Debian Bug report logs - #833070
wget: please make the build reproducible

version graph

Package: src:wget; Maintainer for src:wget is Noël Köthe <noel@debian.org>;

Reported by: Reiner Herrmann <reiner@reiner-h.de>

Date: Sun, 31 Jul 2016 13:33:02 UTC

Severity: wishlist

Tags: patch

Found in version wget/1.18-2

Fixed in version wget/1.18-3

Done: Noël Köthe <noel@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Noël Köthe <noel@debian.org>:
Bug#833070; Package src:wget. (Sun, 31 Jul 2016 13:33:06 GMT) (full text, mbox, link).


Acknowledgement sent to Reiner Herrmann <reiner@reiner-h.de>:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Noël Köthe <noel@debian.org>. (Sun, 31 Jul 2016 13:33:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>
To: submit@bugs.debian.org
Subject: wget: please make the build reproducible
Date: Sun, 31 Jul 2016 15:30:06 +0200
[Message part 1 (text/plain, inline)]
Source: wget
Version: 1.18-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that wget could not be built reproducibly.
The gettext mo files contain the current date/time in metadata
(POT-Creation-Date).
This can be normalized to a deterministic value (changelog date)
by strip-nondeterminism. See attached patch.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
[wget.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#833070; Package src:wget. (Thu, 22 Sep 2016 14:18:09 GMT) (full text, mbox, link).


Acknowledgement sent to Noël Köthe <noel@debian.org>:
Extra info received and forwarded to list. (Thu, 22 Sep 2016 14:18:09 GMT) (full text, mbox, link).


Message #10 received at 833070@bugs.debian.org (full text, mbox, reply):

From: Noël Köthe <noel@debian.org>
To: Reiner Herrmann <reiner@reiner-h.de>, 833070@bugs.debian.org
Subject: Re: Bug#833070: wget: please make the build reproducible
Date: Thu, 22 Sep 2016 16:14:49 +0200
[Message part 1 (text/plain, inline)]
Hello Reiner,

Am Sonntag, den 31.07.2016, 15:30 +0200 schrieb Reiner Herrmann:

> While working on the "reproducible builds" effort [1], we have
> noticed
> that wget could not be built reproducibly.
> The gettext mo files contain the current date/time in metadata
> (POT-Creation-Date).
> This can be normalized to a deterministic value (changelog date)
> by strip-nondeterminism. See attached patch.

thx for your patch. I will add it with my next upload. I need to add a
build dependency for dh-strip-nondeterminism which is missing in your
patch.

Regards

	Noël
[signature.asc (application/pgp-signature, inline)]

Reply sent to Noël Köthe <noel@debian.org>:
You have taken responsibility. (Thu, 22 Sep 2016 16:48:09 GMT) (full text, mbox, link).


Notification sent to Reiner Herrmann <reiner@reiner-h.de>:
Bug acknowledged by developer. (Thu, 22 Sep 2016 16:48:09 GMT) (full text, mbox, link).


Message #15 received at 833070-close@bugs.debian.org (full text, mbox, reply):

From: Noël Köthe <noel@debian.org>
To: 833070-close@bugs.debian.org
Subject: Bug#833070: fixed in wget 1.18-3
Date: Thu, 22 Sep 2016 16:44:16 +0000
Source: wget
Source-Version: 1.18-3

We believe that the bug you reported is fixed in the latest version of
wget, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 833070@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Noël Köthe <noel@debian.org> (supplier of updated wget package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 22 Sep 2016 17:04:27 +0200
Source: wget
Binary: wget wget-udeb
Architecture: source amd64
Version: 1.18-3
Distribution: unstable
Urgency: medium
Maintainer: Noël Köthe <noel@debian.org>
Changed-By: Noël Köthe <noel@debian.org>
Description:
 wget       - retrieves files from the web
 wget-udeb  - retrieves files from the web (udeb)
Closes: 833070
Changes:
 wget (1.18-3) unstable; urgency=medium
 .
   * make the build reproducible (Thanks Reiner!). closes: #833070
Checksums-Sha1:
 33360bb939334e32d169ad40765f3e139ddd5b50 1870 wget_1.18-3.dsc
 499df056c6cfb98e35fbe88a29aedfbb148827d9 20584 wget_1.18-3.debian.tar.xz
 6bd8fb1591ea2f78131dbab588a31d4f2cbbb297 449562 wget-dbgsym_1.18-3_amd64.deb
 1655e95ccd54c23229f58ddfb3ceb1c062595e44 148030 wget-udeb_1.18-3_amd64.udeb
 bbfc29c0aba54e8e9f72c376fbfafa5b7651b7d2 798852 wget_1.18-3_amd64.deb
Checksums-Sha256:
 387915a62a31377cf3c15b44a89357b307271f769e9ee298d01787a8c7b8edd2 1870 wget_1.18-3.dsc
 04b78e4ebd2f25c3c3fc634476fd23d689575b14c868e4062cfb947fa3638279 20584 wget_1.18-3.debian.tar.xz
 e49cb4c590675666cead62ae6ab1089f6017c27e1172d98965ec55f06887f2d2 449562 wget-dbgsym_1.18-3_amd64.deb
 edc4ff2df4240712c9982e19522d4bc276d45a17792730c8ca4ca0a4fabbcd06 148030 wget-udeb_1.18-3_amd64.udeb
 a8abd835f7489f4931da9e2af1b1c892fe4d9562541e30d0e48c26aca816023f 798852 wget_1.18-3_amd64.deb
Files:
 c5bb907400f2a5baf623084d0f4e7638 1870 web important wget_1.18-3.dsc
 94608f4b51162dd8dd535dd2edeb53aa 20584 web important wget_1.18-3.debian.tar.xz
 67e875acdde221dad66fee12619b3674 449562 debug extra wget-dbgsym_1.18-3_amd64.deb
 ecdb2fa97dbfc4d991adafb182712efd 148030 debian-installer extra wget-udeb_1.18-3_amd64.udeb
 3624cf3fb098d3762b65ed12cdf4a424 798852 web important wget_1.18-3_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJX4+hjAAoJEGjAeL6I+AzafXcQAIlZqppiBipanQaOPhP3OCBN
CzqFCj3m7Ad7mqVP5wmFB3ZkpOaBLaE5IqtZGI5qdw1HVLii2g4RKJUQN9C2q5V1
k25n6QbgXLpsjAWO96RxOcGK0/WWFNOTfigHFVr/n8dbZWF0/P9QProxkAf4kOBb
yQh4trRvkQsfJQ+EW8HErjLC5P/a0OyL3P7fmm+P8ubTV/Zgut7U8gy4gZBrJjXn
6CfRpQgbDTRFwJyKIXBiVAQALnFJRVhtmuBQ//KDn5KpHaZU7Fzgqa5xGYBjgvmg
BAhiLeEtvy6+mgL1pX+5CwOEmaBQTe0xWhYd2VsjEfKltTVk00OAakApd+pdZDPT
LN1WwneCqEvqaFIY1Nn8rpXiSeXO4ieouMkU4rA/D7/sK0Eok59BwrI0yjeOxHx1
KqiS/v9nJ3rQX42f3/vX9rxMdAbYnIHqSyupD6MNuHvb5ODKa08ilofZx3qcy8Xf
zeG62s3DuhQJIIW2qKeGPW1Jwpua8bFn3SOxTo/C9R9nZRvU0N6pzajfG2J8U+N2
wub5EMFztCbvpOk64Y+g1nMzWDPPiPqFVu6/dRxRyCRM32RG/OkQ2YZ0bF8J3FeR
r84dMNuxCqOg1HOyyjBvgYqBjGQJmOP4MpTU7EQPamSdtXTF5ts9h96i5y1yTfQc
/r7Xuf7ujQPHfEez1boI
=p4Ru
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 30 Oct 2016 07:35:40 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 13:54:08 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.