Debian Bug report logs - #834050
libpam-ldap: please make the build reproducible

version graph

Package: src:libpam-ldap; Maintainer for src:libpam-ldap is Lucas de Castro Borges <lucas@gnuabordo.com.br>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Thu, 11 Aug 2016 16:30:15 UTC

Severity: wishlist

Tags: patch

Found in version libpam-ldap/186-1

Fixed in version libpam-ldap/186-4.1

Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox

Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Lucas de Castro Borges <lucascastroborges@gmail.com>:
Bug#834050; Package src:libpam-ldap. (Thu, 11 Aug 2016 16:30:19 GMT) (full text, mbox, link).

Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Lucas de Castro Borges <lucascastroborges@gmail.com>. (Thu, 11 Aug 2016 16:30:19 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: libpam-ldap: please make the build reproducible
Date: Thu, 11 Aug 2016 17:29:18 +0100
[Message part 1 (text/plain, inline)]
Source: libpam-ldap
Version: 186-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

Whilst working on the "reproducible builds" effort [0], we noticed
that libpam-ldap could not be built reproducibly.

Patch attached.

 [0] https://wiki.debian.org/ReproducibleBuilds


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[libpam-ldap.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucascastroborges@gmail.com>:
Bug#834050; Package src:libpam-ldap. (Mon, 17 Oct 2016 09:57:07 GMT) (full text, mbox, link).

Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucascastroborges@gmail.com>. (Mon, 17 Oct 2016 09:57:07 GMT) (full text, mbox, link).

Message #10 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Mon, 17 Oct 2016 10:54:35 +0100
Dear Maintainer,

> Source: libpam-ldap
> Version: 184-8.5
> Tags: patch

There hasn't seem to be any update on this bug in 66 days, in which
time the Reproducible Builds effort has come on a long way. :)

Would you consider applying this patch and uploading?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Sat, 04 Feb 2017 21:03:14 GMT) (full text, mbox, link).

Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Sat, 04 Feb 2017 21:03:14 GMT) (full text, mbox, link).

Message #15 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Sun, 05 Feb 2017 10:00:43 +1300
> Would you consider applying this patch and uploading?

Friendly ping on this :)


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Sat, 04 Feb 2017 23:57:02 GMT) (full text, mbox, link).

Acknowledgement sent to Lucas Castro <lucas@gnuabordo.com.br>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Sat, 04 Feb 2017 23:57:03 GMT) (full text, mbox, link).

Message #20 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Lucas Castro <lucas@gnuabordo.com.br>
To: Chris Lamb <lamby@debian.org>, 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Sat, 4 Feb 2017 20:54:34 -0300
[Message part 1 (text/plain, inline)]
Sorry, I hadn't noticed the report.

Tomorrow I'm going to take a loot at it.


--
Lucas Castro
Em 04-02-2017 18:00, Chris Lamb escreveu:
>>  this patch and uploading?
> Friendly ping on this :)
>
>
> Best wishes,


[Message part 2 (text/html, inline)]
[signature.asc (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Tue, 14 Feb 2017 16:57:02 GMT) (full text, mbox, link).

Acknowledgement sent to Lucas Castro <lucas@gnuabordo.com.br>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Tue, 14 Feb 2017 16:57:02 GMT) (full text, mbox, link).

Message #25 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Lucas Castro <lucas@gnuabordo.com.br>
To: Chris Lamb <lamby@debian.org>, 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Tue, 14 Feb 2017 13:51:50 -0300
[Message part 1 (text/plain, inline)]
Hello,
I suppose the patch hadn't fixed the bug.

It can be check on [1].


[1]
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/libpam-ldap.html


Em 04-02-2017 20:54, Lucas Castro escreveu:
>
> Sorry, I hadn't noticed the report.
>
> Tomorrow I'm going to take a loot at it.
>
>
> --
> Lucas Castro
> Em 04-02-2017 18:00, Chris Lamb escreveu:
>>>  this patch and uploading?
>> Friendly ping on this :)
>>
>>
>> Best wishes,
>


[Message part 2 (text/html, inline)]
[signature.asc (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Wed, 15 Feb 2017 04:15:03 GMT) (full text, mbox, link).

Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Wed, 15 Feb 2017 04:15:03 GMT) (full text, mbox, link).

Message #30 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: Lucas Castro <lucas@gnuabordo.com.br>, 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Wed, 15 Feb 2017 17:12:58 +1300
Lucas Castro wrote:

> I suppose the patch hadn't fixed the bug.

Ah, try:

  --- libpam-ldap-186.orig/vers_string
  +++ libpam-ldap-186/vers_string
  @@ -14,6 +14,10 @@ if ($ENV{'PROGRAM'}) { $PROGRAM = $ENV{'
 
   chop($AUTHOR);
   chop($DATE=`date -u`);
  +if (defined $ENV{SOURCE_DATE_EPOCH}) {
  +	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
  +	$AUTHOR="NO DEVELOPER SET";
  +}
   chop($CWD=`pwd`);
 
   ($PROJECT, $VERSION) = split(/\-/, &getCVSVersionInfo());


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Tue, 01 Sep 2020 22:57:02 GMT) (full text, mbox, link).

Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Tue, 01 Sep 2020 22:57:02 GMT) (full text, mbox, link).

Message #35 received at 834050@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: 834050@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Tue, 01 Sep 2020 22:53:03 -0000
Chris Lamb wrote:

> [..]

Gentle ping on this?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Wed, 02 Sep 2020 02:21:03 GMT) (full text, mbox, link).

Acknowledgement sent to Lucas Castro <lucas@gnuabordo.com.br>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Wed, 02 Sep 2020 02:21:03 GMT) (full text, mbox, link).

Message #40 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Lucas Castro <lucas@gnuabordo.com.br>
To: Chris Lamb <lamby@debian.org>, 834050@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Tue, 1 Sep 2020 23:08:01 -0300
I'm little busy this days,

If someone could make patch, please make a NMU.


On 9/1/20 7:53 PM, Chris Lamb wrote:
> Chris Lamb wrote:
>
>> [..]
> Gentle ping on this?
>
>
> Regards,
>
-- 
Lucas Castro

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Wed, 02 Sep 2020 22:57:03 GMT) (full text, mbox, link).

Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Wed, 02 Sep 2020 22:57:03 GMT) (full text, mbox, link).

Message #45 received at 834050@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: "Lucas Castro" <lucas@gnuabordo.com.br>, 834050@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Wed, 02 Sep 2020 22:52:03 -0000
Hi Lucas,

> I'm little busy this days,
>
> If someone could make patch, please make a NMU.

I think I will personally refrain from doing an NMU for such an
important security-related package for this issue, but thank you for
the 'go ahead'.

Indeed, given the importance of this package, is it ridiculous to suggest seeking a co-maintainer on debian-devel?


Regards,

--
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Thu, 03 Sep 2020 01:03:02 GMT) (full text, mbox, link).

Acknowledgement sent to Lucas Castro <lucas@gnuabordo.com.br>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Thu, 03 Sep 2020 01:03:03 GMT) (full text, mbox, link).

Message #50 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Lucas Castro <lucas@gnuabordo.com.br>
To: Chris Lamb <lamby@debian.org>, 834050@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Wed, 2 Sep 2020 22:01:02 -0300
On 9/2/20 7:52 PM, Chris Lamb wrote:
> Hi Lucas,
>
>> I'm little busy this days,
>>
>> If someone could make patch, please make a NMU.
> I think I will personally refrain from doing an NMU for such an
> important security-related package for this issue, but thank you for
> the 'go ahead'.
>
> Indeed, given the importance of this package, is it ridiculous to suggest seeking a co-maintainer on debian-devel?
Of course not.
> Regards,
>
> --
>        ,''`.
>       : :'  :     Chris Lamb
>       `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
>         `-
>
-- 
Lucas Castro

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Thu, 17 Nov 2022 19:51:04 GMT) (full text, mbox, link).

Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Thu, 17 Nov 2022 19:51:04 GMT) (full text, mbox, link).

Message #55 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: Chris Lamb <lamby@debian.org>, 834050@bugs.debian.org, Lucas Castro <lucas@gnuabordo.com.br>
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Thu, 17 Nov 2022 11:48:55 -0800
[Message part 1 (text/plain, inline)]
Control: tags 834050 pending

On 2017-02-15, Chris Lamb wrote:
> Lucas Castro wrote:
>
>> I suppose the patch hadn't fixed the bug.
>
> Ah, try:
>
>   --- libpam-ldap-186.orig/vers_string
>   +++ libpam-ldap-186/vers_string
>   @@ -14,6 +14,10 @@ if ($ENV{'PROGRAM'}) { $PROGRAM = $ENV{'
>  
>    chop($AUTHOR);
>    chop($DATE=`date -u`);
>   +if (defined $ENV{SOURCE_DATE_EPOCH}) {
>   +	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
>   +	$AUTHOR="NO DEVELOPER SET";
>   +}
>    chop($CWD=`pwd`);
>  
>    ($PROJECT, $VERSION) = split(/\-/, &getCVSVersionInfo());

This solved both the timestamp and build user issue!

There was another issue where the package and version information is
derived from the top-level build directory, but this can be fixed easily
by passing PROGRAM to dh_auto_build.

Uploaded an NMU to DELAYED/10 which fixes both outstanding issues:

diff -Nru libpam-ldap-186/debian/changelog libpam-ldap-186/debian/changelog
--- libpam-ldap-186/debian/changelog	2017-05-31 10:19:41.000000000 -0700
+++ libpam-ldap-186/debian/changelog	2022-11-17 11:42:13.000000000 -0800
@@ -1,3 +1,17 @@
+libpam-ldap (186-4.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+
+  [ Chris Lamb ]
+  * vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is
+    set. (Closes: #834050)
+
+  [ Vagrant Cascadian ]
+  * debian/rules: Pass PROGRAM to dh_auto_build override.
+    (Closes: #834050)
+
+ -- Vagrant Cascadian <vagrant@reproducible-builds.org>  Thu, 17 Nov 2022 11:42:13 -0800
+
 libpam-ldap (186-4) unstable; urgency=medium
 
   * Install /usr/share/pam-configs/ldap
diff -Nru libpam-ldap-186/debian/patches/series libpam-ldap-186/debian/patches/series
--- libpam-ldap-186/debian/patches/series	2017-02-10 20:39:24.000000000 -0800
+++ libpam-ldap-186/debian/patches/series	2022-11-17 11:42:13.000000000 -0800
@@ -6,3 +6,4 @@
 reproducible_build.patch
 configfile_install.patch
 configfile_references.patch
+vers_string-use-fixed-value-for-author-i.patch
diff -Nru libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch
--- libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	1969-12-31 16:00:00.000000000 -0800
+++ libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	2022-11-17 11:42:13.000000000 -0800
@@ -0,0 +1,21 @@
+From: Chris Lamb <lamby@debian.org>
+Date: Wed, 15 Feb 2017 17:12:58 +1300
+X-Dgit-Generated: 186-4.1 98efdb0f8a716ed9c1403523c90f3b0b6ff8c493
+Subject: vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is set.
+
+(Closes: #834050)
+
+---
+
+diff --git a/vers_string b/vers_string
+index 11af68a..5a072f3 100755
+--- a/vers_string
++++ b/vers_string
+@@ -16,6 +16,7 @@ chop($AUTHOR);
+ chop($DATE=`date -u`);
+ if (defined $ENV{SOURCE_DATE_EPOCH}) {
+ 	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
++	$AUTHOR="NO DEVELOPER SET";
+ }
+ chop($CWD=`pwd`);
+ 
diff -Nru libpam-ldap-186/debian/rules libpam-ldap-186/debian/rules
--- libpam-ldap-186/debian/rules	2017-05-31 10:19:28.000000000 -0700
+++ libpam-ldap-186/debian/rules	2022-11-17 11:42:13.000000000 -0800
@@ -4,6 +4,8 @@
 
 export DEB_BUILD_MAINT_OPTIONS= hardening=+bindnow
 
+include /usr/share/dpkg/pkg-info.mk
+
 %:
 	dh $@ --with autoreconf
 
@@ -17,3 +19,6 @@
 	dh_install
 	install -D -m 644 debian/libpam-ldap.pam-auth-update \
 		debian/libpam-ldap/usr/share/pam-configs/ldap
+
+override_dh_auto_build:
+	dh_auto_build -- PROGRAM=$(DEB_SOURCE)-$(DEB_VERSION_UPSTREAM)



live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Added tag(s) pending. Request was from Vagrant Cascadian <vagrant@reproducible-builds.org> to 834050-submit@bugs.debian.org. (Thu, 17 Nov 2022 19:51:04 GMT) (full text, mbox, link).

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Thu, 17 Nov 2022 21:15:05 GMT) (full text, mbox, link).

Acknowledgement sent to Lucas Castro <lucas@gnuabordo.com.br>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Thu, 17 Nov 2022 21:15:05 GMT) (full text, mbox, link).

Message #62 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Lucas Castro <lucas@gnuabordo.com.br>
To: Vagrant Cascadian <vagrant@reproducible-builds.org>, 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Thu, 17 Nov 2022 18:07:00 -0300
[Message part 1 (text/plain, inline)]
Thanks. = )

Em 17/11/2022 16:48, Vagrant Cascadian escreveu:
> Control: tags 834050 pending
>
> On 2017-02-15, Chris Lamb wrote:
>> Lucas Castro wrote:
>>
>>> I suppose the patch hadn't fixed the bug.
>> Ah, try:
>>
>>    --- libpam-ldap-186.orig/vers_string
>>    +++ libpam-ldap-186/vers_string
>>    @@ -14,6 +14,10 @@ if ($ENV{'PROGRAM'}) { $PROGRAM = $ENV{'
>>   
>>     chop($AUTHOR);
>>     chop($DATE=`date -u`);
>>    +if (defined $ENV{SOURCE_DATE_EPOCH}) {
>>    +	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
>>    +	$AUTHOR="NO DEVELOPER SET";
>>    +}
>>     chop($CWD=`pwd`);
>>   
>>     ($PROJECT, $VERSION) = split(/\-/, &getCVSVersionInfo());
> This solved both the timestamp and build user issue!
>
> There was another issue where the package and version information is
> derived from the top-level build directory, but this can be fixed easily
> by passing PROGRAM to dh_auto_build.
>
> Uploaded an NMU to DELAYED/10 which fixes both outstanding issues:
>
> diff -Nru libpam-ldap-186/debian/changelog libpam-ldap-186/debian/changelog
> --- libpam-ldap-186/debian/changelog	2017-05-31 10:19:41.000000000 -0700
> +++ libpam-ldap-186/debian/changelog	2022-11-17 11:42:13.000000000 -0800
> @@ -1,3 +1,17 @@
> +libpam-ldap (186-4.1) unstable; urgency=medium
> +
> +  * Non-maintainer upload.
> +
> +  [ Chris Lamb ]
> +  * vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is
> +    set. (Closes: #834050)
> +
> +  [ Vagrant Cascadian ]
> +  * debian/rules: Pass PROGRAM to dh_auto_build override.
> +    (Closes: #834050)
> +
> + -- Vagrant Cascadian <vagrant@reproducible-builds.org>  Thu, 17 Nov 2022 11:42:13 -0800
> +
>   libpam-ldap (186-4) unstable; urgency=medium
>   
>     * Install /usr/share/pam-configs/ldap
> diff -Nru libpam-ldap-186/debian/patches/series libpam-ldap-186/debian/patches/series
> --- libpam-ldap-186/debian/patches/series	2017-02-10 20:39:24.000000000 -0800
> +++ libpam-ldap-186/debian/patches/series	2022-11-17 11:42:13.000000000 -0800
> @@ -6,3 +6,4 @@
>   reproducible_build.patch
>   configfile_install.patch
>   configfile_references.patch
> +vers_string-use-fixed-value-for-author-i.patch
> diff -Nru libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch
> --- libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	1969-12-31 16:00:00.000000000 -0800
> +++ libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	2022-11-17 11:42:13.000000000 -0800
> @@ -0,0 +1,21 @@
> +From: Chris Lamb <lamby@debian.org>
> +Date: Wed, 15 Feb 2017 17:12:58 +1300
> +X-Dgit-Generated: 186-4.1 98efdb0f8a716ed9c1403523c90f3b0b6ff8c493
> +Subject: vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is set.
> +
> +(Closes: #834050)
> +
> +---
> +
> +diff --git a/vers_string b/vers_string
> +index 11af68a..5a072f3 100755
> +--- a/vers_string
> ++++ b/vers_string
> +@@ -16,6 +16,7 @@ chop($AUTHOR);
> + chop($DATE=`date -u`);
> + if (defined $ENV{SOURCE_DATE_EPOCH}) {
> + 	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
> ++	$AUTHOR="NO DEVELOPER SET";
> + }
> + chop($CWD=`pwd`);
> +
> diff -Nru libpam-ldap-186/debian/rules libpam-ldap-186/debian/rules
> --- libpam-ldap-186/debian/rules	2017-05-31 10:19:28.000000000 -0700
> +++ libpam-ldap-186/debian/rules	2022-11-17 11:42:13.000000000 -0800
> @@ -4,6 +4,8 @@
>   
>   export DEB_BUILD_MAINT_OPTIONS= hardening=+bindnow
>   
> +include /usr/share/dpkg/pkg-info.mk
> +
>   %:
>   	dh $@ --with autoreconf
>   
> @@ -17,3 +19,6 @@
>   	dh_install
>   	install -D -m 644 debian/libpam-ldap.pam-auth-update \
>   		debian/libpam-ldap/usr/share/pam-configs/ldap
> +
> +override_dh_auto_build:
> +	dh_auto_build -- PROGRAM=$(DEB_SOURCE)-$(DEB_VERSION_UPSTREAM)
>
>
>
> live well,
>    vagrant

[OpenPGP_signature (application/pgp-signature, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Lucas de Castro Borges <lucas@gnuabordo.com.br>:
Bug#834050; Package src:libpam-ldap. (Thu, 17 Nov 2022 22:27:08 GMT) (full text, mbox, link).

Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Extra info received and forwarded to list. Copy sent to Lucas de Castro Borges <lucas@gnuabordo.com.br>. (Thu, 17 Nov 2022 22:27:08 GMT) (full text, mbox, link).

Message #67 received at 834050@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: Lucas Castro <lucas@gnuabordo.com.br>, 834050@bugs.debian.org
Subject: Re: Bug#834050: libpam-ldap: please make the build reproducible
Date: Thu, 17 Nov 2022 14:25:30 -0800
[Message part 1 (text/plain, inline)]
On 2022-11-17, Lucas Castro wrote:
> Thanks. = )

Well hi there!

Would you mind me re-uploading without delay or a reduced delay?

live well,
  vagrant

> Em 17/11/2022 16:48, Vagrant Cascadian escreveu:
>> Control: tags 834050 pending
>>
>> On 2017-02-15, Chris Lamb wrote:
>>> Lucas Castro wrote:
>>>
>>>> I suppose the patch hadn't fixed the bug.
>>> Ah, try:
>>>
>>>    --- libpam-ldap-186.orig/vers_string
>>>    +++ libpam-ldap-186/vers_string
>>>    @@ -14,6 +14,10 @@ if ($ENV{'PROGRAM'}) { $PROGRAM = $ENV{'
>>>   
>>>     chop($AUTHOR);
>>>     chop($DATE=`date -u`);
>>>    +if (defined $ENV{SOURCE_DATE_EPOCH}) {
>>>    +	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
>>>    +	$AUTHOR="NO DEVELOPER SET";
>>>    +}
>>>     chop($CWD=`pwd`);
>>>   
>>>     ($PROJECT, $VERSION) = split(/\-/, &getCVSVersionInfo());
>> This solved both the timestamp and build user issue!
>>
>> There was another issue where the package and version information is
>> derived from the top-level build directory, but this can be fixed easily
>> by passing PROGRAM to dh_auto_build.
>>
>> Uploaded an NMU to DELAYED/10 which fixes both outstanding issues:
>>
>> diff -Nru libpam-ldap-186/debian/changelog libpam-ldap-186/debian/changelog
>> --- libpam-ldap-186/debian/changelog	2017-05-31 10:19:41.000000000 -0700
>> +++ libpam-ldap-186/debian/changelog	2022-11-17 11:42:13.000000000 -0800
>> @@ -1,3 +1,17 @@
>> +libpam-ldap (186-4.1) unstable; urgency=medium
>> +
>> +  * Non-maintainer upload.
>> +
>> +  [ Chris Lamb ]
>> +  * vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is
>> +    set. (Closes: #834050)
>> +
>> +  [ Vagrant Cascadian ]
>> +  * debian/rules: Pass PROGRAM to dh_auto_build override.
>> +    (Closes: #834050)
>> +
>> + -- Vagrant Cascadian <vagrant@reproducible-builds.org>  Thu, 17 Nov 2022 11:42:13 -0800
>> +
>>   libpam-ldap (186-4) unstable; urgency=medium
>>   
>>     * Install /usr/share/pam-configs/ldap
>> diff -Nru libpam-ldap-186/debian/patches/series libpam-ldap-186/debian/patches/series
>> --- libpam-ldap-186/debian/patches/series	2017-02-10 20:39:24.000000000 -0800
>> +++ libpam-ldap-186/debian/patches/series	2022-11-17 11:42:13.000000000 -0800
>> @@ -6,3 +6,4 @@
>>   reproducible_build.patch
>>   configfile_install.patch
>>   configfile_references.patch
>> +vers_string-use-fixed-value-for-author-i.patch
>> diff -Nru libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch
>> --- libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	1969-12-31 16:00:00.000000000 -0800
>> +++ libpam-ldap-186/debian/patches/vers_string-use-fixed-value-for-author-i.patch	2022-11-17 11:42:13.000000000 -0800
>> @@ -0,0 +1,21 @@
>> +From: Chris Lamb <lamby@debian.org>
>> +Date: Wed, 15 Feb 2017 17:12:58 +1300
>> +X-Dgit-Generated: 186-4.1 98efdb0f8a716ed9c1403523c90f3b0b6ff8c493
>> +Subject: vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is set.
>> +
>> +(Closes: #834050)
>> +
>> +---
>> +
>> +diff --git a/vers_string b/vers_string
>> +index 11af68a..5a072f3 100755
>> +--- a/vers_string
>> ++++ b/vers_string
>> +@@ -16,6 +16,7 @@ chop($AUTHOR);
>> + chop($DATE=`date -u`);
>> + if (defined $ENV{SOURCE_DATE_EPOCH}) {
>> + 	chop($DATE=`LC_ALL=C date --date="@\${SOURCE_DATE_EPOCH}" -u`);
>> ++	$AUTHOR="NO DEVELOPER SET";
>> + }
>> + chop($CWD=`pwd`);
>> +
>> diff -Nru libpam-ldap-186/debian/rules libpam-ldap-186/debian/rules
>> --- libpam-ldap-186/debian/rules	2017-05-31 10:19:28.000000000 -0700
>> +++ libpam-ldap-186/debian/rules	2022-11-17 11:42:13.000000000 -0800
>> @@ -4,6 +4,8 @@
>>   
>>   export DEB_BUILD_MAINT_OPTIONS= hardening=+bindnow
>>   
>> +include /usr/share/dpkg/pkg-info.mk
>> +
>>   %:
>>   	dh $@ --with autoreconf
>>   
>> @@ -17,3 +19,6 @@
>>   	dh_install
>>   	install -D -m 644 debian/libpam-ldap.pam-auth-update \
>>   		debian/libpam-ldap/usr/share/pam-configs/ldap
>> +
>> +override_dh_auto_build:
>> +	dh_auto_build -- PROGRAM=$(DEB_SOURCE)-$(DEB_VERSION_UPSTREAM)
>>
>>
>>
>> live well,
>>    vagrant

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
You have taken responsibility. (Sun, 27 Nov 2022 20:51:03 GMT) (full text, mbox, link).

Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Sun, 27 Nov 2022 20:51:03 GMT) (full text, mbox, link).

Message #72 received at 834050-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 834050-close@bugs.debian.org
Subject: Bug#834050: fixed in libpam-ldap 186-4.1
Date: Sun, 27 Nov 2022 20:46:40 +0000
Source: libpam-ldap
Source-Version: 186-4.1
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
libpam-ldap, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 834050@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated libpam-ldap package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 17 Nov 2022 11:42:13 -0800
Source: libpam-ldap
Architecture: source
Version: 186-4.1
Distribution: unstable
Urgency: medium
Maintainer: Lucas de Castro Borges <lucas@gnuabordo.com.br>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 834050
Changes:
 libpam-ldap (186-4.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Chris Lamb ]
   * vers_string: Use fixed value for AUTHOR if SOURCE_DATE_EPOCH is
     set. (Closes: #834050)
 .
   [ Vagrant Cascadian ]
   * debian/rules: Pass PROGRAM to dh_auto_build override.
     (Closes: #834050)
Checksums-Sha1:
 c49ef8dcaa6f628fb91253c67fa620a9f8efa7a5 1398 libpam-ldap_186-4.1.dsc
 a229e80bd2669f26645a6de1f3ecac8300d2e994 57932 libpam-ldap_186-4.1.debian.tar.xz
Checksums-Sha256:
 c60d3b3b4e64e689e203e21c81909ed7bc7c8bfc090faf657d1d09b0483f4177 1398 libpam-ldap_186-4.1.dsc
 287e2c5f8eb3f25fbc7e250afc9536de7cb1cc959548162f021bc0de218630f7 57932 libpam-ldap_186-4.1.debian.tar.xz
Files:
 05e38dbd33fd2a5fd34b30d42b7b1f1d 1398 admin optional libpam-ldap_186-4.1.dsc
 69e7cfd467c5fcfd423628390a4efd6c 57932 admin optional libpam-ldap_186-4.1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCY3aP5CAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqiIFAP4jXp9lj+JSqP9i
PPl540idx065TDEPN1jwp1sgMPNOkAD/V6uFk9Jeq76sU8lw4T2qko/Py1YIXK8p
czmtl51QUwk=
=HD9q
-----END PGP SIGNATURE-----

Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 31 Dec 2022 07:30:15 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 11:31:08 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.