Debian Bug report logs - #1030715
adacgi: please make the build reproducible

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: adacgi: please make the build reproducible

Date: Mon, 06 Feb 2023 09:50:44 -0800

[Message part 1 (text/plain, inline)]

Source: adacgi
Version: 1.6-31
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
adacgi could not be built reproducibly.

This is because it installs /usr/share/gpr/adacgi.gpr that contains
the build flags that it was built with. This causes a problem because
these contain the current build directory, making the package
unreproducible:

     ldflags   := ("-Wl,-z,relro", "-Wl,-z,now", "-Wl,--no-allow-shlib-undefined", "-Wl,--no-copy-dt-needed-entries", "-Wl,--no-undefined");
 -   adaflags  := ("-g", "-O2", "-ffile-prefix-map=/build/1st/adacgi-1.6=.", "-fstack-protector-strong", "", "-gno-record-gcc-switches");
 +   adaflags  := ("-g", "-O2", "-ffile-prefix-map=/build/2/adacgi-1.6/2nd=.", "-fstack-protector-strong", "", "-gno-record-gcc-switches");
     soversion := "4";

A patch is attached that will modify this file just prior to
installation, but the better solution may actually belong somewhere
else in Debian's Ada toolchain. Unfortunately, I lack the knowledge
to know precisely where, but hopefully this helps demonstrate the
problem and a route to a solution.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[adacgi.diff.txt (text/plain, attachment)]

Send a report that this bug log contains spam.