Debian Bug report logs - #845790
garmin-plugin: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>

To: submit@bugs.debian.org

Subject: garmin-plugin: please make the build reproducible

Date: Sat, 26 Nov 2016 19:06:44 +0100

[Message part 1 (text/plain, inline)]

Source: garmin-plugin
Version: 0.3.23-2
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that garmin-plugin could not be built reproducibly.
During build it links objects in non-deterministic order.

The attached patch fixes this by sorting the list of source files.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds

[garmin-plugin.patch (text/x-diff, attachment)]

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 845790-close@bugs.debian.org (full text, mbox, reply):

From: Christian Perrier <bubulle@debian.org>

To: 845790-close@bugs.debian.org

Subject: Bug#845790: fixed in garmin-plugin 0.3.23-4

Date: Sun, 27 Nov 2016 16:48:42 +0000

Source: garmin-plugin
Source-Version: 0.3.23-4

We believe that the bug you reported is fixed in the latest version of
garmin-plugin, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 845790@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christian Perrier <bubulle@debian.org> (supplier of updated garmin-plugin package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 27 Nov 2016 09:00:08 +0100
Source: garmin-plugin
Binary: garmin-plugin
Architecture: source i386
Version: 0.3.23-4
Distribution: unstable
Urgency: medium
Maintainer: Debian running development group <pkg-running-devel@lists.alioth.debian.org>
Changed-By: Christian Perrier <bubulle@debian.org>
Description:
 garmin-plugin - browser plugin for communication with the fitness websites
Closes: 845790
Changes:
 garmin-plugin (0.3.23-4) unstable; urgency=medium
 .
   * Make builds reproducible by building objects in a deterministic
     order. Thanks to Reiner Herrman for the patch.
     Closes: #845790
Checksums-Sha1:
 3e72ca2fbe9d66b9ba5942514edccb0d59a0de80 2171 garmin-plugin_0.3.23-4.dsc
 16861dbf69ce2a8a2035eef57e97e1da38067bf6 4612 garmin-plugin_0.3.23-4.debian.tar.xz
 129b8bfd98be9894fa6c78ac4b62d5c8728d4137 4953 garmin-plugin_0.3.23-4_i386.buildinfo
 acf3a39a47e33814212a00c734a13dbad175c8fc 127418 garmin-plugin_0.3.23-4_i386.deb
Checksums-Sha256:
 ba706177d4368e129be89a85a19b994332143764671b9baa562ee07b2782a91f 2171 garmin-plugin_0.3.23-4.dsc
 5d984e67b0e9263dc6593dcd0fd5b890647baecbfc3c93e7aec7ac8abda651b5 4612 garmin-plugin_0.3.23-4.debian.tar.xz
 dc0749b884f24c7f9d67e6522a28c25d47742cb89d3f3cf41a3c1dca720d6a29 4953 garmin-plugin_0.3.23-4_i386.buildinfo
 0349784faecd7e7472839d143debd1cac8bd0c5f730f8f8236a8894465deb448 127418 garmin-plugin_0.3.23-4_i386.deb
Files:
 528640c1f1dc0d6c0a4c633b57cd5fe3 2171 utils extra garmin-plugin_0.3.23-4.dsc
 f53f38f5d8922e103471e441a2cff59a 4612 utils extra garmin-plugin_0.3.23-4.debian.tar.xz
 b53fcdca0d43325b72e9e0af60824258 4953 utils extra garmin-plugin_0.3.23-4_i386.buildinfo
 a33a4e39916d6727debb394861a35aa7 127418 utils extra garmin-plugin_0.3.23-4_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJYOwwaAAoJEIcvcCxNbiWoYUIQAIQ+Alq2luasYQPiVmuAWfGh
q7avt0ABLo4sKWOa2iyQqnAnOdcLy4WbN3eLxUvMfSWogrmCNH8KEyjMfwLJSwJW
HUtEFkOx4Fnjy1lqWH2Zk1d+GyQ5InJyxUoZBfH1j5j9LIwfKZgVNrC8tEkSu71G
6vwr8Zj5ERLflO5LRZDjrYtqN9WGY0HTyy9tzxJLRkdSIciMowTgk5mUxpsG27qI
hEgTKTTnVawzImbqenRbZ9OVv1QI9I0nA2qw8nTgSChickneBCAa+kNQ21NqGYBL
Edz+I8owb+gYx/PdS+SypSeKwpu75LXH2vqJbmxmVJ1oKJzULC4k8+UOm+Jt/ABv
6kEvocc2jDh3Q59Ti/61w2HlaYzuFlDzj2RCMQ2ORr4wDzZd+Fi1YKWRAknhbghS
gVjdpk4iA0iryLtAkhGkP5zc0GFgg/IyPbK0qUYvOhiEixxY18iBfzzXrj8/Mv8O
jsdPoBZjKRSvg67hvJnF6mLpnuqzr00+IYrADArtGPtKd8shRMRjLSPhL98LP7o6
oV6hkndM6RiTxBGEQHrWwQnXp9zR3XjwsVBmOs6jZmN7143YeiNQ5mZYi1yt3BRt
gwIPnD0EeZeSTC1yxGkRb7oKbQw5fwhqjZc5jpzI/ROGcmjZRpNvyu3v8hhtJPVb
SdLoOIz/hMLBv54Bck04
=Zf6T
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.