Debian Bug report logs - #843109
zathura-ps: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: zathura-ps: please make the build reproducible

Date: Thu, 3 Nov 2016 23:30:48 +0100

[Message part 1 (text/plain, inline)]

Source: zathura-ps
Version: 0.2.3-1
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that zathura-ps could not be built reproducibly.
During build objects are linked in non-deterministic order.

The attached patch fixes this by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[zathura-ps.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at submit@bugs.debian.org (full text, mbox, reply):

From: Sebastian Ramacher <sramacher@debian.org>

To: Reiner Herrmann <reiner@reiner-h.de>, 843109@bugs.debian.org

Cc: submit@bugs.debian.org

Subject: Re: Bug#843109: zathura-ps: please make the build reproducible

Date: Fri, 4 Nov 2016 10:49:14 +0100

Control: tags -1 + fixed-upstream

On 2016-11-03 23:30:48, Reiner Herrmann wrote:
> Source: zathura-ps
> Version: 0.2.3-1
> Severity: wishlist
> Tags: patch upstream
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: fileordering
> X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
> 
> Hi!
> 
> While working on the "reproducible builds" effort [1], we have noticed
> that zathura-ps could not be built reproducibly.
> During build objects are linked in non-deterministic order.
> 
> The attached patch fixes this by sorting the list of source files.

Fixed upstream but in a different way:
https://git.pwmt.org/pwmt/zathura-ps/commit/b61d750770604921f025b92a6783de7fb2e90603
and 
https://git.pwmt.org/pwmt/zathura-ps/commit/b60b09043a29a341f7dbd7891349a8a0f750a104

Cheers

> Regards,
>  Reiner
> 
> [1]: https://wiki.debian.org/ReproducibleBuilds

> diff --git a/debian/patches/reproducible-build.patch b/debian/patches/reproducible-build.patch
> new file mode 100644
> index 0000000..8f5c785
> --- /dev/null
> +++ b/debian/patches/reproducible-build.patch
> @@ -0,0 +1,14 @@
> +Author: Reiner Herrmann <reiner@reiner-h.de>
> +Description: Sort list of source files for deterministic linking order
> +
> +--- a/Makefile
> ++++ b/Makefile
> +@@ -5,7 +5,7 @@
> + 
> + PROJECT  = zathura-ps
> + PLUGIN   = ps
> +-SOURCE   = $(shell find . -iname "*.c")
> ++SOURCE   = $(shell find . -iname "*.c" | LC_ALL=C sort)
> + HEADER   = $(shell find . -iname "*.h")
> + OBJECTS  = ${SOURCE:.c=.o}
> + DOBJECTS = ${SOURCE:.c=.do}
> diff --git a/debian/patches/series b/debian/patches/series
> new file mode 100644
> index 0000000..55077d0
> --- /dev/null
> +++ b/debian/patches/series
> @@ -0,0 +1 @@
> +reproducible-build.patch




-- 
Sebastian Ramacher

Message #22 received at 843109-close@bugs.debian.org (full text, mbox, reply):

From: Sebastian Ramacher <sramacher@debian.org>

To: 843109-close@bugs.debian.org

Subject: Bug#843109: fixed in zathura-ps 0.2.4-1

Date: Wed, 11 Jan 2017 23:07:38 +0000

Source: zathura-ps
Source-Version: 0.2.4-1

We believe that the bug you reported is fixed in the latest version of
zathura-ps, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 843109@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sebastian Ramacher <sramacher@debian.org> (supplier of updated zathura-ps package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 11 Jan 2017 23:39:25 +0100
Source: zathura-ps
Binary: zathura-ps
Architecture: source
Version: 0.2.4-1
Distribution: unstable
Urgency: medium
Maintainer: Sebastian Ramacher <sramacher@debian.org>
Changed-By: Sebastian Ramacher <sramacher@debian.org>
Description:
 zathura-ps - PostScript support for zathura
Closes: 843109
Changes:
 zathura-ps (0.2.4-1) unstable; urgency=medium
 .
   * New upstream release.
     - Sort source files to make build reproducible. (Closes: #843109)
   * debian/{control,rules,control}: Bump debhelper compat to 10.
   * debian/control:
     - Bump Standards-Version.
     - Update Vcs-Git.
Checksums-Sha1:
 8cef79bfe5293cd8607daf4e556187c2f655f1a9 1967 zathura-ps_0.2.4-1.dsc
 b1e39928d2f352e0d932dd65ab0a9ba49b664d52 5980 zathura-ps_0.2.4.orig.tar.gz
 9d261c2f0fe639e37d30cd817cbabdbaf0fecfec 3084 zathura-ps_0.2.4-1.debian.tar.xz
Checksums-Sha256:
 0e2668461574887fbabef70059625e76dd03d904ba4e0b47551e19f31aaaaddf 1967 zathura-ps_0.2.4-1.dsc
 fb9fc7e9e7765fb0aa2935b93ff3663332d0d884df35e8d0b1ea7e4b1fa0abdb 5980 zathura-ps_0.2.4.orig.tar.gz
 c126942e67200744b340214274a7b2280ede598c4d3dc0657f7ea44b2bc648a6 3084 zathura-ps_0.2.4-1.debian.tar.xz
Files:
 03d0633f8d5b1ad012ab34bdcb16e206 1967 text optional zathura-ps_0.2.4-1.dsc
 553330eae86da48c0231f348181b9a82 5980 text optional zathura-ps_0.2.4.orig.tar.gz
 d997cf0a844b57b024e60d8661bbd5de 3084 text optional zathura-ps_0.2.4-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=AXPo
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.