Debian Bug report logs - #831569
libwebsockets: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: submit@bugs.debian.org

Subject: libwebsockets: please make the build reproducible

Date: Sun, 17 Jul 2016 14:10:46 +0200

[Message part 1 (text/plain, inline)]

Source: libwebsockets
Version: 1.7.3-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

Whilst working on the "reproducible builds" effort [0], we noticed
that libwebsockets could not be built reproducibly.

Patch attached. Whilst it uses a deterministic key (!!), this is
a) a test server and b) key was not being varied for each installation
prior to this patch, so it is "no worse".

 [0] https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[libwebsockets.diff.txt (text/plain, attachment)]

Message #10 received at 831569@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: 831569@bugs.debian.org

Subject: Re: Bug#831569: libwebsockets: please make the build reproducible

Date: Tue, 20 Sep 2016 12:38:10 +0100

Dear Maintainer,

> Source: libwebsockets
> Version: 1.2.2-1
> Tags: patch

There hasn't seem to be any update on this bug in 64 days, in which
time the Reproducible Builds effort has come on a long way. :)

Would you consider applying this patch and uploading?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #15 received at 831569@bugs.debian.org (full text, mbox, reply):

From: Gianfranco Costamagna <locutusofborg@debian.org>

To: 831569@bugs.debian.org, roam@ringlet.net

Subject: Re: Bug#831569: libwebsockets: please make the build reproducible

Date: Wed, 28 Sep 2016 00:23:54 +0200

[Message part 1 (text/plain, inline)]

Hi Peter

> There hasn't seem to be any update on this bug in 64 days, in which
> time the Reproducible Builds effort has come on a long way. :)
> 
> Would you consider applying this patch and uploading?

are you aware of the two bug affecting this package?

thanks,
G.

[signature.asc (application/pgp-signature, attachment)]

Message #20 received at 831569@bugs.debian.org (full text, mbox, reply):

From: Peter Pentchev <roam@ringlet.net>

To: Chris Lamb <lamby@debian.org>

Cc: 831569@bugs.debian.org

Subject: Re: Bug#831569: libwebsockets: please make the build reproducible

Date: Sat, 1 Oct 2016 02:42:29 +0300

[Message part 1 (text/plain, inline)]

Control: tag -1 + pending

On Tue, Sep 20, 2016 at 12:38:10PM +0100, Chris Lamb wrote:
> Dear Maintainer,
> 
> > Source: libwebsockets
> > Version: 1.2.2-1
> > Tags: patch
> 
> There hasn't seem to be any update on this bug in 64 days, in which
> time the Reproducible Builds effort has come on a long way. :)
> 
> Would you consider applying this patch and uploading?

Hi,

Thanks for doing the work, and sorry for the delayed reply!

I've now included the patch in our Git repository; after some more
work, it should be uploaded to experimental in the next couple of
days and then, hopefully, to unstable soonish thereafter.

Thanks again for all your work on reproducible builds!

G'luck,
Peter

-- 
Peter Pentchev  roam@ringlet.net roam@FreeBSD.org pp@storpool.com
PGP key:        http://people.FreeBSD.org/~roam/roam.key.asc
Key fingerprint 2EE7 A7A5 17FC 124C F115  C354 651E EFB0 2527 DF13

[signature.asc (application/pgp-signature, inline)]

Message #27 received at 831569-close@bugs.debian.org (full text, mbox, reply):

From: Peter Pentchev <roam@ringlet.net>

To: 831569-close@bugs.debian.org

Subject: Bug#831569: fixed in libwebsockets 2.0.3-1

Date: Thu, 06 Oct 2016 12:48:51 +0000

Source: libwebsockets
Source-Version: 2.0.3-1

We believe that the bug you reported is fixed in the latest version of
libwebsockets, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 831569@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Peter Pentchev <roam@ringlet.net> (supplier of updated libwebsockets package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 02 Oct 2016 02:27:22 +0300
Source: libwebsockets
Binary: libwebsockets8 libwebsockets-dev libwebsockets-test-server libwebsockets-test-server-common
Architecture: source
Version: 2.0.3-1
Distribution: experimental
Urgency: medium
Maintainer: Peter Pentchev <roam@ringlet.net>
Changed-By: Peter Pentchev <roam@ringlet.net>
Description:
 libwebsockets-dev - lightweight C websockets library - development files
 libwebsockets-test-server - lightweight C websockets library - test servers
 libwebsockets-test-server-common - lightweight C websockets library - test servers data
 libwebsockets8 - lightweight C websockets library
Closes: 828416 831569
Changes:
 libwebsockets (2.0.3-1) experimental; urgency=medium
 .
   * Add the typos patch to correct some typographical errors.
   * Fix the upstream Git URLs in the watch file and the upstream
     metadata file to reflect another URL change on libwebsockets.org.
   * Use the HTTPS scheme for the copyright format specification URL.
   * Use a pregenerated test server SSL key to make the build reproducible.
     Closes: #831569; thanks, Chris Lamb!
   * Fix the build with OpenSSL 1.1.  Closes: #828416; thanks, Kurt Roeckx!
   * New upstream release:
     - add the new lws_snprintf function to the symbols file
     - add the soname-8 patch to avoid a SONAME bump merely for
       an added function
   * Point the Vcs-* URLs to the debian-v2.0-stable branch.
   * Bump the debhelper compatibility level to 10:
     - drop --parallel from the dh invocation, it is the default now
Checksums-Sha1:
 03d21f7d6e66a6fbfd85981b654c0dc71d8d685d 2300 libwebsockets_2.0.3-1.dsc
 6d99f22f9431333e0eb8bfab7e07d8b0f30780cf 3000164 libwebsockets_2.0.3.orig.tar.gz
 1678f65f2c177550de815aa25f3ffe005017f6bb 12576 libwebsockets_2.0.3-1.debian.tar.xz
Checksums-Sha256:
 232d7eb297d2111fa949ad9f0fedebd5e3a90e01c989807c2119bfc071960196 2300 libwebsockets_2.0.3-1.dsc
 cf0e91b564c879ab98844385c98e7c9e298cbb969dbc251a3f18a47feb94342c 3000164 libwebsockets_2.0.3.orig.tar.gz
 c9155719dd09dda48066e4a04c8be72bcb4bb3cab5703d4a6a3a5e588d8bf2d0 12576 libwebsockets_2.0.3-1.debian.tar.xz
Files:
 0a083dbe1535f2e213fd9b6e5c7d86a5 2300 libs optional libwebsockets_2.0.3-1.dsc
 a025156d606d90579e65d53ccd062a94 3000164 libs optional libwebsockets_2.0.3.orig.tar.gz
 6c3857de26852e801fbe0b6eea5d31d5 12576 libs optional libwebsockets_2.0.3-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=LBhI
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.