Debian Bug report logs - #1021471
python-djvulibre: reproducible-builds: build path embedded in decode.cpython-310-x86_64-linux-gnu.so

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: python-djvulibre: reproducible-builds: build path embedded in decode.cpython-310-x86_64-linux-gnu.so

Date: Sat, 08 Oct 2022 18:57:39 -0700

[Message part 1 (text/plain, inline)]

Source: python-djvulibre
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build path is embedded in
/usr/lib/python3/dist-packages/djvu/decode.cpython-310-x86_64-linux-gnu.so:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/python-djvulibre.html

  /build/1st/python-djvulibre-0.8.8/build/temp.linux-x86_64-3.10/src/decode.c:70219
  vs.
  /build/2/python-djvulibre-0.8.8/2nd/build/temp.linux-x86_64-3.10/src/decode.c:70219

The attached patch to setup.py fixes this by allowing the default CFLAGS to be
passed from debian/rules, which includes -ffile-prefix-map to avoid
embedding the build paths in the binaries.

According to my local tests, with this patch applied, python-djvulibre should build
reproducibly on tests.reproducible-builds.org!

Thanks for maintaining python-djvulibre!

live well,
  vagrant

[0001-setup.py-Allow-debian-rules-to-pass-the-default-CFLA.patch (text/x-diff, inline)]

From 3deaa46f919c4f16f6ef6f3ede93fd9e39169b5f Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 9 Oct 2022 01:52:57 +0000
Subject: [PATCH] setup.py: Allow debian/rules to pass the default CFLAGS.

---
 setup.py | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/setup.py b/setup.py
index 9ed7cec..b4981cd 100644
--- a/setup.py
+++ b/setup.py
@@ -167,9 +167,6 @@ else:
     # Python 3.X
     req_cython_version = '0.20'
 
-# Work-around for <https://bugs.python.org/issue969718>:
-os.environ.pop('CFLAGS', None)
-
 class build_ext(distutils.command.build_ext.build_ext):
 
     def run(self):
-- 
2.37.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1021471-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1021471-close@bugs.debian.org

Subject: Bug#1021471: fixed in python-djvulibre 0.8.8-3

Date: Fri, 11 Nov 2022 21:05:28 +0000

Source: python-djvulibre
Source-Version: 0.8.8-3
Done: Philip Rinn <rinni@debian.org>

We believe that the bug you reported is fixed in the latest version of
python-djvulibre, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1021471@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Philip Rinn <rinni@debian.org> (supplier of updated python-djvulibre package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 11 Nov 2022 19:35:27 +0100
Source: python-djvulibre
Architecture: source
Version: 0.8.8-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Philip Rinn <rinni@debian.org>
Closes: 1021471
Changes:
 python-djvulibre (0.8.8-3) unstable; urgency=medium
 .
   * QA upload.
   * Don't strip CFLAGS, the Python bug that was worked around was fixed in 2019.
     Makes the package reproducible, thanks Vagrant Cascadian! (Closes: #1021471)
Checksums-Sha1:
 6003d992c6c9c61792507a96351b4d8443e694a1 2333 python-djvulibre_0.8.8-3.dsc
 6c7840308d3676037c326f902f61eb71386d1589 17548 python-djvulibre_0.8.8-3.debian.tar.xz
 58d44fdbe96ea18c3f162c48a45d20e185f0b7df 10478 python-djvulibre_0.8.8-3_source.buildinfo
Checksums-Sha256:
 c0ecec8f2fca6f157b4f92db5d3c09124563b027d1ab39c915d7d70f7b19d12f 2333 python-djvulibre_0.8.8-3.dsc
 96b9422c92d34174d108eacc2d83b32db6e963776018f9ec0b5e466188db15c0 17548 python-djvulibre_0.8.8-3.debian.tar.xz
 dd26017c4174f0ab21b1a1ef19ee785ec0a3f726d7381b17a47a9b489b995ea0 10478 python-djvulibre_0.8.8-3_source.buildinfo
Files:
 c2df13f99a1fa2071d7189f43c366d81 2333 python optional python-djvulibre_0.8.8-3.dsc
 b7ae8d6b173ee7f3b2d652318a76429f 17548 python optional python-djvulibre_0.8.8-3.debian.tar.xz
 56e04095094b3afc32b89b2d504d9606 10478 python optional python-djvulibre_0.8.8-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=7LJp
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.