Debian Bug report logs - #823917
strip-nondeterminism: strip timestamps from nested zip files

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Emmanuel Bourg <ebourg@apache.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: strip-nondeterminism: strip timestamps from nested zip files

Date: Tue, 10 May 2016 13:58:21 +0200

Package: strip-nondeterminism
Version: 0.016-1
Severity: wishlist

Hi,

I noticed that the bnd package fails to build reproducibly because one of
the jar files installed (/usr/share/java/bnd-2.4.1.jar) contains a nested
jar (embedded-repo.jar) that isn't processed by dh_strip_nondeterminism.
The timestamps in bnd-2.4.1.jar are properly replaced, but the ones in
embedded-repo.jar still reflect the actual build date.

It would be nice if strip-nondeterminism was able to process the nested
zip files automatically.

Emmanuel Bourg

Message #14 received at 823917@bugs.debian.org (full text, mbox, reply):

From: Andrew Ayer <agwa@andrewayer.name>

To: Emmanuel Bourg <ebourg@apache.org>, 823917@bugs.debian.org

Subject: Re: Bug#823917: strip-nondeterminism: strip timestamps from nested zip files

Date: Thu, 9 Jun 2016 21:30:17 -0700

On Tue, 10 May 2016 13:58:21 +0200
Emmanuel Bourg <ebourg@apache.org> wrote:

> I noticed that the bnd package fails to build reproducibly because
> one of the jar files installed (/usr/share/java/bnd-2.4.1.jar)
> contains a nested jar (embedded-repo.jar) that isn't processed by
> dh_strip_nondeterminism. The timestamps in bnd-2.4.1.jar are properly
> replaced, but the ones in embedded-repo.jar still reflect the actual
> build date.
> 
> It would be nice if strip-nondeterminism was able to process the
> nested zip files automatically.

Excellent idea!  I've implemented this in strip-nondeterminism 0.019,
which I'm uploading right now.

Cheers,
Andrew

Message #19 received at 823917-close@bugs.debian.org (full text, mbox, reply):

From: Andrew Ayer <agwa@andrewayer.name>

To: 823917-close@bugs.debian.org

Subject: Bug#823917: fixed in strip-nondeterminism 0.019-1

Date: Fri, 10 Jun 2016 05:25:03 +0000

Source: strip-nondeterminism
Source-Version: 0.019-1

We believe that the bug you reported is fixed in the latest version of
strip-nondeterminism, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 823917@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrew Ayer <agwa@andrewayer.name> (supplier of updated strip-nondeterminism package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 09 Jun 2016 21:17:19 -0700
Source: strip-nondeterminism
Binary: libfile-stripnondeterminism-perl strip-nondeterminism dh-strip-nondeterminism
Architecture: source
Version: 0.019-1
Distribution: unstable
Urgency: medium
Maintainer: Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>
Changed-By: Andrew Ayer <agwa@andrewayer.name>
Description:
 dh-strip-nondeterminism - file non-deterministic information stripper — Debhelper add-on
 libfile-stripnondeterminism-perl - file non-deterministic information stripper — Perl module
 strip-nondeterminism - file non-deterministic information stripper — stand-alone tool
Closes: 823917
Changes:
 strip-nondeterminism (0.019-1) unstable; urgency=medium
 .
   * New upstream release:
     - Recursively normalize JAR files embedded within JAR files
       (Closes: #823917)
     - Add framework for "clamping" the timestamp
     - Add timestamp clamping support to gzip handler
Checksums-Sha1:
 3202feb9a3bf4d4cbb8ada30905aacfd83cb6be3 2303 strip-nondeterminism_0.019-1.dsc
 bd02a9febe7ca3fc357df3ea80e5e6024674e460 25730 strip-nondeterminism_0.019.orig.tar.gz
 b362f9d1c357c436d74f6360b655d7197c75d3e1 4392 strip-nondeterminism_0.019-1.debian.tar.xz
Checksums-Sha256:
 5ef9037efa1c79d637fbd1f7bbefcacc301aee9952df1acebf4afd481cf72488 2303 strip-nondeterminism_0.019-1.dsc
 00f849250b7ecdb17892e1acdfc93790233e3c0873d40a3768e8be2de41aaa44 25730 strip-nondeterminism_0.019.orig.tar.gz
 be9f60e227b0df0e25eb31a62d7af3a18d72b19d1a2b06271b839b8462bf2408 4392 strip-nondeterminism_0.019-1.debian.tar.xz
Files:
 262e732638027494f0a51f831033c991 2303 devel optional strip-nondeterminism_0.019-1.dsc
 11d82f449979c1c7ea8ecb7a15d4133a 25730 devel optional strip-nondeterminism_0.019.orig.tar.gz
 b160ad6b22343e20fc87e74a02e08bd7 4392 devel optional strip-nondeterminism_0.019-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=rP/7
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.