Debian Bug report logs - #794241
cdbs: please export $SOURCE_DATE_EPOCH to produce reproducible output

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Maria Valentina Marin <marivalenm@gmail.com>

To: submit@bugs.debian.org

Subject: cdbs: please export $SOURCE_DATE_EPOCH to produce reproducible output

Date: Fri, 31 Jul 2015 17:20:32 +0200

[Message part 1 (text/plain, inline)]

Source: cdbs
Version: 0.4.130
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

The Debian reproducible builds team [1] recently proposed a new
environment variable $SOURCE_DATE_EPOCH to be used by packages to
produce reproducible timestamps (for example in documentation) [2].

This environment variable is currently being exported by debhelper from
our experimental git repository which we have patched such that packages
using dh (debhelper >= 9) in debian/rules become automatically reproducible.

The patch to debhelper does not affect packages which use cdbs as their
build system. Therefore I propose the attached patch which makes cdbs
export $SOURCE_DATE_EPOCH.

A version of cdbs with this patch is currently being used in the
reproducible builds git repository and it has been successful at making
a package become reproducible.

This bug is in addition to this other bug from the reproducible builds team:
https://bugs.debian.org/764478

Kind Regards,
akira

[1] https://wiki.debian.org/ReproducibleBuilds/About
[2] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal

[cdbs.diff (text/x-patch, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #12 received at 794241-close@bugs.debian.org (full text, mbox, reply):

From: Jonas Smedegaard <dr@jones.dk>

To: 794241-close@bugs.debian.org

Subject: Bug#794241: fixed in cdbs 0.4.131

Date: Wed, 11 May 2016 16:20:52 +0000

Source: cdbs
Source-Version: 0.4.131

We believe that the bug you reported is fixed in the latest version of
cdbs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 794241@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated cdbs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 11 May 2016 16:18:25 +0200
Source: cdbs
Binary: cdbs
Architecture: source all
Version: 0.4.131
Distribution: unstable
Urgency: medium
Maintainer: CDBS Hackers <build-common-hackers@lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Description:
 cdbs       - common build system for Debian packages
Closes: 565973 700321 764478 794241 805315 811555
Changes:
 cdbs (0.4.131) unstable; urgency=medium
 .
   [ Jonas Smedegaard ]
   * Modernize python-distutils.mk installdir handling (since supported
     even in oldstable now):
     + Use --install-layout=deb (and drop --prefix=/usr) by default.
     + Use --install-lib option (not --install-purelib/--install-platlib,
       and only when DEB_PYTHON_DISTUTILS_INSTALLDIR_SKEL is set).
     + Have cdbs_expand_python_distutils_installdir provide
       .../dist-packages dir (not .../site-packages) by default, to try
       cope with packages relying on it for non-skel use.
     Closes: bug#565973. Thanks to Matthias Klose and Piotr Ożarowski.
   * Fix error message to talk about multiple python implementations (not
     packaging systems nor too specific ones).
   * Tighten cdbs_make_curflavor resolving, to simplify its use.
   * Fix allow early override of python autotools variable.
   * Improve copyright-check:
     + Support extending (not only replacing) exceptions.
     + Support extracting metadata from select binary files.
   * Introduce new variables:
     + DEB_CONFIGURE_SCRIPT_ENV_PYTHON
     + DEB_COPYRIGHT_CHECK_IGNORE_EXTS
     + DEB_COPYRIGHT_CHECK_IGNORE_PATHS
     + DEB_COPYRIGHT_EXTRACT_EXTS
     + DEB_COPYRIGHT_EXTRACT_PATHS_EXIF
     + DEB_COPYRIGHT_EXTRACT_PATHS_TTF
     + DEB_COPYRIGHT_EXTRACT_SUFFIX
     + cdbs_autotools_configure_env
     + cdbs_lc
     + cdbs_make_curpythonruntime
     + cdbs_uc
   * Rename variables:
     + cdbs_python_pysupport → cdbs_pythonsystem_pysupport
     + cdbs_python_pycentral → cdbs_pythonsystem_pycentral
     + cdbs_python2 → cdbs_pythonsystem_python2
     + cdbs_python3 → cdbs_pythonsystem_python3
     + cdbs_python2_builddeps → cdbs_python_builddeps_python2
     + cdbs_python3_builddeps → cdbs_python_builddeps_python3
     Former ones above dropped without deprecation (unused outside cdbs).
   * Deprecate variables:
     + cdbs_expand_python_distutils_installdir
   * Drop unmaintained and unused snippets:
     + docbookxml.mk
     + hbuild.mk
     + kde.mk
   * Support xz compressed upstream tarballs.
     Closes: Bug#700321. Thanks to Vasudev Kamath.
   * Relax to build-depend unversioned on devscripts: Needed version is
     satisfied even in oldstable.
   * Update Vcs-* URLs:
     + Use https protocol.
     + Use cgit browser.
     + Fix path.
   * Declare compliance with Debian Policy 3.9.8.
   * Have debhelper.mk snippet resolve unversioned build-dependency for
     compat level 9.
   * Fix have debhelper.mk invoke dh_systemd_enable before
     dh_installinit.
     Closes: Bug#811555. Thanks to Dan Nicholson.
   * Update copyright info:
     + Extend coverage for main author to include recent years.
     + Drop Copyright field from header section.
     + Extend copyright for main author to cover recent years.
     + Use License shortname X11 (not Expat̃X with X exception).
     + Use License shortnames FSFUL FSFULLR (not GAP).
     + Update Files sections for autotools.
     + Relicense (where permitted) to GPL-3+.
     + Use License-Grant and License-Reference fields.
       Thanks to Ben Finney.
   * Update autotools (with autoreconf -f -i).
   * Add lintian override regarding license in License-Reference field.
     See bug#786450.
   * Resolve (if not overridden) and globally export SOURCE_DATE_EPOCH.
     Closes: Bug#794241. Thanks to Maria Valentina Marin.
   * Have debhelper.mk call dh_strip_nondeterminism if available.
     Closes: Bug#764478. Thanks to Holger Levsen.
   * Drop tests debhelper4 debhelper5 tied to archaic debhelper compat
     levels no longer supported.
     Closes: Bug#805315. Thanks to Niels Thykier.
   * Build-depend on default-jdk-headless (and on default-jdk only as
     fallback to ease backporting).
 .
   [ Vasudev Kamath ]
   * Add myself to Uploaders
 .
   [ IOhannes m zmölnig ]
   * class/pd: only run commands on *.pd_linux files
Checksums-Sha1:
 6873b7e12f11f5c80d87adde978522234fb155c6 1845 cdbs_0.4.131.dsc
 2232cfe146f3b1e99e919b71007411447e26b28e 185820 cdbs_0.4.131.tar.xz
 890c31f6eb7e642055532146a58c39124ac60402 78964 cdbs_0.4.131_all.deb
Checksums-Sha256:
 1447582f41b907a7c5f7ed7db723785a8262d085a0c840358cad190c0ded54b1 1845 cdbs_0.4.131.dsc
 82aaae345bc807bbeddca93c596d0bad8bd5660fa406a42be159361e5dea9750 185820 cdbs_0.4.131.tar.xz
 e18270c8134877c8974b1f12bee0f4f84e69f370539b7c289e4c4d5f2d94ad40 78964 cdbs_0.4.131_all.deb
Files:
 209b34d7bcc7bc6741f65571a3c10a6e 1845 devel optional cdbs_0.4.131.dsc
 0d1d836ad061e816bbe598fcb294ec9f 185820 devel optional cdbs_0.4.131.tar.xz
 2acf602437ca180307486874b8b7d842 78964 devel optional cdbs_0.4.131_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=hyqA
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.