Debian Bug report logs - #845780
brotli: please make the build reproducible

version graph

Package: src:brotli; Maintainer for src:brotli is Tomasz Buchert <tomasz@debian.org>;

Reported by: Reiner Herrmann <reiner@reiner-h.de>

Date: Sat, 26 Nov 2016 17:03:02 UTC

Severity: wishlist

Tags: patch, upstream

Found in version brotli/0.5.2+dfsg-1

Fixed in version brotli/0.5.2+dfsg-2

Done: Tomasz Buchert <tomasz@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Tomasz Buchert <tomasz@debian.org>:
Bug#845780; Package src:brotli. (Sat, 26 Nov 2016 17:03:04 GMT) (full text, mbox, link).


Acknowledgement sent to Reiner Herrmann <reiner@reiner-h.de>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Tomasz Buchert <tomasz@debian.org>. (Sat, 26 Nov 2016 17:03:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>
To: submit@bugs.debian.org
Subject: brotli: please make the build reproducible
Date: Sat, 26 Nov 2016 17:59:43 +0100
[Message part 1 (text/plain, inline)]
Source: brotli
Version: 0.5.2+dfsg-1
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that brotli could not be built reproducibly.
During build objects are linked in non-deterministic order.

The attached patch fixes this by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
[brotli.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]

Reply sent to Tomasz Buchert <tomasz@debian.org>:
You have taken responsibility. (Sun, 18 Dec 2016 11:21:09 GMT) (full text, mbox, link).


Notification sent to Reiner Herrmann <reiner@reiner-h.de>:
Bug acknowledged by developer. (Sun, 18 Dec 2016 11:21:09 GMT) (full text, mbox, link).


Message #10 received at 845780-close@bugs.debian.org (full text, mbox, reply):

From: Tomasz Buchert <tomasz@debian.org>
To: 845780-close@bugs.debian.org
Subject: Bug#845780: fixed in brotli 0.5.2+dfsg-2
Date: Sun, 18 Dec 2016 11:18:31 +0000
Source: brotli
Source-Version: 0.5.2+dfsg-2

We believe that the bug you reported is fixed in the latest version of
brotli, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 845780@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Tomasz Buchert <tomasz@debian.org> (supplier of updated brotli package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 18 Dec 2016 11:37:54 +0100
Source: brotli
Binary: python-brotli python3-brotli brotli
Architecture: source
Version: 0.5.2+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Tomasz Buchert <tomasz@debian.org>
Changed-By: Tomasz Buchert <tomasz@debian.org>
Description:
 brotli     - lossless compression algorithm and format (command line utility)
 python-brotli - lossless compression algorithm and format (Python 2 version)
 python3-brotli - lossless compression algorithm and format (Python 3 version)
Closes: 845780
Changes:
 brotli (0.5.2+dfsg-2) unstable; urgency=medium
 .
   * Make object list deterministic (Closes: #845780)
Checksums-Sha1:
 79f9f2ee8d08f35eb3e62ec3eb2961556d3a7f26 1744 brotli_0.5.2+dfsg-2.dsc
 d7cc3164e1cd0eb7c6a64b9968a1d85d03151ae8 3392 brotli_0.5.2+dfsg-2.debian.tar.xz
Checksums-Sha256:
 f5e77d8c0295a3dd3700172d0795ebfe3acfcd172c35d80ce57711ad95e80992 1744 brotli_0.5.2+dfsg-2.dsc
 1d8fcd181271abb9b4ba92f98c68affbfe506870e9b3d87c54b30c39277ac5d9 3392 brotli_0.5.2+dfsg-2.debian.tar.xz
Files:
 f387a69c6373958d792046e9a9a1be01 1744 python optional brotli_0.5.2+dfsg-2.dsc
 08dbc797796dc9fcfc149c2118885db9 3392 python optional brotli_0.5.2+dfsg-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQFGBAEBCgAwFiEEs7i9UOfOjw7pOBilgsIKSinLv9UFAlhWaNsSHHRvbWFzekBk
ZWJpYW4ub3JnAAoJEILCCkopy7/VP2sH/3Mb3245W/Y2C4K8P/55WW0dq1WAWEI+
pdihy3Wdomr+A+oF1FHZMJ/ez7iqEHLSd7tP2eQfdk4L+Cju1pcSXSTGh4vpzLCG
V8wmVJ+F3sD9NB/tQemtTooWtyks5fzblxAyEyj93nN9sNZTWV7L0H8NYpxoKNOd
WsTle0zB21VOSfmn/fRBnCa5Q6CDvtwJd7jJrG5+LYY+D9jJQ/8ScRcrDbrjMV2K
tBYg6dSvEcltPgka86O4QWpnKO9CBk0NomUqO948mwR7zD12s3QoME/XdBcOz+L0
UcUhMvKNHp3fqGoY1m/erji3T+J1UXTk2INTUX7AjypxjMz4uQEYJgU=
=c88e
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Fri, 27 Jan 2017 11:20:46 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 14:00:10 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.