Debian Bug report logs - #1024290
xtb: reproducible builds: Embeds build time, username and hostname in various files:

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: xtb: reproducible builds: Embeds build time, username and hostname in various files:

Date: Wed, 16 Nov 2022 20:06:56 -0800

[Message part 1 (text/plain, inline)]

Source: xtb
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: hostname timestamps username
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The time, username and hostname are embedded in /usr/bin/xtb and
various other files:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/xtb.html

  /usr/bin/xtb

  2022-11-12
  vs.
  2023-12-15	   
  
  'pbuilder1@ionos5-amd64'
  vs.
  'pbuilder2@i-capture-the-hostname'  

The attached patch fixes this by patching meson.build to use
SOURCE_DATE_EPOCH for the date, and set placeholder values for the user
and hostname.

According to my local tests, With this patch applied xtb should build
reproducibly on tests.reproducible-builds.org!


Thanks for maintaining xtb!

live well,
  vagrant

[0001-meson.build-Fix-reproducible-builds-by-using-SOURCE_.patch (text/x-diff, inline)]

From 19839bbb88cb080ed6644cba7fd8b9ed01537c6a Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Thu, 17 Nov 2022 03:43:17 +0000
Subject: [PATCH] meson.build: Fix reproducible builds by using
 SOURCE_DATE_EPOCH to set timestamp and set 'author' and 'hostname' to fixed
 values.

https://reproducible-builds.org/docs/source-date-epoch/
---
 meson.build | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/meson.build b/meson.build
index d6e6432..5caeb21 100644
--- a/meson.build
+++ b/meson.build
@@ -57,9 +57,9 @@ config = configuration_data({
   'description': 'Semiempirical Extended Tight-Binding Program Package',
   'version': meson.project_version(),
   'commit': commit,
-  'date': run_command(python, '-c', 'import datetime; print(datetime.date.today().strftime("%Y-%m-%d"))').stdout().strip(),
-  'author': run_command(python, '-c', 'import getpass; print(getpass.getuser())').stdout().strip(),
-  'origin': run_command(python, '-c', 'import socket; print(socket.gethostname())').stdout().strip(),
+  'date': run_command(python, '-c', 'import os; import time; import datetime; print(datetime.datetime.utcfromtimestamp(int(os.environ.get("SOURCE_DATE_EPOCH", time.time()))).strftime("%Y-%m-%d"))').stdout().strip(),
+  'author': 'builduser',
+  'origin': 'buildhost',
   'prefix': get_option('prefix'),
   'mandir': get_option('mandir'),
   'bindir': get_option('bindir'),
-- 
2.30.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1024290-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1024290-close@bugs.debian.org

Subject: Bug#1024290: fixed in xtb 6.5.1-2

Date: Thu, 17 Nov 2022 06:53:37 +0000

Source: xtb
Source-Version: 6.5.1-2
Done: Andrius Merkys <merkys@debian.org>

We believe that the bug you reported is fixed in the latest version of
xtb, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1024290@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrius Merkys <merkys@debian.org> (supplier of updated xtb package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 17 Nov 2022 01:23:38 -0500
Source: xtb
Architecture: source
Version: 6.5.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debichem Team <debichem-devel@lists.alioth.debian.org>
Changed-By: Andrius Merkys <merkys@debian.org>
Closes: 1024290
Changes:
 xtb (6.5.1-2) unstable; urgency=medium
 .
   * Fix reproducible build (Closes: #1024290). Thanks Vagrant Cascadian!
   * Remove generated man/xtb.1.
Checksums-Sha1:
 063243a101711031c204db78ee215ea7ad3056e7 2093 xtb_6.5.1-2.dsc
 d7af6a1a2136a2c93fc0657d6fe3f31564d87adf 9468 xtb_6.5.1-2.debian.tar.xz
 4d42438d0b6bd4b6c1169a99ad55dd7cce2a9cd1 7750 xtb_6.5.1-2_source.buildinfo
Checksums-Sha256:
 24701e800d113157ef3f8b14bc698a9b97d41c7e12f2bc2d29132ebcc63770f1 2093 xtb_6.5.1-2.dsc
 3644aac0b36656b1e8aacbdbe35f4b43f1d407a82c90993dd2eb3481ca6e8251 9468 xtb_6.5.1-2.debian.tar.xz
 cf66982881849e7145974fbb4690003004a85295bd3fa4eb617b3d88129a16bd 7750 xtb_6.5.1-2_source.buildinfo
Files:
 5f10b03ccef35ca9c70c3c651936c215 2093 science optional xtb_6.5.1-2.dsc
 64cc7ecc7aa1c5e17f7ef6f5957c9299 9468 science optional xtb_6.5.1-2.debian.tar.xz
 0c246683a8048f166060b7c5e61aba74 7750 science optional xtb_6.5.1-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1JOd
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.