Debian Bug report logs - #795484
ruby-rmagick: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: submit@bugs.debian.org

Subject: ruby-rmagick: please make the build reproducible

Date: Fri, 14 Aug 2015 14:44:22 +0100

[Message part 1 (text/plain, inline)]

Source: ruby-rmagick
Version: 2.13.2-4
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

While working on the "reproducible builds" effort [1], we have noticed
that ruby-rmagick could not be built reproducibly.

This is due to:

 - Inherent randomness in some of the documentation images. For example,
   using fractals and/or random noise.

 - Examples using timestamps as image captions.

In order to fix the former, I needed to expose ImageMagick's
SeedPseudoRandomGenerator method via the RMagick interface itself and
then ensure it is called in the right documentation fragments. To fix
the later, I simply hardcoded the image captions.

Patch attached. Once applied, ruby-rmagick can be built reproducibly
in our reproducible toolchain.

 [1]: https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[ruby-rmagick.diff.txt (text/plain, attachment)]

Message #10 received at 795484@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: 795484@bugs.debian.org

Subject: Re: Bug#795484: ruby-rmagick: please make the build reproducible

Date: Sun, 14 Aug 2016 20:12:30 +0100

Dear Maintainer,

> Source: ruby-rmagick
> Version: 2.13.1-6build1
> Tags: patch

There hasn't seem to be any update on this bug in 366 days, in which
time the Reproducible Builds effort has come on a long way. :)

Would you consider applying this patch and uploading?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #15 received at 795484@bugs.debian.org (full text, mbox, reply):

From: Antonio Terceiro <terceiro@debian.org>

To: Chris Lamb <lamby@debian.org>, 795484@bugs.debian.org

Subject: Re: Bug#795484: ruby-rmagick: please make the build reproducible

Date: Tue, 16 Aug 2016 11:29:13 -0300

[Message part 1 (text/plain, inline)]

Hi,

On Sun, Aug 14, 2016 at 08:12:30PM +0100, Chris Lamb wrote:
> Dear Maintainer,
> 
> > Source: ruby-rmagick
> > Version: 2.13.1-6build1
> > Tags: patch
> 
> There hasn't seem to be any update on this bug in 366 days, in which
> time the Reproducible Builds effort has come on a long way. :)
> 
> Would you consider applying this patch and uploading?

this patch looks rather invasive. I will upload a reproducible package
with a more localized change soon.

[signature.asc (application/pgp-signature, inline)]

Message #20 received at 795484-close@bugs.debian.org (full text, mbox, reply):

From: Antonio Terceiro <terceiro@debian.org>

To: 795484-close@bugs.debian.org

Subject: Bug#795484: fixed in ruby-rmagick 2.15.4+dfsg-2

Date: Tue, 16 Aug 2016 16:11:38 +0000

Source: ruby-rmagick
Source-Version: 2.15.4+dfsg-2

We believe that the bug you reported is fixed in the latest version of
ruby-rmagick, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 795484@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Antonio Terceiro <terceiro@debian.org> (supplier of updated ruby-rmagick package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 16 Aug 2016 11:29:37 -0300
Source: ruby-rmagick
Binary: ruby-rmagick ruby-rmagick-doc
Architecture: source
Version: 2.15.4+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Ruby Extras Maintainers <pkg-ruby-extras-maintainers@lists.alioth.debian.org>
Changed-By: Antonio Terceiro <terceiro@debian.org>
Description:
 ruby-rmagick - ImageMagick API for Ruby
 ruby-rmagick-doc - ImageMagick API for Ruby (documentation)
Closes: 795484
Changes:
 ruby-rmagick (2.15.4+dfsg-2) unstable; urgency=medium
 .
   * Bump Standards-Version to 3.9.8 (no changes needed)
   * Add 2 patches to make build reproducible (Closes: #795484)
     - 0003-Use-deterministic-label-for-image.patch, based on the original
       patch by Chris Lamb.
     - 0004-Seed-RNG-to-0-during-builds.patch: seed random number generator
       with 0 when SOURCE_DATE_EPOCH is set. This will also help reverse
       dependencies that use ruby-rmagick during their own build.
Checksums-Sha1:
 d0734b0fbd1e0f5f31a6158e42357e259a7dbd01 2349 ruby-rmagick_2.15.4+dfsg-2.dsc
 fc34ac254052a89e299efbd51eafd5cd37e2dd4b 7936 ruby-rmagick_2.15.4+dfsg-2.debian.tar.xz
Checksums-Sha256:
 ae02121713dea32a41dbbce10bf7f33034815f09d42284c3ef6305f2be7f92ef 2349 ruby-rmagick_2.15.4+dfsg-2.dsc
 cf11ae1b442fd4d02ec1854b3b45fd90a324e6a1af0168dc07b0b320ea46f2c8 7936 ruby-rmagick_2.15.4+dfsg-2.debian.tar.xz
Files:
 068f4ae9d3ac2a2127a1ffc100b303ef 2349 ruby optional ruby-rmagick_2.15.4+dfsg-2.dsc
 cf31d94de9dd3643b0b4a79850fc2e2f 7936 ruby optional ruby-rmagick_2.15.4+dfsg-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=9tih
-----END PGP SIGNATURE-----

Message #25 received at 795484@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: Antonio Terceiro <terceiro@debian.org>, 795484@bugs.debian.org

Subject: Re: Bug#795484: ruby-rmagick: please make the build reproducible

Date: Tue, 16 Aug 2016 19:57:25 +0100

Hi Antonio,

> this patch looks rather invasive. I will upload a reproducible package
> with a more localized change soon.

.. on the other hand, exposing the ability for other folks to seed the
pseudo random generator seems useful enough to keep, no?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #30 received at 795484@bugs.debian.org (full text, mbox, reply):

From: Antonio Terceiro <terceiro@debian.org>

To: Chris Lamb <lamby@debian.org>

Cc: 795484@bugs.debian.org

Subject: Re: Bug#795484: ruby-rmagick: please make the build reproducible

Date: Thu, 18 Aug 2016 10:04:33 -0300

[Message part 1 (text/plain, inline)]

On Tue, Aug 16, 2016 at 07:57:25PM +0100, Chris Lamb wrote:
> Hi Antonio,
> 
> > this patch looks rather invasive. I will upload a reproducible package
> > with a more localized change soon.
> 
> .. on the other hand, exposing the ability for other folks to seed the
> pseudo random generator seems useful enough to keep, no?

probably, but I would rather have that introduced upstream first.

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.