Debian Bug report logs - #833176
trafficserver: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: trafficserver: please make the build reproducible

Date: Mon, 1 Aug 2016 20:14:36 +0200

[Message part 1 (text/plain, inline)]

Source: trafficserver
Version: 6.1.1-1
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: umask username hostname
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that trafficserver could not be built reproducibly.
It embeds the build username/groupname/hostname into the binary and has
files in /etc varying with different umasks.

The attached patch uses deterministic values for user/group/hostname and
let's dh_fixperms normalize the permissions in /etc/trafficserver.
I didn't find a reason why it was excluded from dh_fixperms, but please
check if removing it from the exclude list is really okay.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[trafficserver.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 833176@bugs.debian.org (full text, mbox, reply):

From: Leif Hedstrom <zwoop@apache.org>

To: 833176@bugs.debian.org

Subject: Re: trafficserver: please make the build reproducible

Date: Tue, 30 Aug 2016 13:28:42 -0600

On Mon, 1 Aug 2016 20:14:36 +0200 Reiner Herrmann <reiner@reiner-h.de> wrote:
> Source: trafficserver
> Version: 6.1.1-1
> Severity: wishlist
> Tags: patch upstream
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: umask username hostname
> X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
> 
> Hi!
> 
> While working on the "reproducible builds" effort [1], we have noticed
> that trafficserver could not be built reproducibly.
> It embeds the build username/groupname/hostname into the binary and has
> files in /etc varying with different umasks.
> 
> The attached patch uses deterministic values for user/group/hostname and
> let's dh_fixperms normalize the permissions in /etc/trafficserver.
> I didn't find a reason why it was excluded from dh_fixperms, but please
> check if removing it from the exclude list is really okay.
> 


Not sure I’m reading the patch correctly, but I don’t think we’d take a hardcoded default to root/root/localhost like this. James Peach suggested we could add support for environment variable overrides for this. Or, we could add more —with-  options to configure (but this is likely less useful, so the environment path is probably best).

— Leif

Message #15 received at 833176-close@bugs.debian.org (full text, mbox, reply):

From: Jean Baptiste Favre <debian@jbfavre.org>

To: 833176-close@bugs.debian.org

Subject: Bug#833176: fixed in trafficserver 7.0.0-1

Date: Thu, 24 Nov 2016 21:08:12 +0000

Source: trafficserver
Source-Version: 7.0.0-1

We believe that the bug you reported is fixed in the latest version of
trafficserver, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 833176@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jean Baptiste Favre <debian@jbfavre.org> (supplier of updated trafficserver package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 16 Nov 2016 09:48:10 +0100
Source: trafficserver
Binary: trafficserver trafficserver-experimental-plugins trafficserver-dev
Architecture: source amd64
Version: 7.0.0-1
Distribution: unstable
Urgency: medium
Maintainer: Aron Xu <aron@debian.org>
Changed-By: Jean Baptiste Favre <debian@jbfavre.org>
Description:
 trafficserver - fast, scalable and extensible HTTP/1.1 compliant caching proxy se
 trafficserver-dev - Apache Traffic Server Software Developers Kit (SDK)
 trafficserver-experimental-plugins - experimental plugins for Apache Traffic Server
Closes: 803661 830856 833176 836124 836126
Changes:
 trafficserver (7.0.0-1) unstable; urgency=medium
 .
   [ Arno Töll ]
   * Remove myself as maintainer. Thanks to Aron and Jean Baptiste for stepping
     in on my place and keeping the package up to date. It makes the confident
     the package is in good hands now.
 .
   [ Jean Baptiste Favre ]
   * New upstream release 7.0.0
   * Patches refresh for 7.0.0
   * Update plugins list
   * Update build dependencies
   * Add pkgconfig .pc file in trafficserver-dev package
   * Enable experimental plugins webp_transform
   * Enable traffic_top build (Closes: #836126)
   * Remove Linux AIO support (Closes: #803661, #836124)
   * Fix FTBFS for mips64el (Closes: #830856)
   * Add patch to make the build reproductible (Closes: #833176)
 .
   [ Aron Xu ]
   * Set myself as Maintainer at the moment
   * Build-Depends on default-libmysqlclient-dev
Checksums-Sha1:
 289807daf46b7c2fd2e5036d0968f7b8d94d4541 2226 trafficserver_7.0.0-1.dsc
 d8e67a6b7abb1dcffc1b0a2d8b1569a277a2486c 8841413 trafficserver_7.0.0.orig.tar.bz2
 a2f2f0cc5b36250ce79e7d662d44e4771e4acfde 565088 trafficserver_7.0.0-1.debian.tar.xz
 be3e6031e58d7c81c04bf6d2a39d9b5902d4e634 42023828 trafficserver-dbgsym_7.0.0-1_amd64.deb
 b5495eb855c31f925098550a8119177a6694b344 1082102 trafficserver-dev_7.0.0-1_amd64.deb
 45abbb2fd4cfad4862f3b1c30cd3547bfa3ce919 2262148 trafficserver-experimental-plugins-dbgsym_7.0.0-1_amd64.deb
 4149943f353beeccfd347cea5eb99107e2e85eeb 289604 trafficserver-experimental-plugins_7.0.0-1_amd64.deb
 b1973bc1ee6b08ae3a87e62d26638c2c935494e7 13412 trafficserver_7.0.0-1_amd64.buildinfo
 c31259076de77fd57e9c8569745333228de74508 3038300 trafficserver_7.0.0-1_amd64.deb
Checksums-Sha256:
 abe64b3488b783ddbd89c0b593132548c94b04276f0bd417b3f0f3b9ebbc1513 2226 trafficserver_7.0.0-1.dsc
 5a7216d3c3862cd254e577bcfbd0d6820ad7a2eab588d5a820f02e2c2f23afab 8841413 trafficserver_7.0.0.orig.tar.bz2
 8dbc0ff8665d3a88ae4257c34746c9e086801cf122401fa653316b51c4b8bbcc 565088 trafficserver_7.0.0-1.debian.tar.xz
 219a19f0ac7b8bdbcfba8621d8146d838b957cd63264eaebfa274b27e215d25c 42023828 trafficserver-dbgsym_7.0.0-1_amd64.deb
 b133336272db89f22e334429889581ff1acd9773d2e497912e38b42154126633 1082102 trafficserver-dev_7.0.0-1_amd64.deb
 2e493951a23f8d5382c98a2fd4c92279fbff826d94264a5863fc41d090595c79 2262148 trafficserver-experimental-plugins-dbgsym_7.0.0-1_amd64.deb
 59124dbb2863d7a5532f2c17d5d09494249931e288e75e6fa632abc8028c4140 289604 trafficserver-experimental-plugins_7.0.0-1_amd64.deb
 27838423f384efac3199515420e2ac8899f3b6f868a2f2fa756b899c02720e7d 13412 trafficserver_7.0.0-1_amd64.buildinfo
 6b28238f39946bf986090c61cdadb3f97eca6fb7a4e1c782e11fa46604959f30 3038300 trafficserver_7.0.0-1_amd64.deb
Files:
 86aee31f71cc5dd97f5997f5919d38f8 2226 web optional trafficserver_7.0.0-1.dsc
 532f4b5213bff3c444e238bbb0e323a5 8841413 web optional trafficserver_7.0.0.orig.tar.bz2
 d7966850482b6a186ea747cf991ff0df 565088 web optional trafficserver_7.0.0-1.debian.tar.xz
 9fecd042d3e694f80a3a76426596bde7 42023828 debug extra trafficserver-dbgsym_7.0.0-1_amd64.deb
 81dced1603912125446d3cb09917d2bc 1082102 web optional trafficserver-dev_7.0.0-1_amd64.deb
 4d58423e3cd7a7149c0c58c765b52c2d 2262148 debug extra trafficserver-experimental-plugins-dbgsym_7.0.0-1_amd64.deb
 77e63d073eae2b4f5eddaecd37e7616c 289604 web optional trafficserver-experimental-plugins_7.0.0-1_amd64.deb
 e7c2535802c8d74c53947ab8e72a2962 13412 web optional trafficserver_7.0.0-1_amd64.buildinfo
 68730b6efde0d66a5699d52e55e4d139 3038300 web optional trafficserver_7.0.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJYN0gsAAoJEPbsVcVkKA0eMkoH/1y/zZfMi7yH1gPeBNLKQgCQ
pAjGXFq2A5G+g0DGo/qZJqMiodA4Szk5qesGxcJNgJUENOkK3Pfldqe3kLfl9zpq
lWPFa8AplifTgwidSizKgXj7KzmdGuUKjiIt8LgHMHptwQFgY99SOnFzjU9y2TNR
QCiuUpzpgi8KOcdaYHB5pBYJCL2GFXtLHldD3H36AH9r1Of7yrIhe3vZC+LrnFfY
TcCpP0ywyIq3OQvcqRNvsov8+0G9INtBHm5CrE0n+qm2fC93EaP1EcY5L/IltvDh
PKyV0g3hD9Zrceoez9esxZHDftNXMZlAUOP/UJAsljOw1wxE/F+g4HFW1EZzlc8=
=NXFo
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.