Debian Bug report logs - #825881
pyx: please make the build reproducible (timestamps,randomness)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Alexis Bienvenüe <pado@passoire.fr>

To: submit@bugs.debian.org

Subject: pyx: please make the build reproducible (timestamps,randomness)

Date: Tue, 31 May 2016 08:51:35 +0200

[Message part 1 (text/plain, inline)]

Source: pyx
Version: 0.12.1-4
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps randomness
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Dear Maintainer,

While working on the `€œreproducible builds'€ effort [1], we have noticed
that 'pyx' could not be built reproducibly.

Please find attached proposed solutions for the following issues:
* timestamps in the produced ps/pdf files can be made reproducible using
the SOURCE_DATE_EPOCH environment variable [2] (when set), that
corresponds to the last debian/changelog entry date when building a
debian package. See reproducible-timestamps.patch
* image names include memory addresses. They can eg. be replaced by some
hash of the image itself, see reproducible-image-name.patch

Once applied, pyx can be built reproducibly in our current
experimental framework.

Regards,
Alexis Bienvenüe.

 [1]: https://wiki.debian.org/ReproducibleBuilds
 [2]: https://reproducible-builds.org/specs/source-date-epoch/

[reproducible-timestamps.patch (text/x-patch, attachment)]

[reproducible-image-name.patch (text/x-patch, attachment)]

Message #10 received at 825881-close@bugs.debian.org (full text, mbox, reply):

From: Stuart Prescott <stuart@debian.org>

To: 825881-close@bugs.debian.org

Subject: Bug#825881: fixed in pyx 0.12.1-5

Date: Fri, 03 Jun 2016 17:00:16 +0000

Source: pyx
Source-Version: 0.12.1-5

We believe that the bug you reported is fixed in the latest version of
pyx, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 825881@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stuart Prescott <stuart@debian.org> (supplier of updated pyx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 03 Jun 2016 23:47:02 +1000
Source: pyx
Binary: python-pyx python-pyx-doc
Architecture: source
Version: 0.12.1-5
Distribution: unstable
Urgency: medium
Maintainer: Stuart Prescott <stuart@debian.org>
Changed-By: Stuart Prescott <stuart@debian.org>
Closes: 825881
Description: 
 python-pyx-doc - Python 2 module for generating PostScript graphics (documentation
 python-pyx - Python 2 module for generating PostScript graphics
Changes:
 pyx (0.12.1-5) unstable; urgency=medium
 .
   * Add patches to make build reproducible (timestamps,randomness)
     with thanks to Alexis Bienvenüe (Closes: #825881)
   * Bump standards version to 3.9.8 (no changes required).
   * Change tostring() calls to tobytes() calls for recent PIL
Checksums-Sha1: 
 a6791227dcd833e5b4c982629fa7378ebbe3a6d4 2016 pyx_0.12.1-5.dsc
 70d80e6828ab04b226a46fca3199d48c79a36dfd 16456 pyx_0.12.1-5.debian.tar.xz
Checksums-Sha256: 
 ba68fb094d2e0226b65cc093090e874079ee084eeff977d258b9a4670b5bcf31 2016 pyx_0.12.1-5.dsc
 10ad28d08c49c0c7a1c6fb730cd1bb909ada1abaa95ae0344619cd51018870ce 16456 pyx_0.12.1-5.debian.tar.xz
Files: 
 f8e7766424b89e35a38f42b8848fa5b6 2016 python optional pyx_0.12.1-5.dsc
 90088fcfbf64437bbbbf15622d524a53 16456 python optional pyx_0.12.1-5.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=rrqx
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.