Debian Bug report logs - #827197
gnuplot: please make the build reproducible (timestamps,username,environment)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Alexis Bienvenüe <pado@passoire.fr>

To: submit@bugs.debian.org

Subject: gnuplot: please make the build reproducible (timestamps,username,environment)

Date: Mon, 13 Jun 2016 17:56:05 +0200

[Message part 1 (text/plain, inline)]

Source: gnuplot
Version: 5.0.3+dfsg3-5
Severity: wishlist
Tags: upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps username environment
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
Control: block -1 by 827187

Dear Maintainer,

While working on the "reproducible builds" effort [1], we have noticed
that gnuplot has following reproducibility issues :

* gnuplot embeds timestamps in its ps output. When the SOURCE_DATE_EPOCH
environment variable [2] is set, it can be used to make the output
reproducible. See 13_honour_SOURCE_DATE_EPOCH.patch

* gnuplot embeds the username in its ps output. I think the unix
username is not usefull in this output, and can be stripped. See
14_strip_username_from_output.patch - maybe it is possible to strip it
only if SOURCE_DATE_EPOCH is set if this username is considered to be
relevant here.

* The SHELL used when building gnuplot is recorded in the Makefiles
included in gnuplot-doc. I think /bin/sh can always be used instead. See
changes with override_dh_auto_configure

Once these patches are applied, and once https://bugs.debian.org/827187
is fixed, gnuplot can be built reproducibly in our current experimental
framework.

Regards,
Alexis Bienvenüe.

[1] https://wiki.debian.org/ReproducibleBuilds
[2] https://reproducible-builds.org/specs/source-date-epoch/

[gnuplot_5.0.3+dfsg3-5_reproducible.diff (text/x-patch, attachment)]

Message #14 received at 827197-close@bugs.debian.org (full text, mbox, reply):

From: Anton Gladky <gladk@debian.org>

To: 827197-close@bugs.debian.org

Subject: Bug#827197: fixed in gnuplot 5.0.3+dfsg3-6

Date: Fri, 17 Jun 2016 16:35:57 +0000

Source: gnuplot
Source-Version: 5.0.3+dfsg3-6

We believe that the bug you reported is fixed in the latest version of
gnuplot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 827197@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Anton Gladky <gladk@debian.org> (supplier of updated gnuplot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Mon, 13 Jun 2016 22:06:57 +0200
Source: gnuplot
Binary: gnuplot gnuplot-doc gnuplot-nox gnuplot-qt gnuplot-x11 gnuplot-data
Architecture: source
Version: 5.0.3+dfsg3-6
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Team <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Anton Gladky <gladk@debian.org>
Description:
 gnuplot    - Command-line driven interactive plotting program, version 5
 gnuplot-data - Command-line driven interactive plotting program. Data-files
 gnuplot-doc - Command-line driven interactive plotting program. Doc-package
 gnuplot-nox - Command-line driven interactive plotting program. No-X package
 gnuplot-qt - Command-line driven interactive plotting program. QT-package
 gnuplot-x11 - Command-line driven interactive plotting program. X-package
Closes: 827197
Changes:
 gnuplot (5.0.3+dfsg3-6) unstable; urgency=medium
 .
   [ Alexis Bienvenüe ]
   * [8487b29] Make the build reproducible. (Closes: #827197)
Checksums-Sha1:
 cd1ce629d92c874dc8e5ce6bfac7c65e2b465661 2706 gnuplot_5.0.3+dfsg3-6.dsc
 39e1b4099d3fc61b662ce35f28dffa10cc865647 29132 gnuplot_5.0.3+dfsg3-6.debian.tar.xz
Checksums-Sha256:
 665a77f2cafa00bb38fe4e83c161fe0792aced3f653b3435f25e59ebdf9b5cf0 2706 gnuplot_5.0.3+dfsg3-6.dsc
 c90841a300abeb58ef5161bc78e818734f9b42de182dda6bbec53608960f433e 29132 gnuplot_5.0.3+dfsg3-6.debian.tar.xz
Files:
 02844d1f445d5d91fd7c4119359419d3 2706 math optional gnuplot_5.0.3+dfsg3-6.dsc
 36fbfcf2737a8b3dd5f3de91a405ca68 29132 math optional gnuplot_5.0.3+dfsg3-6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=UYIU
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.