Debian Bug report logs -
#845745
node-rimraf: please make the build reproducible
Reported by: Chris Lamb <lamby@debian.org>
Date: Sat, 26 Nov 2016 12:27:02 UTC
Severity: wishlist
Tags: patch
Found in version node-rimraf/2.5.4-1
Fixed in version node-rimraf/2.5.4-3
Done: Jérémy Lal <kapouer@melix.org>
Bug is archived. No further changes may be made.
Toggle useless messages
Report forwarded
to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#845745; Package src:node-rimraf.
(Sat, 26 Nov 2016 12:27:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>.
(Sat, 26 Nov 2016 12:27:04 GMT) (full text, mbox, link).
Message #5 received at submit@bugs.debian.org (full text, mbox, reply):
[Message part 1 (text/plain, inline)]
Source: node-rimraf
Version: 2.5.4-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: umask
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed
that node-rimraf could not be built reproducibly.
This is due to exluding bin.js from dh_fixperms (to keep it executable)
which means that the group "write" bit is inherited from the system's
umask.
Patch attached.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
[node-rimraf.diff.txt (text/plain, attachment)]
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#845745; Package src:node-rimraf.
(Sat, 26 Nov 2016 13:09:03 GMT) (full text, mbox, link).
Acknowledgement sent
to Jérémy Lal <kapouer@melix.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>.
(Sat, 26 Nov 2016 13:09:03 GMT) (full text, mbox, link).
Message #10 received at submit@bugs.debian.org (full text, mbox, reply):
2016-11-26 13:23 GMT+01:00 Chris Lamb <lamby@debian.org>:
> Source: node-rimraf
> Version: 2.5.4-1
> Severity: wishlist
> Tags: patch
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: umask
> X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
>
> Hi,
>
> Whilst working on the Reproducible Builds effort [0], we noticed
> that node-rimraf could not be built reproducibly.
>
> This is due to exluding bin.js from dh_fixperms (to keep it executable)
> which means that the group "write" bit is inherited from the system's
> umask.
>
> Patch attached.
It's a reproductibility anti-pattern, then.
Thank you, and i did that in some other packages recently, i'll try to fix them.
Jérémy
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#845745; Package src:node-rimraf.
(Sat, 26 Nov 2016 13:09:04 GMT) (full text, mbox, link).
Acknowledgement sent
to Jérémy Lal <kapouer@melix.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>.
(Sat, 26 Nov 2016 13:09:04 GMT) (full text, mbox, link).
Information forwarded
to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#845745; Package src:node-rimraf.
(Wed, 01 Feb 2017 06:00:02 GMT) (full text, mbox, link).
Acknowledgement sent
to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>.
(Wed, 01 Feb 2017 06:00:02 GMT) (full text, mbox, link).
Message #20 received at 845745@bugs.debian.org (full text, mbox, reply):
Hi,
> Thank you, and i did that in some other packages recently,
> i'll try to fix them.
Friendly ping on this? :)
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
Reply sent
to Jérémy Lal <kapouer@melix.org>:
You have taken responsibility.
(Wed, 01 Feb 2017 08:51:08 GMT) (full text, mbox, link).
Notification sent
to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer.
(Wed, 01 Feb 2017 08:51:08 GMT) (full text, mbox, link).
Message #25 received at 845745-close@bugs.debian.org (full text, mbox, reply):
Source: node-rimraf
Source-Version: 2.5.4-3
We believe that the bug you reported is fixed in the latest version of
node-rimraf, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 845745@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jérémy Lal <kapouer@melix.org> (supplier of updated node-rimraf package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 01 Feb 2017 09:31:02 +0100
Source: node-rimraf
Binary: node-rimraf
Architecture: source
Version: 2.5.4-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Jérémy Lal <kapouer@melix.org>
Description:
node-rimraf - Deep deletion (like rm -rf) module for Node.js
Closes: 845745
Changes:
node-rimraf (2.5.4-3) unstable; urgency=medium
.
* Make the build reproducible (Closes: #845745)
By not using dh_fixperms -X but changing permission after.
Checksums-Sha1:
36f926fe46f7e4ce12e6346a549dfbfe68b46f39 2110 node-rimraf_2.5.4-3.dsc
ff8ce48dd3284a8cb9999dc41f79c0142ced4f15 3044 node-rimraf_2.5.4-3.debian.tar.xz
61b1fbd552785644c4d3679befffbf21954b3857 6729 node-rimraf_2.5.4-3_source.buildinfo
Checksums-Sha256:
00fe32c962697af463bdb1a9a23f8d1d864c828ff8a9761846916494833664d0 2110 node-rimraf_2.5.4-3.dsc
55f3aad23ef48048983d94aef0adcb378a6bac0fd36448b39b80b7880c17d71d 3044 node-rimraf_2.5.4-3.debian.tar.xz
d2be58d639029a4627373fd633a66275a1dc6878b44152359ebc7b3de83e3d26 6729 node-rimraf_2.5.4-3_source.buildinfo
Files:
64d28a194403849b14c488add1daec8c 2110 web extra node-rimraf_2.5.4-3.dsc
83102c3aad1f03d11ef222d4755f21b3 3044 web extra node-rimraf_2.5.4-3.debian.tar.xz
360be23285f338677112af4484a3b41e 6729 web extra node-rimraf_2.5.4-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=YZc3
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Tue, 18 Jul 2017 07:37:38 GMT) (full text, mbox, link).
Send a report that this bug log contains spam.
Debian bug tracking system administrator <owner@bugs.debian.org>.
Last modified:
Wed May 17 13:43:58 2023;
Machine Name:
buxtehude
Debian Bug tracking system
Debbugs is free software and licensed under the terms of the GNU
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.
Copyright © 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson,
2005-2017 Don Armstrong, and many other contributors.