Debian Bug report logs - #834857
nagios-nrpe: please make the build reproducible

version graph

Package: src:nagios-nrpe; Maintainer for src:nagios-nrpe is Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Fri, 19 Aug 2016 22:03:01 UTC

Severity: wishlist

Tags: patch

Found in version nagios-nrpe/2.15-1

Fixed in version nagios-nrpe/3.0.1-1~exp1

Done: Bas Couwenberg <sebastic@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-builds@lists.alioth.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Fri, 19 Aug 2016 22:03:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-builds@lists.alioth.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Fri, 19 Aug 2016 22:03:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: nagios-nrpe: please make the build reproducible
Date: Fri, 19 Aug 2016 22:59:35 +0100
[Message part 1 (text/plain, inline)]
Source: nagios-nrpe
Version: 2.15-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps randomness
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], I noticed
that nagios-nrpe could not be built reproducibly.

Whilst I "fix" the Diffie-Hellman key parameters, this is no worse
than the current situation in that they were random across builds:
everyone using the (for example) amd64 package was using the same
parameters anyway…

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[nagios-nrpe.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Mon, 24 Oct 2016 05:45:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Mon, 24 Oct 2016 05:45:05 GMT) (full text, mbox, link).


Message #10 received at 834857@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 834857@bugs.debian.org
Subject: Re: Bug#834857: nagios-nrpe: please make the build reproducible
Date: Mon, 24 Oct 2016 06:42:03 +0100
Dear Maintainer,

> Source: nagios-nrpe
> Version: 2.15-0ubuntu1
> Tags: patch

There hasn't seem to be any update on this bug in 65 days, in which
time the Reproducible Builds effort has come on a long way. :)

Would you consider applying this patch and uploading?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Mon, 24 Oct 2016 06:57:03 GMT) (full text, mbox, link).


Acknowledgement sent to Alexander Wirt <formorer@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Mon, 24 Oct 2016 06:57:03 GMT) (full text, mbox, link).


Message #15 received at 834857@bugs.debian.org (full text, mbox, reply):

From: Alexander Wirt <formorer@debian.org>
To: Chris Lamb <lamby@debian.org>, 834857@bugs.debian.org
Subject: Re: [Pkg-nagios-devel] Bug#834857: nagios-nrpe: please make the build reproducible
Date: Mon, 24 Oct 2016 08:55:48 +0200
On Mon, 24 Oct 2016, Chris Lamb wrote:

> Dear Maintainer,
> 
> > Source: nagios-nrpe
> > Version: 2.15-0ubuntu1
> > Tags: patch
> 
> There hasn't seem to be any update on this bug in 65 days, in which
> time the Reproducible Builds effort has come on a long way. :)
> 
> Would you consider applying this patch and uploading?
The package is without a maintainer. 

Alex




Information forwarded to debian-bugs-dist@lists.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Mon, 24 Oct 2016 07:21:03 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Mon, 24 Oct 2016 07:21:03 GMT) (full text, mbox, link).


Message #20 received at 834857@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: Alexander Wirt <formorer@debian.org>, 834857@bugs.debian.org
Subject: Re: [Pkg-nagios-devel] Bug#834857: nagios-nrpe: please make the build reproducible
Date: Mon, 24 Oct 2016 08:17:47 +0100
Alexander Wirt wrote:

> > Would you consider applying this patch and uploading?
>
> The package is without a maintainer. 

Not quite sure what this means; should you orphan it, RM it, etc.? :)


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Mon, 24 Oct 2016 08:21:09 GMT) (full text, mbox, link).


Acknowledgement sent to Alexander Wirt <formorer@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Mon, 24 Oct 2016 08:21:09 GMT) (full text, mbox, link).


Message #25 received at 834857@bugs.debian.org (full text, mbox, reply):

From: Alexander Wirt <formorer@debian.org>
To: Chris Lamb <lamby@debian.org>
Cc: 834857@bugs.debian.org
Subject: Re: [Pkg-nagios-devel] Bug#834857: nagios-nrpe: please make the build reproducible
Date: Mon, 24 Oct 2016 10:17:40 +0200
On Mon, 24 Oct 2016, Chris Lamb wrote:

> Alexander Wirt wrote:
> 
> > > Would you consider applying this patch and uploading?
> >
> > The package is without a maintainer. 
> 
> Not quite sure what this means; should you orphan it, RM it, etc.? :)
oh there were several people unhappy with my decisions that thought they
would make a better maintainer. Therefore I gave up on it but none of them
ever did anything on the package. Someone (not me) should probably ask for
removal, I don't want another personal shitstorm on me. 

Alex

> 
> 
> Regards,
> 
> -- 
>       ,''`.
>      : :'  :     Chris Lamb
>      `. `'`      lamby@debian.org / chris-lamb.co.uk
>        `-



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>:
Bug#834857; Package src:nagios-nrpe. (Mon, 24 Oct 2016 21:54:06 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>. (Mon, 24 Oct 2016 21:54:06 GMT) (full text, mbox, link).


Message #30 received at 834857@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: Alexander Wirt <formorer@debian.org>
Cc: 834857@bugs.debian.org
Subject: Re: [Pkg-nagios-devel] Bug#834857: nagios-nrpe: please make the build reproducible
Date: Mon, 24 Oct 2016 22:51:10 +0100
Hi Alexander,

> oh there were several people unhappy with my decisions that thought they
> would make a better maintainer. Therefore I gave up on it but none of them
> ever did anything on the package. Someone (not me) should probably ask for
> removal, I don't want another personal shitstorm on me. 

Sorry to hear that. I'll leave this with you folks.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Added tag(s) pending. Request was from Bas Couwenberg <sebastic@debian.org> to control@bugs.debian.org. (Sun, 04 Dec 2016 14:03:04 GMT) (full text, mbox, link).


Reply sent to Bas Couwenberg <sebastic@debian.org>:
You have taken responsibility. (Sun, 04 Dec 2016 18:06:23 GMT) (full text, mbox, link).


Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Sun, 04 Dec 2016 18:06:24 GMT) (full text, mbox, link).


Message #37 received at 834857-close@bugs.debian.org (full text, mbox, reply):

From: Bas Couwenberg <sebastic@debian.org>
To: 834857-close@bugs.debian.org
Subject: Bug#834857: fixed in nagios-nrpe 3.0.1-1~exp1
Date: Sun, 04 Dec 2016 18:03:23 +0000
Source: nagios-nrpe
Source-Version: 3.0.1-1~exp1

We believe that the bug you reported is fixed in the latest version of
nagios-nrpe, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 834857@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bas Couwenberg <sebastic@debian.org> (supplier of updated nagios-nrpe package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 04 Dec 2016 18:36:54 +0100
Source: nagios-nrpe
Binary: nagios-nrpe-server nagios-nrpe-plugin
Architecture: source amd64
Version: 3.0.1-1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Nagios Maintainer Group <pkg-nagios-devel@lists.alioth.debian.org>
Changed-By: Bas Couwenberg <sebastic@debian.org>
Description:
 nagios-nrpe-plugin - Nagios Remote Plugin Executor Plugin
 nagios-nrpe-server - Nagios Remote Plugin Executor Server
Closes: 547092 660583 662247 662249 728218 755507 756410 756414 773441 775924 834857 843805
Changes:
 nagios-nrpe (3.0.1-1~exp1) experimental; urgency=medium
 .
   [ Alexander Wirt ]
   * Sync uploaders with reality.
     (closes: #773441)
 .
   [ Bas Couwenberg ]
   * New upstream release.
     - Reworked SSL/TLS. See the README.SSL.md file for full info.
     (closes: #547092)
   * Add myself to Uploaders.
   * Add Vcs-* fields to control file.
     (closes: #755507)
   * Change nagios-plugins dependencies to monitoring-plugins.
   * Switch from dpatch to source format 3.0 (quilt).
     (closes: #756410)
   * Drop obsolete patch: 04_weird_output.dpatch.
   * Restructure control file with cme.
   * Reorder (build) dependencies.
   * Add Homepage field to control file.
   * Update copyright file using copyright-format 1.0.
   * Add gbp.conf to use pristine-tar by default.
   * Update build dependency to use openssl 1.0.
   * Enable all hardening buildflags.
     (closes: #728218)
   * Enable parallel builds.
   * Suggest xinetd | inetd.
     (closes: #662247)
   * Include PDF & ODT documentation in docs.
     (closes: #662249)
   * Update watch file to handle common issues.
   * Add upstream metadata.
   * Merge nrpe.cfg patches into single patch.
     (closes: #660583)
   * Use configure option to set custom PID directory instead of patch.
   * Drop 09_noremove_pid.patch, fixed upstream. Refresh remaining patches.
   * Add patch to use pre-generated dh.h for reproducible builds.
   * Override dh_auto_build to build all targets.
   * Use dh-autoreconf instead of autotools-dev.
   * Use exit status 0 in init script when inetd is configured.
     (closes: #775924)
   * Include README.SSL.md in docs.
   * Bump Standards-Version to 3.9.8, changes:
     Vcs-* fields, copyright-format 1.0.
 .
   [ Benjamin Drung ]
   * Use dh_auto_configure to enable default hardening flags.
     (closes: #843805)
   * Fix copyright-refers-to-symlink-license.
     (closes: #756414)
 .
   [ Chris Lamb ]
   * Make the build reproducible.
     (closes: #834857)
Checksums-Sha1:
 8cc57beb3cb67ef9deb3546042fd281b72f9f50c 2102 nagios-nrpe_3.0.1-1~exp1.dsc
 e2b79bba41b1198c9d3dec0c559fc932fb12a429 514097 nagios-nrpe_3.0.1.orig.tar.gz
 912e6cdf82213a9a9559a0b2aeee134e62ff95f8 12736 nagios-nrpe_3.0.1-1~exp1.debian.tar.xz
 0bd6eea3f01b4f464eef9bc45ec8a7c8dbf8b705 53366 nagios-nrpe-plugin-dbgsym_3.0.1-1~exp1_amd64.deb
 4a286c3cef3ddc1acc9b7baab199133d7508bd00 29254 nagios-nrpe-plugin_3.0.1-1~exp1_amd64.deb
 bc0128fb2be0af50dccb36584192041edb9a006a 72952 nagios-nrpe-server-dbgsym_3.0.1-1~exp1_amd64.deb
 e4e6d6599413de839f8b18580c1deafdb8c97da5 345136 nagios-nrpe-server_3.0.1-1~exp1_amd64.deb
 f6038221d886eb3cf49294aff0e5b41b7133163c 6081 nagios-nrpe_3.0.1-1~exp1_amd64.buildinfo
Checksums-Sha256:
 063453ab1983f4676755222baf0580fba1be311cccf69448a25973dd2e3a3e7a 2102 nagios-nrpe_3.0.1-1~exp1.dsc
 8f56da2d74f6beca1a04fe04ead84427e582b9bb88611e04e290f59617ca3ea3 514097 nagios-nrpe_3.0.1.orig.tar.gz
 cca437bf8eecf71d9baca79bd8c5e9deeac5b4a883e00901228fff5ff5040f65 12736 nagios-nrpe_3.0.1-1~exp1.debian.tar.xz
 c9fecfef407d434cb126ff0a860afeca5b4e686a3ef00c068b05da4de0882717 53366 nagios-nrpe-plugin-dbgsym_3.0.1-1~exp1_amd64.deb
 6adc4c684c943f03032addeb461bdb7e27a84675d1b16f4882fcdad82744efd9 29254 nagios-nrpe-plugin_3.0.1-1~exp1_amd64.deb
 3bbbfb797e1465956ebc99dd392e16fa489c284180968663ecebdab67caec180 72952 nagios-nrpe-server-dbgsym_3.0.1-1~exp1_amd64.deb
 914e5665f4bee19d99f0a3e6efea1bdf5aa50e39478c1083ecbb26bec9d70293 345136 nagios-nrpe-server_3.0.1-1~exp1_amd64.deb
 6177b27184012765c4f4e7682fef0edcca309109efd5e23c8a484c2445696f04 6081 nagios-nrpe_3.0.1-1~exp1_amd64.buildinfo
Files:
 c3f8a9a9c05a6b8b810c977e569186b0 2102 net optional nagios-nrpe_3.0.1-1~exp1.dsc
 8c81f251d9ee0903e5ff0191e99f7981 514097 net optional nagios-nrpe_3.0.1.orig.tar.gz
 10b7bfe2e0a2a30c895f773ad50fd203 12736 net optional nagios-nrpe_3.0.1-1~exp1.debian.tar.xz
 5daff3dd0ffcf1997d77be09614f3355 53366 debug extra nagios-nrpe-plugin-dbgsym_3.0.1-1~exp1_amd64.deb
 bfaa2dc3ee62894ffb3edbedf5ddab7c 29254 net optional nagios-nrpe-plugin_3.0.1-1~exp1_amd64.deb
 319c915240286dee87629e07c0d48ab5 72952 debug extra nagios-nrpe-server-dbgsym_3.0.1-1~exp1_amd64.deb
 958f74614dae92a01b634331c7154568 345136 net optional nagios-nrpe-server_3.0.1-1~exp1_amd64.deb
 1857c951ceef5ca2a30bdae4bc1ebe8d 6081 net optional nagios-nrpe_3.0.1-1~exp1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=8ZLb
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Wed, 01 Feb 2017 07:30:57 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 13:43:54 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.