Debian Bug report logs - #876657
device-tree-compiler: Please make the build more reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: device-tree-compiler: Please make the build more reproducible

Date: Sun, 24 Sep 2017 08:43:14 -0700

[Message part 1 (text/plain, inline)]

Package: device-tree-compiler
Version: 1.4.2-1
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Thanks for maintaining device-tree-compiler!

While working on the Reproducible Builds effort [0], we noticed that
device-tree-compiler could not be built reproducibly. This is because it
includes the timestamp in the generated documentation.

 [0] https://reproducible-builds.org/


The following patch sets a variable that causes texlive to respect
SOURCE_DATE_EPOCH when generating documentation.

diff --git a/debian/rules b/debian/rules
index c852d3c..e3d56eb 100755
--- a/debian/rules
+++ b/debian/rules
@@ -10,6 +10,10 @@
 
 export CFLAGS = -Wall -g -fPIC
 
+# reproducible builds: Insist that documents generated with texlive
+# use SOURCE_DATE_EPOCH for timestamps.
+export FORCE_SOURCE_DATE=1
+
 include /usr/share/dpkg/architecture.mk
 ifeq ($(origin CC),default)
 export CC = $(DEB_HOST_GNU_TYPE)-gcc


This doesn't fully address reproducibility issues with
device-tree-compiler, as it is still influenced by build-path
variations, but build-path is not currently varied when testing buster.


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 876657-close@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@debian.org>

To: 876657-close@bugs.debian.org

Subject: Bug#876657: fixed in device-tree-compiler 1.4.4-1

Date: Mon, 25 Sep 2017 16:34:31 +0000

Source: device-tree-compiler
Source-Version: 1.4.4-1

We believe that the bug you reported is fixed in the latest version of
device-tree-compiler, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 876657@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@debian.org> (supplier of updated device-tree-compiler package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 Sep 2017 09:10:56 -0700
Source: device-tree-compiler
Binary: device-tree-compiler libfdt1 libfdt-dev
Architecture: source
Version: 1.4.4-1
Distribution: unstable
Urgency: medium
Maintainer: Héctor Orón Martínez <zumbi@debian.org>
Changed-By: Vagrant Cascadian <vagrant@debian.org>
Description:
 device-tree-compiler - Device Tree Compiler for Flat Device Trees
 libfdt-dev - Flat Device Trees manipulation library - development files
 libfdt1    - Flat Device Trees manipulation library
Closes: 863174 876657
Changes:
 device-tree-compiler (1.4.4-1) unstable; urgency=medium
 .
   * New upstream release:
     - Add DT Overlay support, closes: #863174.
   * Documentation:
     - Only install .pdf of documentation paper, dropping .ps and .dvi
       versions.
     - Add documentation about dts format and dt objects.
   * Add debian/watch file.
   * Switch to source/format: 3.0 (quilt).
   * Switch to dh and debhelper compat level 10.
   * debian/rules:
     - Enabled hardening.
     - Ensure texlive generated documentation does not embed timestamps,
       closes: #876657.
   * debian/control:
     - Set Priority to optional.
     - Set Standards-Version to 4.1.0.
     - Add Vagrant Cascadian to Uploaders.
     - Use https:// URLs for Vcs-*.
   * debian/copyright:
     - Switch to copyright-format 1.0.
Checksums-Sha1:
 7c9b7e66b2785bc5a0a2a59c58af93de992e56ff 2262 device-tree-compiler_1.4.4-1.dsc
 0efc17570848bc3072551cf86fdec153f4f7d461 156980 device-tree-compiler_1.4.4.orig.tar.gz
 582fc39e6fd40889eb811cf73a9c782906270d6e 7336 device-tree-compiler_1.4.4-1.debian.tar.xz
 ddbdc1518a29c7fc792eedd23e10587242223342 8752 device-tree-compiler_1.4.4-1_amd64.buildinfo
Checksums-Sha256:
 68e350ee0b99f1b7596b37e943242a453664e5769ee62db6e4c4468567f5dbd2 2262 device-tree-compiler_1.4.4-1.dsc
 2f2c0bf4d84763595953885bdcd2159b0b85410018c8ba48cc31b3d6e443e4d8 156980 device-tree-compiler_1.4.4.orig.tar.gz
 5ea511a10454a8030d8730b18ce785787e9e2a578985dd864626785eb20effc0 7336 device-tree-compiler_1.4.4-1.debian.tar.xz
 a9da99a285277dbdd2880a1a496295d95f85a99903e8fe0769e47a50b132fd89 8752 device-tree-compiler_1.4.4-1_amd64.buildinfo
Files:
 25281029679b25e614ede2c2aaf51b53 2262 devel optional device-tree-compiler_1.4.4-1.dsc
 84180a796f4f0855f4ba78c49acf0211 156980 devel optional device-tree-compiler_1.4.4.orig.tar.gz
 316d7923c94766b79d84a88a938e140b 7336 devel optional device-tree-compiler_1.4.4-1.debian.tar.xz
 385f7814226c44b4d2f1705eb31f443b 8752 devel optional device-tree-compiler_1.4.4-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Sh8g
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.