Debian Bug report logs - #1011503
libapache2-mod-auth-plain: reproducible-builds: embedded build paths in mod_auth_plain.so

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: libapache2-mod-auth-plain: reproducible-builds: embedded build paths in mod_auth_plain.so

Date: Mon, 23 May 2022 19:04:00 -0700

[Message part 1 (text/plain, inline)]

Source: libapache2-mod-auth-plain
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build path is embedded in
/usr/lib/apache2/modules/mod_auth_plain.so:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/libapache2-mod-auth-plain.html

  /build/1st/libapache2-mod-auth-plain-2.0.52/mod_auth_plain.c:300
  vs.
  /build/2/libapache2-mod-auth-plain-2.0.52/2nd/mod_auth_plain.c:300

The attached patch fixes this by adjusting the Makefile to pass
-ffile-prefix-map to apxs, which avoids embedding the build path in
compiled files.


With this patch applied, libapache2-mod-auth-plain should build
reproducibly on tests.reproducible-builds.org!


live well,
  vagrant

[0001-Makefile-Pass-ffile-prefix-map-to-apxs.patch (text/x-diff, inline)]

From 0bbea871a8c744f1355c759482efbc4eb9f927b5 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 24 May 2022 01:58:43 +0000
Subject: [PATCH] Makefile: Pass -ffile-prefix-map to apxs.

This avoids embedding the build path in the binaries.

https://reproducible-builds.org/docs/build-path/
---
 Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Makefile b/Makefile
index a05afd4..343b1bb 100644
--- a/Makefile
+++ b/Makefile
@@ -11,7 +11,7 @@ all: $(TARGETS)
 
 # general rule to build
 %.la: %.c
-	$(APXS) -c $< $(LIBS)
+	$(APXS) -Wc,-ffile-prefix-map=$(CURDIR)=. -c $< $(LIBS)
 
 install: $(TARGETS)
 	$(APXS) -i $(TARGETS)
-- 
2.36.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1011503-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1011503-close@bugs.debian.org

Subject: Bug#1011503: fixed in libapache2-mod-auth-plain 2.0.53

Date: Fri, 11 Nov 2022 23:05:16 +0000

Source: libapache2-mod-auth-plain
Source-Version: 2.0.53
Done: Philip Rinn <rinni@debian.org>

We believe that the bug you reported is fixed in the latest version of
libapache2-mod-auth-plain, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1011503@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Philip Rinn <rinni@debian.org> (supplier of updated libapache2-mod-auth-plain package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Nov 2022 23:39:22 +0100
Source: libapache2-mod-auth-plain
Architecture: source
Version: 2.0.53
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Philip Rinn <rinni@debian.org>
Closes: 1007612 1011503
Changes:
 libapache2-mod-auth-plain (2.0.53) unstable; urgency=medium
 .
   * QA upload.
   * Make package reproducible by stop embedding the build path in
     compiled files. Thanks Vagrant Cascadian! (Closes: #1011503)
   * Install NOTICE file.
   * Convert package to source format "3.0 (quilt)". (Closes: #1007612)
   * Bump Standards-Version to 4.6.1:
     - set Priority to 'optional' (from 'extra').
   * Bump debhelper compat level to 13.
Checksums-Sha1:
 f6e820979f1a85fb7ff8b95119fc834694435ff5 1549 libapache2-mod-auth-plain_2.0.53.dsc
 76cde255a69651c9fb2c408a53ea3523629b005c 9312 libapache2-mod-auth-plain_2.0.53.tar.xz
 ccc5a33bc78bb466ba19e99687a30f1e39953f35 6718 libapache2-mod-auth-plain_2.0.53_source.buildinfo
Checksums-Sha256:
 66cd9e6465f1b53e71bf44c53a727601cfb7049c0d225746a6008e9a6eb43b1c 1549 libapache2-mod-auth-plain_2.0.53.dsc
 950bc4ff0292f7ed5f58c88eeaee4cdba8359e8109a6550baeabdb2d736c4b0d 9312 libapache2-mod-auth-plain_2.0.53.tar.xz
 d2df3b135156fd6c03a78e9c7e49aa743ab9639c98aa5f9c8a86bd2e0455e465 6718 libapache2-mod-auth-plain_2.0.53_source.buildinfo
Files:
 906b6139e8a376acaed16b2c3622cc06 1549 web optional libapache2-mod-auth-plain_2.0.53.dsc
 09de382fccf1eb1e634a586042132be0 9312 web optional libapache2-mod-auth-plain_2.0.53.tar.xz
 1192c1fe2a69c168bde0f23d87f6f600 6718 web optional libapache2-mod-auth-plain_2.0.53_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEK9jU45eVX3dG2zuJrWkWlnOTmCsFAmNu0JAACgkQrWkWlnOT
mCuPHRAAsVhv3jwN1jtbW4oq9vP0huUDgx4u8f2OsUjzXESZsxBvyu0OFfTMCeN1
xAC715sSdwlnqzNuy6V8waaoQJkUcfWpdAv8q81G0PUenCPhzs+pG4glXbuLaE19
BotJOYQmVO2K80xn8Fv1Iaj3ySluOMtrVZSHuxz6XhmtZzWZqCfZo0mc6BzkNB1D
zkuph8PX4MKudyUq/ix3l5VaRepIuB/8+rnR1RPYqoONX4dYSAe8uPV5Inradcpr
9KkMWAAy48hVFSPPZqCB2tVgIdgZeY3CSFQ3rjg0jq0YeyuY5eBJgHDNiLxeIyI2
OFkrHVwvZI6v4oXUqu+TyjTGPgGSJGMaSQxuEHl5pYU5wyNFPYZAuhLJcNRI3Nko
U5D5Jb47Ri83XacnPX4C6P+VZGeJVmz9u24eGkQm4Ea20wDgilmPzxdHnvtaUp5N
Jgp2crp7ebZEkNc1PC84dxIhXQQEwdFaBKtEBjCe7i8Jmbci+PcIegvEPgEA+tbo
vqqFzvNQVdphVSqKfbaJAXFphqbbUh+F6Vp6S1qF+QTw9O7cGbGZ4+tUJEBxBkDx
XRhgtyVw+vlcqJP5b9pcfLRL4tzvPTeP1FTPEIFVFSVI/c8ShYmbaMB1zt8zXi7t
Dj4Vdxw1ddUot5kkScSpxCpMQQa0jNuiBBwJlW0qaH1sNHzRkGA=
=j8Ka
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.