03:15:19 +0000
Subject: [PATCH] SConstruct: Explicitly add SOURCE_DATE_EPOCH to the
 environment.

https://tests.reproducible-builds.org/debian/issues/scons_doesnt_pass_environment_to_build_tools_issue.html
---
 SConstruct | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/SConstruct b/SConstruct
index 37d03bb..1d17a80 100644
--- a/SConstruct
+++ b/SConstruct
@@ -241,6 +241,8 @@ def main():
     except AttributeError:
         env.Clone = env.Copy
 
+    env.Append(ENV={'SOURCE_DATE_EPOCH': os.environ['SOURCE_DATE_EPOCH']})
+
     if not env['CC']:
         print("No compiler found in PATH. Please install gcc or another compiler.")
         Exit(1)
-- 
2.36.0

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1010466-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1010466-close@bugs.debian.org

Subject: Bug#1010466: fixed in glob2 0.9.4.4-6

Date: Mon, 02 May 2022 15:48:46 +0000

Source: glob2
Source-Version: 0.9.4.4-6
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
glob2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1010466@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated glob2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 May 2022 07:40:16 -0700
Source: glob2
Architecture: source
Version: 0.9.4.4-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 1010466
Changes:
 glob2 (0.9.4.4-6) unstable; urgency=medium
 .
   * QA upload.
   * SConstruct: Explicitly add SOURCE_DATE_EPOCH to the environment.
     (Closes: #1010466)
   * debian/control: Update to debhelper-compat 13.
   * debian/control: Update Standards-Version to 4.6.0.
Checksums-Sha1:
 5e0d33f14366b657f6c95b2d1a8e72127236553f 1626 glob2_0.9.4.4-6.dsc
 d0136a994fe9dbcedaecd3a265756a2bf74b4178 26080 glob2_0.9.4.4-6.debian.tar.xz
Checksums-Sha256:
 3b4e52d69e0051e9802f1965c73a87b16ef1eb3ea9d858ddc98b319bfbba1751 1626 glob2_0.9.4.4-6.dsc
 15544dd3b78d2332038ab1c2d3570efb25b49b5c64764b9ebbde7cd7bad3d0fa 26080 glob2_0.9.4.4-6.debian.tar.xz
Files:
 54dcd96623d9effc5c88936f6f635e4e 1626 games optional glob2_0.9.4.4-6.dsc
 02bbe0cd8788c929a197689301924e3b 26080 games optional glob2_0.9.4.4-6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYm/28yAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqifTAPsHlTS7A56CcgEN
KqI967AeseD218eONLqykJCK1lpU7QEAsiVwhPlDn0qOGk60Do4i7BAJlsh2juhK
hD1zQ9zaogs=
=5wre
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.