Debian Bug report logs - #842991
python-axolotl-curve25519: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: python-axolotl-curve25519: please make the build reproducible

Date: Wed, 2 Nov 2016 21:26:25 +0100

[Message part 1 (text/plain, inline)]

Source: python-axolotl-curve25519
Version: 0.1-2
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that python-axolotl-curve25519 could not be built reproducibly.
During build objects are linked in non-deterministic order.

The attached patch fixes this by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[python-axolotl-curve25519.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 842991-close@bugs.debian.org (full text, mbox, reply):

From: Josue Ortega <josue@debian.org>

To: 842991-close@bugs.debian.org

Subject: Bug#842991: fixed in python-axolotl-curve25519 0.1-3

Date: Sat, 05 Nov 2016 23:49:32 +0000

Source: python-axolotl-curve25519
Source-Version: 0.1-3

We believe that the bug you reported is fixed in the latest version of
python-axolotl-curve25519, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 842991@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Josue Ortega <josue@debian.org> (supplier of updated python-axolotl-curve25519 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 05 Nov 2016 17:27:50 -0600
Source: python-axolotl-curve25519
Binary: python-axolotl-curve25519 python3-axolotl-curve25519
Architecture: source amd64
Version: 0.1-3
Distribution: unstable
Urgency: medium
Maintainer: Josue Ortega <josue@debian.org>
Changed-By: Josue Ortega <josue@debian.org>
Description:
 python-axolotl-curve25519 - Python wrapper for curve25519 library with ed25519 signatures
 python3-axolotl-curve25519 - Python 3 wrapper for curve25519 library with ed25519 signatures
Closes: 842991
Changes:
 python-axolotl-curve25519 (0.1-3) unstable; urgency=medium
 .
   * Makes the package build reproducible, thanks to
     Reiner Herrmann <reiner@reiner-h.de> for the patch (Closes: #842991).
   * debian/control:
     - Updates X-Python3-Version to >= 3.5.
     - Updates maintainer email.
     - Bumps Standards-Version to 3.9.8, no changes required.
     - Updates VCS-* fields to use secure uri.
Checksums-Sha1:
 4295c9b64d90298e1d6249bcff0d9efbf8ab77a4 2286 python-axolotl-curve25519_0.1-3.dsc
 6bcce9d263a7d42d688ce3e41116f89e38d17b00 3980 python-axolotl-curve25519_0.1-3.debian.tar.xz
 8b817e3d2666069d2fae8e408b243f9b3a773022 79802 python-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 c940bbc0245b38747fb774b66ce927ac19d691de 60326 python-axolotl-curve25519_0.1-3_amd64.deb
 fa5dd9ae4cbf3ea2301c670a4b8eeb7c1b98d095 80730 python3-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 97bfb487e63a32ef31545c223d893d3060dc46af 60264 python3-axolotl-curve25519_0.1-3_amd64.deb
Checksums-Sha256:
 402aff6022348078e6175a953917e217e66559eb6c48ccc646cec36087f5c186 2286 python-axolotl-curve25519_0.1-3.dsc
 8082703d49182f36ed285523144ef604be450301acd2e7b0883a60c68d8965da 3980 python-axolotl-curve25519_0.1-3.debian.tar.xz
 d253a966c0643cd6980a06ddc20276999fff29971721062bb4f7c9d34909adec 79802 python-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 5d91d43e13a650d8f01c3a148ece39632c8c7309f8cb449cac85c037d6b09a7c 60326 python-axolotl-curve25519_0.1-3_amd64.deb
 6020794a97b624665fd1c3d4f2624ab96b3ee0e33140ecc6e7fcf9c23d970d9a 80730 python3-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 643ab1f39b82910da2dccb67a2a26b28f28dd433e12ee1d97507c1ff13a82f43 60264 python3-axolotl-curve25519_0.1-3_amd64.deb
Files:
 9f619121b67f998e9c17ef98c386c220 2286 python optional python-axolotl-curve25519_0.1-3.dsc
 01be42c4b727cbedbf849e6ad57d445e 3980 python optional python-axolotl-curve25519_0.1-3.debian.tar.xz
 a210e60bc69b316f3b878b65a3214286 79802 debug extra python-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 029a5e08576b4f113bd2f9730d9b1b8f 60326 python optional python-axolotl-curve25519_0.1-3_amd64.deb
 361aeb3afdce0d9461488b183a0bd0fc 80730 debug extra python3-axolotl-curve25519-dbgsym_0.1-3_amd64.deb
 f1eba68bc3e6581fc8d313e6cc53762b 60264 python optional python3-axolotl-curve25519_0.1-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=yE15
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.