Debian Bug report logs - #828890
libsdl2-gfx: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: libsdl2-gfx: please make the build reproducible

Date: Tue, 28 Jun 2016 21:53:54 +0200

[Message part 1 (text/plain, inline)]

Source: libsdl2-gfx
Version: 1.0.1+dfsg-3
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that libsdl2-gfx could not be built reproducibly.
The example tarball still has time and order variations.

The attached patch fixes this by telling tar to sort the file list and
clamp the mtime at SOURCE_DATE_EPOCH.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[libsdl2-gfx.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 828890@bugs.debian.org (full text, mbox, reply):

From: Gianfranco Costamagna <locutusofborg@debian.org>

To: Reiner Herrmann <reiner@reiner-h.de>, "828890@bugs.debian.org" <828890@bugs.debian.org>

Subject: Re: Bug#828890: libsdl2-gfx: please make the build reproducible

Date: Tue, 28 Jun 2016 20:13:45 +0000 (UTC)

control: tags -1 pending

>While working on the "reproducible builds" effort [1], we have noticed
>that libsdl2-gfx could not be built reproducibly.>The example tarball still has time and order variations.
>
>The attached patch fixes this by telling tar to sort the file list and
>clamp the mtime at SOURCE_DATE_EPOCH.



*thanks* :)
uploaded with some other changes!
thanks again for the great help!

Gianfranco

Message #17 received at 828890-close@bugs.debian.org (full text, mbox, reply):

From: Gianfranco Costamagna <locutusofborg@debian.org>

To: 828890-close@bugs.debian.org

Subject: Bug#828890: fixed in libsdl2-gfx 1.0.1+dfsg-4

Date: Tue, 28 Jun 2016 20:24:17 +0000

Source: libsdl2-gfx
Source-Version: 1.0.1+dfsg-4

We believe that the bug you reported is fixed in the latest version of
libsdl2-gfx, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 828890@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Gianfranco Costamagna <locutusofborg@debian.org> (supplier of updated libsdl2-gfx package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 28 Jun 2016 22:10:11 +0200
Source: libsdl2-gfx
Binary: libsdl2-gfx-1.0-0 libsdl2-gfx-dbg libsdl2-gfx-dev libsdl2-gfx-doc
Architecture: source
Version: 1.0.1+dfsg-4
Distribution: unstable
Urgency: medium
Maintainer: Debian SDL packages maintainers <pkg-sdl-maintainers@lists.alioth.debian.org>
Changed-By: Gianfranco Costamagna <locutusofborg@debian.org>
Description:
 libsdl2-gfx-1.0-0 - drawing and graphical effects extension for SDL2
 libsdl2-gfx-dbg - debugging symbols for SDL2_gfx
 libsdl2-gfx-dev - development files for SDL2_gfx
 libsdl2-gfx-doc - documentation files for SDL2_gfx
Closes: 828890
Changes:
 libsdl2-gfx (1.0.1+dfsg-4) unstable; urgency=medium
 .
   [ Gianfranco Costamagna ]
   * Bump std-version
   * Make VCS fields in secure mode
 .
   [ Reiner Herrmann ]
   * Make build reproducible (Closes: #828890)
Checksums-Sha1:
 53b7a576a6fb213838755d072c06383ecd2a438c 2432 libsdl2-gfx_1.0.1+dfsg-4.dsc
 270a00f7a279d671286763ec517d5f18c83750d2 5328 libsdl2-gfx_1.0.1+dfsg-4.debian.tar.xz
Checksums-Sha256:
 0a7869cdead8e9b09cbd019222d5560b7bf2921fa1fd3fbb4ff0e0ee08a29366 2432 libsdl2-gfx_1.0.1+dfsg-4.dsc
 0c5be53aced3ea365ad183336727cc54fb6961efb477cebdafcfe29697bb7053 5328 libsdl2-gfx_1.0.1+dfsg-4.debian.tar.xz
Files:
 02777bf5a07e1c1c052b7c388202e0e2 2432 libs optional libsdl2-gfx_1.0.1+dfsg-4.dsc
 3d6db25177b78691e1e700dc2678c85a 5328 libs optional libsdl2-gfx_1.0.1+dfsg-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=4MUr
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.