Debian Bug report logs - #854541
sogo: please make the build reproducible (username, hostname, timestamps)

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Daniel Shahaf <danielsh@apache.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: sogo: please make the build reproducible (username, hostname, timestamps)

Date: Wed, 08 Feb 2017 06:21:08 +0000

[Message part 1 (text/plain, inline)]

Source: sogo
Version: 3.2.6-1
Severity: wishlist
Tags: upstream patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: username hostname timestamps

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that sogo could not be built reproducibly, because it embeds the value
of $(CFLAGS), which varies due to -fdebug-prefix-map (added by the
reproducibility infrastructure) and -DSOGO_BUILD_DATE.

The attached patch removes -DSOGO_BUILD_DATE from $(CFLAGS), which
should make the package reproducible in the future, once we fix the
-fdebug-prefix-map issue globally on our end.  As a side effect, it will
also ensure that if upstream adds references to SOGO_BUILD_DATE, the
build will fail until they are removed, in line with the original intent
of the 0005 patch.

Cheers,

Daniel

 [1]: https://wiki.debian.org/ReproducibleBuilds

[no-build-date-v1.diff (text/x-diff, attachment)]

Message #10 received at 854541-close@bugs.debian.org (full text, mbox, reply):

From: Jordi Mallach <jordi@debian.org>

To: 854541-close@bugs.debian.org

Subject: Bug#854541: fixed in sogo 3.2.10-1

Date: Fri, 21 Jul 2017 11:05:54 +0000

Source: sogo
Source-Version: 3.2.10-1

We believe that the bug you reported is fixed in the latest version of
sogo, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 854541@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jordi Mallach <jordi@debian.org> (supplier of updated sogo package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 21 Jul 2017 02:46:15 +0200
Source: sogo
Binary: sogo sogo-common
Architecture: source all amd64
Version: 3.2.10-1
Distribution: unstable
Urgency: medium
Maintainer: Debian SOGo Maintainers <pkg-sogo-maintainers@lists.alioth.debian.org>
Changed-By: Jordi Mallach <jordi@debian.org>
Description:
 sogo       - Scalable groupware server
 sogo-common - Scalable groupware server - common files
Closes: 854541
Changes:
 sogo (3.2.10-1) unstable; urgency=medium
 .
   * New upstream release.
     - now renders S/MIME and PGP signed messages correctly.
   * Remove -DSOGO_BUILD_DATE from $CFLAGS to fix build reproducibility
     (closes: #854541).
   * Bump libsope1-dev Build-Dep to 3.2.10.
   * Remove full text of MPL-1.1 and refer to common-licenses.
   * Update Standards-Version to 4.0.0.
Checksums-Sha1:
 b9df313ea2c0595353df646cb61935a38be9e8d6 2146 sogo_3.2.10-1.dsc
 16533580326dc7767139f976b21031b276fdb427 32644083 sogo_3.2.10.orig.tar.gz
 8a838c24ba5495d76fb0f2ad2575dea396cb2619 15212 sogo_3.2.10-1.debian.tar.xz
 da46d301ba72504217ae70502847d2ffd594e58e 18212226 sogo-common_3.2.10-1_all.deb
 d9e0f3fae9f7ebfd185c459b1c24ce5afeb5a0e2 1553212 sogo-dbgsym_3.2.10-1_amd64.deb
 e3a93a6f00481730319012355b1f45cbe6e05f0f 9284 sogo_3.2.10-1_amd64.buildinfo
 38d568d133f4bd3daca89d31720be5ad13dca1bc 2385724 sogo_3.2.10-1_amd64.deb
Checksums-Sha256:
 a78ff2e1707c75cf490f8ad70aaa193db4e94acbab9164fcb354b46a957e7d06 2146 sogo_3.2.10-1.dsc
 63828a93d15c30c84a7955d44962373d428697770e875ce5a9a5367378caf04e 32644083 sogo_3.2.10.orig.tar.gz
 b2c1547b60be471c0c459f8dfdfa5e8e20a98f0d7501402af9eeffcf5f615a81 15212 sogo_3.2.10-1.debian.tar.xz
 a6de022536f302ac3040963b0d1c07838f1cb4507f1442bd331dc7d8ca5966eb 18212226 sogo-common_3.2.10-1_all.deb
 5c9f022ba9672c402e38ec60a6136a302cd235172c24eb658b65fb5f882c8a7f 1553212 sogo-dbgsym_3.2.10-1_amd64.deb
 fa1ecff1d6c30144561aa6ff47a6d3b414a60c9ec3420841cc5a8980e2de0734 9284 sogo_3.2.10-1_amd64.buildinfo
 b55d4c87a4df231f9219ca1c9a6588c0c23735cb0e6437ada60f455339fddde5 2385724 sogo_3.2.10-1_amd64.deb
Files:
 7533aa54501a3a2fa95192e0ee191850 2146 mail optional sogo_3.2.10-1.dsc
 8eddaee3306d9804c22df6a8df356972 32644083 mail optional sogo_3.2.10.orig.tar.gz
 887207279d416d06be6dd792b21986d1 15212 mail optional sogo_3.2.10-1.debian.tar.xz
 a7427e01f1aaeda3f76a05047ec149cc 18212226 mail optional sogo-common_3.2.10-1_all.deb
 50e7b8a39b5e4f22329f53a64b3f2e1c 1553212 debug extra sogo-dbgsym_3.2.10-1_amd64.deb
 ef61cabcfbb28cd069bb6afdfa800dff 9284 mail optional sogo_3.2.10-1_amd64.buildinfo
 616ea97c5c0d0929c8387625289ea2f1 2385724 mail optional sogo_3.2.10-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=niP9
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.