Debian Bug report logs - #807051
why: please make the build reproducible (timestamps)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Valentin Lorentz <progval@progval.net>

To: submit@bugs.debian.org

Subject: why: please make the build reproducible (timestamps)

Date: Fri, 04 Dec 2015 15:55:57 +0100

[Message part 1 (text/plain, inline)]

Source: why
Version: 2.34-4
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that Why could not be built reproducibly.

The attached patch removes extra timestamps from the build system. Once
applied, and after the ocaml toolchain is patch, Why can be built
reproducibly in our experimental framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds

Regards,
Valentin

[why_reproducible_build.diff (text/x-patch, attachment)]

[signature.asc (application/pgp-signature, attachment)]

Message #12 received at 807051-close@bugs.debian.org (full text, mbox, reply):

From: Ralf Treinen <treinen@debian.org>

To: 807051-close@bugs.debian.org

Subject: Bug#807051: fixed in why 2.36-1

Date: Tue, 11 Oct 2016 19:52:14 +0000

Source: why
Source-Version: 2.36-1

We believe that the bug you reported is fixed in the latest version of
why, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 807051@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ralf Treinen <treinen@debian.org> (supplier of updated why package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 11 Oct 2016 21:28:06 +0200
Source: why
Binary: why libwhy-coq
Architecture: source
Version: 2.36-1
Distribution: unstable
Urgency: medium
Maintainer: Debian OCaml Maintainers <debian-ocaml-maint@lists.debian.org>
Changed-By: Ralf Treinen <treinen@debian.org>
Description:
 libwhy-coq - Why library for Coq
 why        - Software verification tool for C and Java
Closes: 440469 807051 815684
Changes:
 why (2.36-1) unstable; urgency=medium
 .
   * New upstream release. This version compiles with coq 8.5
     and drops the gwhy binary (Closes: #440469).
     - refreshed patches bprintf and edge
     - dropped patch makefile as ocaml warning options are now set
       by configure
     - dropped patch atp-versions which is now obsolete
   * Due to disappearance of the why binary:
     - drop why-cpulimit manpage since this binary is no longer build:
       (files d/why-cpulimit.1 and d/why.manpages)
     - remove d/why.links as upstream does not ship the why manpage any more
     - add build-dependency on why3 and why3-coq
     - package why: add dependency on why3
     - d/tests/frama-c+jessie+alt-ergo: adapt to why3
     - package why: remove Recommends of SMT solvers
     - remove tests why+{alt-ergo,coq,cvc3}
     - rewrite package description
     - add why.NEWS entry about the transition to why3
   * Due to disappearance of doc/manual.ps and ocamlgraph/ from upstream:
     - remove d/purify-source
     - drop filter from d/gbp.conf
   * Due to disappearance of examples from upstream: don't build binary
     package why-examples
   * Patch reproducible_build: remove timestamps (closes: #807051).
     Thanks to Valentin Lorentz for the patch!
   * debian/control:
     - Dropped build-dependency on libfloat-coq (closes: #815684)
     - Bumped build-dependency on frama-c to magnesium.
     - Standards-Version 3.9.8 (no change)
     - d/control remove redundant XS-Testsuite field
     - Vcs-{Browser,Git}: use secure URI
   * debian/watch:
     - format version 4
     - get link to newest version from the krakatoa home page (instead of
       trying to read the download/ directory).
   * debhelper-compatibility level 10:
     - bump value in d/compat
     - build-depends on debhelper (>=10)
     - invocation of dh in d/rules: sequence argument before options
   * update homepage to krakatoa.lri.fr
   * create manpages, based on the output of help2man, for jessie and krakatoa
   * drop autoconf from d/rules and from build-dependencies
   * d/rules: disable upstream tests
   * d/rules: create bin directory before invoking dh_auto_build
   * d/tests: add test krakato+alt-ergo
   * remove d/README.source which is obsolete.
Checksums-Sha1:
 7cfc3d196cd8340442e083634f7c55e4a155ecc1 2305 why_2.36-1.dsc
 c243c7415cd803c3c871951fb1b582024a4842dc 1769606 why_2.36.orig.tar.gz
 d09e6132d3f6f1c5e69da40e02b550ffbda57d3c 11276 why_2.36-1.debian.tar.xz
Checksums-Sha256:
 df953808e8b7890c82447594c253ac96c12d964e2fad75fdc55d73bac5e7dcf3 2305 why_2.36-1.dsc
 7c1dfad6a83844353dcc47aef83de79cdb358e2e27cc04271e68e8e046d329b7 1769606 why_2.36.orig.tar.gz
 6a73f8e99658a54e09826f9a8bb6c5b3640601fe0aea769db8e9ba35e446b096 11276 why_2.36-1.debian.tar.xz
Files:
 6f84cbb4763ea91d64b31ab15c6ce1d5 2305 math optional why_2.36-1.dsc
 31a7c2fc14657124179e4f970c2f56f5 1769606 math optional why_2.36.orig.tar.gz
 86bbbe84d6e05ae955c574b27640dc0c 11276 math optional why_2.36-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJX/UEEAAoJEHRcR2bUys3/QsEP/Rw+p69n5AbSoCqwdD2i/SyE
NMD8LxxzgAtiLIAP6NLmL8KETDQ8clvtDH4Ro0ut6Cf78JXAo2/pLwGyp9wmIT6p
kVdfGiEyByJYuYmts2N5E6Jw8j8qKVD/k9PvMF4NZtzEnGZzkzXtoo8jukVo3ijc
NX68/Fu4GYUCVElezhzmjwocRF/T7wLjqbE4X/2pWnPEN8uKkkDF8YFxsz2CTI0r
eMH/uAq8KjZwIYxfRfyF8uLjxGrfrOjcqBLDUVcVsN2zF9o6jIN4+RQnwxvyw/EC
RdrHj3SLQLh4JnL9X/8KvWZaDda2hkbS6eKEogJ7JEwCQU0gluWKb/qnRa7s0Aji
GRTdLEA/MfxSijkqHSTHdQt950UNTE5EOjEwPUQTfCbVGh8pyKbYR4YSL9cfVy6n
QcZq57O8Ov0EeBlXYcu1QhOyLKimTVzRofHasepvPdopKhUaIi5OS0G96PDdpR3o
5K1aH+OljbVeFyWYkZ94zAxsY2OBzmv4GJ5+tjJiIyCdvHSQ7lxYWrbWZGWxnQpN
qH8Uvi9yrryS9TL+JwXyKw2woflSY1XtkW+U23KtjnOHAKAvIJXCpB3ZQCRG0rcs
WFC9vgJyjlwbw+Aw7c1MvAyaPFR7PBWI1ikboxDaciq4rNNvhH+AY/j4NA8BgP7Z
iopu1QqQUv3XiFa8DuYa
=aDTk
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.