Debian Bug report logs - #854146
diploma: please make the build reproducible

version graph

Package: src:diploma; Maintainer for src:diploma is Andreas Franzen <anfra@debian.org>;

Reported by: Reiner Herrmann <reiner@reiner-h.de>

Date: Sat, 4 Feb 2017 13:48:02 UTC

Severity: wishlist

Tags: patch, upstream

Found in version diploma/1.2.12

Fixed in version diploma/1.2.13

Done: Andreas Franzen <anfra@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Andreas Franzen <anfra@debian.org>:
Bug#854146; Package src:diploma. (Sat, 04 Feb 2017 13:48:04 GMT) (full text, mbox, link).


Acknowledgement sent to Reiner Herrmann <reiner@reiner-h.de>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Andreas Franzen <anfra@debian.org>. (Sat, 04 Feb 2017 13:48:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Reiner Herrmann <reiner@reiner-h.de>
To: submit@bugs.debian.org
Subject: diploma: please make the build reproducible
Date: Sat, 4 Feb 2017 14:44:59 +0100
[Message part 1 (text/plain, inline)]
Source: diploma
Version: 1.2.12
Severity: wishlist
Tags: patch upstream
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering umask username
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that diploma could not be built reproducibly.
The generated example tarballs vary in permissions, uid/gid and file
order.

The attached patch fixes this.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
[diploma.patch (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]

Reply sent to Andreas Franzen <anfra@debian.org>:
You have taken responsibility. (Mon, 20 Feb 2017 23:36:06 GMT) (full text, mbox, link).


Notification sent to Reiner Herrmann <reiner@reiner-h.de>:
Bug acknowledged by developer. (Mon, 20 Feb 2017 23:36:06 GMT) (full text, mbox, link).


Message #10 received at 854146-close@bugs.debian.org (full text, mbox, reply):

From: Andreas Franzen <anfra@debian.org>
To: 854146-close@bugs.debian.org
Subject: Bug#854146: fixed in diploma 1.2.13
Date: Mon, 20 Feb 2017 23:33:42 +0000
Source: diploma
Source-Version: 1.2.13

We believe that the bug you reported is fixed in the latest version of
diploma, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 854146@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Franzen <anfra@debian.org> (supplier of updated diploma package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 20 Feb 2017 23:46:58 +0100
Source: diploma
Binary: diploma
Architecture: source all
Version: 1.2.13
Distribution: unstable
Urgency: medium
Maintainer: Andreas Franzen <anfra@debian.org>
Changed-By: Andreas Franzen <anfra@debian.org>
Description:
 diploma    - Write scientific papers with Debian
Closes: 854146
Changes:
 diploma (1.2.13) unstable; urgency=medium
 .
   * Fix "please make the build reproducible" using patch provided by
     Author: Reiner Herrmann <reiner@reiner-h.de>
     Description: Create reproducible tarballs
     - sort archive members (needs tar 1.28)
     - use uid/gid 0
     - normalize permissions for umask variances
     (Closes: #854146)
Checksums-Sha1:
 afea6ea26ac5e4a4c553d40bf66df83261003754 1371 diploma_1.2.13.dsc
 fc0879f2e3bc31b40e7b59f19799998aa01f13de 25363 diploma_1.2.13.tar.gz
 862ab64688ac9e0767434569de93535de86c4e05 27426 diploma_1.2.13_all.deb
Checksums-Sha256:
 59300168afdda391c2ebc674bf98aa0cb0489fac1260568db528f9a88980ba35 1371 diploma_1.2.13.dsc
 5d1cafcceaf6e9b6c222e08f96b80511dd715c9b700c222abc007814cd9b9c31 25363 diploma_1.2.13.tar.gz
 233fa1a52fbc88f59f03750a3751772b7bf16643d26d138300583c8775419d7c 27426 diploma_1.2.13_all.deb
Files:
 d45bb547d763f3dacfa2fe6b2c6698b8 1371 doc optional diploma_1.2.13.dsc
 d7c418c2f4e455c645d28adf6cd6163f 25363 doc optional diploma_1.2.13.tar.gz
 7d7fb82c6882f3ac0f99541197c66bb2 27426 doc optional diploma_1.2.13_all.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=+jj1
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 18 Jul 2017 07:38:20 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 14:08:09 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.