Debian Bug report logs - #843469
dpkg: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: dpkg: please make the build reproducible

Date: Sun, 6 Nov 2016 22:22:48 +0100

[Message part 1 (text/plain, inline)]

Source: dpkg
Version: 1.18.12
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: timezone
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that dpkg could not be built reproducibly.
The manpages generated during build contain a date, which varies with
the configured timezone.

The attached patch fixes this by fixing the timezone to UTC.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[dpkg.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 843469-submitter@bugs.debian.org (full text, mbox, reply):

From: Guillem Jover <guillem@debian.org>

To: 843469-submitter@bugs.debian.org

Subject: Bug#843469 in package dpkg marked as pending

Date: Mon, 07 Nov 2016 03:13:42 +0000

Control: tag 843469 pending

Hi!

Bug #843469 in package dpkg reported by you has been fixed in
the dpkg/dpkg.git Git repository. You can see the changelog below, and
you can check the diff of the fix at:

    https://anonscm.debian.org/cgit/dpkg/dpkg.git/diff/?id=f3b7b1c

---
commit f3b7b1c9683b68066c11b32a0a839293d4a32636
Author: Reiner Herrmann <reiner@reiner-h.de>
Date:   Sun Nov 6 23:46:12 2016 +0100

    build: Use deterministic dates for generated man pages
    
    Pin the timezone to UTC so that the computed dates are deterministic
    and produce deterministic generated man pages.
    
    Closes: #843469
    Signed-off-by: Guillem Jover <guillem@debian.org>

diff --git a/debian/changelog b/debian/changelog
index 825b015..1b0b686 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,6 +7,9 @@ dpkg (1.18.13) UNRELEASED; urgency=medium
     - Add missing Breaks on old libdpkg-perl to dpkg. Closes: #843429
       Thanks to Sven Joachim <svenjoac@gmx.de>.
     - Ship deb-src-files(5) man page in dpkg-dev.
+  * Build system:
+    - Use deterministic dates for generated man pages. Closes: #843469
+      Thanks to Reiner Herrmann <reiner@reiner-h.de>.
 
  -- Guillem Jover <guillem@debian.org>  Sun, 06 Nov 2016 06:28:11 +0100
 

Message #15 received at 843469-close@bugs.debian.org (full text, mbox, reply):

From: Guillem Jover <guillem@debian.org>

To: 843469-close@bugs.debian.org

Subject: Bug#843469: fixed in dpkg 1.18.13

Date: Mon, 07 Nov 2016 03:18:36 +0000

Source: dpkg
Source-Version: 1.18.13

We believe that the bug you reported is fixed in the latest version of
dpkg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 843469@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Guillem Jover <guillem@debian.org> (supplier of updated dpkg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Nov 2016 03:28:42 +0100
Source: dpkg
Binary: dpkg libdpkg-dev dpkg-dev libdpkg-perl dselect
Architecture: source
Version: 1.18.13
Distribution: unstable
Urgency: medium
Maintainer: Dpkg Developers <debian-dpkg@lists.debian.org>
Changed-By: Guillem Jover <guillem@debian.org>
Description:
 dpkg       - Debian package management system
 dpkg-dev   - Debian package development tools
 dselect    - Debian package management front-end
 libdpkg-dev - Debian package management static library
 libdpkg-perl - Dpkg perl modules
Closes: 843429 843436 843469
Changes:
 dpkg (1.18.13) unstable; urgency=medium
 .
   * Improve PIE flags support:
     - Retroactively document in the changelog that PIE is enabled by default
       on all supported architectures regardless of gcc doing so itself on a
       subset of them.
     - When emitting PIE flags on architectures where gcc does not inject
       those itself, do it via a specs file too, so that maintainers can
       use them unconditionally regardless of the object being compiled
       or linked.
     - When injecting -no-pie for linking via the gcc specs file also
       inject -fno-PIE.
     - Update the documentation.
   * Perl modules:
     - Do not try to load non-files in Dpkg::Dist::Files load_dir method.
       Fixes test failures on non-Linux architectures. Closes: #843436
   * Packaging:
     - Add missing Breaks on old libdpkg-perl to dpkg. Closes: #843429
       Thanks to Sven Joachim <svenjoac@gmx.de>.
     - Ship deb-src-files(5) man page in dpkg-dev.
   * Build system:
     - Use deterministic dates for generated man pages. Closes: #843469
       Thanks to Reiner Herrmann <reiner@reiner-h.de>.
Checksums-Sha1:
 f027271a1a20708ef83c92aaf5f80207c845d58e 2000 dpkg_1.18.13.dsc
 7c202fb357edad9f732de67266cc15f77b76578e 4489244 dpkg_1.18.13.tar.xz
Checksums-Sha256:
 b240633797b9bb4780643dd1420232bcc150876a14d37b7f944f5f11e00ddb20 2000 dpkg_1.18.13.dsc
 51f98e37ccf21c8df1ba919d6670286bc48b905ff20d6e4cf9620d9b318a3990 4489244 dpkg_1.18.13.tar.xz
Files:
 48b12a7cbdfaea4951de2b3d780ca802 2000 admin required dpkg_1.18.13.dsc
 c137d0b1c5e5a43fc8fc055c74757eac 4489244 admin required dpkg_1.18.13.tar.xz

-----BEGIN PGP SIGNATURE-----
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=micU
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.