Debian Bug report logs - #795861
fakeroot: please make the build reproducible (timestamps)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Val Lorentz <progval@progval.net>

To: submit@bugs.debian.org

Subject: fakeroot: please make the build reproducible (timestamps, fileordering)

Date: Mon, 17 Aug 2015 15:35:37 +0200

[Message part 1 (text/plain, inline)]

Source: fakeroot
Version: 1.20.2-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps fileordering
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that fakeroot could not be built reproducibly.

The attached patch removes build time from the output package by setting
the mtime of all files to the time of the last changelog entry. Once
applied, fakeroot can be built reproducibly in our current experimental
framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds

Regards,
Val

[fakeroot_mtime.diff (text/x-patch, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #12 received at 795861@bugs.debian.org (full text, mbox, reply):

From: intrigeri <intrigeri@debian.org>

To: 795861@bugs.debian.org

Subject: Re: Bug#795861: fakeroot: please make the build reproducible (timestamps, fileordering)

Date: Sat, 04 Jun 2016 14:44:33 +0200

Hi Clint!

Val Lorentz wrote (17 Aug 2015 13:35:37 GMT) :
> While working on the “reproducible builds” effort [1], we have noticed
> that fakeroot could not be built reproducibly.

> The attached patch removes build time from the output package by setting
> the mtime of all files to the time of the last changelog entry. Once
> applied, fakeroot can be built reproducibly in our current experimental
> framework.

I've found this bug report while looking at non-reproducible packages
that we ship in Tails. The attached patch seems correct and simple
enough to me. Is there anything else we can do to help get it applied
to the package?

Cheers,
--
intrigeri

Message #17 received at 795861-close@bugs.debian.org (full text, mbox, reply):

From: Clint Adams <clint@debian.org>

To: 795861-close@bugs.debian.org

Subject: Bug#795861: fixed in fakeroot 1.20.2-2

Date: Sun, 05 Jun 2016 01:33:57 +0000

Source: fakeroot
Source-Version: 1.20.2-2

We believe that the bug you reported is fixed in the latest version of
fakeroot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 795861@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Clint Adams <clint@debian.org> (supplier of updated fakeroot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 04 Jun 2016 18:00:48 -0700
Source: fakeroot
Binary: fakeroot libfakeroot
Architecture: source amd64
Version: 1.20.2-2
Distribution: unstable
Urgency: medium
Maintainer: Clint Adams <clint@debian.org>
Changed-By: Clint Adams <clint@debian.org>
Description:
 fakeroot   - tool for simulating superuser privileges
 libfakeroot - tool for simulating superuser privileges - shared libraries
Closes: 795861 826318
Changes:
 fakeroot (1.20.2-2) unstable; urgency=medium
 .
   [ Andreas Beckmann ]
   * Switch to dh.  closes: #826318.
 .
   [ Clint Adams ]
   * This should make the build reproducible.  closes: #795861.
Checksums-Sha1:
 1a0dc421a97c2b326dabde237e7550d88adcd7e2 2089 fakeroot_1.20.2-2.dsc
 89a48558a1ca1cceaa97fdc1e88233f7727e9961 21624 fakeroot_1.20.2-2.debian.tar.xz
 f5d59a4608c6f8e24ddc38c1dcdedac8f717b143 49494 fakeroot-dbgsym_1.20.2-2_amd64.deb
 7deaa583ac5fdf5a3f2dd1522a8bce725d18df60 84862 fakeroot_1.20.2-2_amd64.deb
 f93048eace9b2e8268f9c56dc024a7dc44f15743 66428 libfakeroot-dbgsym_1.20.2-2_amd64.deb
 3ef6825ac835d8a3328f0038439cae5ee05ba15b 45300 libfakeroot_1.20.2-2_amd64.deb
Checksums-Sha256:
 905784ffa1efcf154cb3d94503a4b3429f6bb816050344e32c939bcc39f29cf2 2089 fakeroot_1.20.2-2.dsc
 30e34e6a70f6f8e6e4211df5b6cf96153e70c4a817dd20e652677286cbad73a0 21624 fakeroot_1.20.2-2.debian.tar.xz
 d5be482218a10831805ca28753adae352c0f3f3f542fb0c74ea02b68913e4bcd 49494 fakeroot-dbgsym_1.20.2-2_amd64.deb
 20d5f6364a777c5c883998d1d74983ef5755da270c714e114848ad52790f7681 84862 fakeroot_1.20.2-2_amd64.deb
 66d3d7a2734e02fd26c08621ba4eccbd3c386f89f44d3ba54b00afd8d3f667a2 66428 libfakeroot-dbgsym_1.20.2-2_amd64.deb
 73d56c57c85202318c47f06e3207c42d11860dd8da6976cac3025f15e3a855db 45300 libfakeroot_1.20.2-2_amd64.deb
Files:
 463259a5a49cd1f65327666d70f6c8b8 2089 utils optional fakeroot_1.20.2-2.dsc
 9b8663df171b0813b2acc41bbf06c6b1 21624 utils optional fakeroot_1.20.2-2.debian.tar.xz
 4256257bfe428d56683b9f128330492a 49494 debug extra fakeroot-dbgsym_1.20.2-2_amd64.deb
 dc00b9847f665d3acc2cbe67a755d7a1 84862 utils optional fakeroot_1.20.2-2_amd64.deb
 6d9bbdc8ed9d6321c0e4b6bc850793c4 66428 debug extra libfakeroot-dbgsym_1.20.2-2_amd64.deb
 ed55baf38efcbe41186da8a314608a17 45300 utils optional libfakeroot_1.20.2-2_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: Debian!

iQJ8BAEBCgBmBQJXU3/8XxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w
ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ3NTgxRUM4NzQwNTNFNkM4MDc3OTFCOUI1
NTkyMzMxRTE5OUQzOEE4AAoJEFWSMx4ZnTiofAwP/j2Zrn5xCQ5tp2925UW9Q7zA
cuCZ9AwIohwJPeHmAd3e7X3g4E2JqVpHapnuHmf3bjpZTfcw7pW8QTDhM9AccMh5
PhTlU/ZIRmxtnXSKNxrgEfGf2Y4jKKFocWUmvV0cxibYyCPtZQ18H/hIapYCR81B
wzRWIPjDFghd8uYdWpBW+1Vg5IuR9+846V6vSxhg3YXEOID65jsKlf2YwovPTz07
Y9MHS5m71tlHcDS+b1TxsB3ULwOFyaibYDvErjl+BXUvIuSnGSozkVadGP+ID2D+
hyCQOdDuewaIKQn+qcz4hFeLxUUhNCbB0g90tdqGoXd08XPneg+2ny+zgEhVgcii
piKPDi3SFd3mM9nf/f9oxKBYut/5I1eYWICyMDcrQ7B19vAks0xnwxxMKGUXue03
yU2mKka2qGzcqJEZsYUobqqYfP15j3vhK7ZDXV8jy/aNDMrc5iLvVLmlKS99/i7F
zpUvwr8brhXt7cB2RuvoF5Uhqj+phKR+5OTwcpewBuNHUzjkqeVWTD93ilAiO4pX
qCtzSQFhUjPF1cZbZP+KNDWMmJtunMvYHxDiPfd/JzBFLZLhmDcOsp6LuR+lZ412
pvNvMMlJRD/VCJI1d4DyzVoq8Y8FxASUBCmAnUf0DKljYH5hM2mtdEALoCFylMcZ
40cuLCK5nl5fpBcLG5ko
=3bGx
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.