Debian Bug report logs - #891290
ardour: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: submit@bugs.debian.org

Subject: ardour: please make the build reproducible

Date: Sat, 24 Feb 2018 09:32:11 +0000

[Message part 1 (text/plain, inline)]

Source: ardour
Version: 1:5.12.0-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that ardour could not be built reproducibly.

This is because it embeds CFLAGS and CXXFLAGS in the resulting
binary. Proof of concept patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[ardour.diff.txt (text/plain, attachment)]

Message #10 received at 891290@bugs.debian.org (full text, mbox, reply):

From: IOhannes m zmölnig (Debian/GNU) <umlaeute@debian.org>

To: 891290@bugs.debian.org

Subject: Re: ardour: please make the build reproducible

Date: Wed, 28 Feb 2018 13:10:58 +0100

[Message part 1 (text/plain, inline)]

thanks.

On Sat, 24 Feb 2018 09:32:11 +0000 Chris Lamb <lamby@debian.org> wrote:
> This is because it embeds CFLAGS and CXXFLAGS in the resulting
> binary. Proof of concept patch attached.

before starting a longish ardour build, isn't the patch supposed to
*not* include the C/CXXFLAGS if SOURCE_DATE_EPOCH is defined?

e.g.

+  if 'SOURCE_DATE_EPOCH' not in os.environ:
+      write_config_text('C compiler flags',   conf.env['CFLAGS'])
+      write_config_text('C++ compiler flags', conf.env['CXXFLAGS'])

mgfsda
IOhannes

[signature.asc (application/pgp-signature, attachment)]

Message #13 received at 891290-submitter@bugs.debian.org (full text, mbox, reply):

From: zmoelnig@umlautS.umlaeute.mur.at

To: 891290-submitter@bugs.debian.org

Subject: Bug #891290 in ardour marked as pending

Date: Wed, 28 Feb 2018 16:32:00 +0000

Control: tag -1 pending

Hello,

Bug #891290 in ardour reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below, and you can check the diff of the fix at:

https://salsa.debian.org/multimedia-team/ardour/commit/c93a3dc03f0e35de56b28b68c8a3b05985156d49

------------------------------------------------------------------------
Updated reproducible build

Closes: #891290

------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

Message #20 received at 891290-close@bugs.debian.org (full text, mbox, reply):

From: IOhannes m zmölnig (Debian/GNU) <umlaeute@debian.org>

To: 891290-close@bugs.debian.org

Subject: Bug#891290: fixed in ardour 1:5.12.0-3

Date: Wed, 28 Feb 2018 19:49:32 +0000

Source: ardour
Source-Version: 1:5.12.0-3

We believe that the bug you reported is fixed in the latest version of
ardour, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 891290@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
IOhannes m zmölnig (Debian/GNU) <umlaeute@debian.org> (supplier of updated ardour package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 28 Feb 2018 19:55:26 +0100
Source: ardour
Binary: ardour ardour-data ardour-video-timeline
Architecture: source
Version: 1:5.12.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Multimedia Maintainers <debian-multimedia@lists.debian.org>
Changed-By: IOhannes m zmölnig (Debian/GNU) <umlaeute@debian.org>
Description:
 ardour     - the digital audio workstation
 ardour-data - digital audio workstation (data)
 ardour-video-timeline - digital audio workstation - video timeline
Closes: 891290
Changes:
 ardour (1:5.12.0-3) unstable; urgency=medium
 .
   [ Jaromír Mikeš ]
   * Remove trailing whitespace from changelog.
 .
   [ Ondřej Nový ]
   * d/control: Set Vcs-* to salsa.debian.org
 .
   [ IOhannes m zmölnig ]
   * Updated reproducible build (Closes: #891290)
   * Updated maintainer address
   * Fixed more spelling errors
   * Dropped unused vars from d/rules
   * Updated d/copyright
   * Regenerated d/control - really dropping transitional packages
   * Updated Vcs-* stanzas to salsa.d.o
   * Bumped standards to 4.1.3
Checksums-Sha1:
 14ab7a8a6c782c9e1e69be021b957fbc3663f9a4 3013 ardour_5.12.0-3.dsc
 d54e2f4aeada8a5a950ec7bd4c2c7740f430d994 163488 ardour_5.12.0-3.debian.tar.xz
 54e72a8bdce7cf0cd59c038335e08ed64b5f6034 18127 ardour_5.12.0-3_amd64.buildinfo
Checksums-Sha256:
 b4b26782ec2b421743f807fa0af99c02fd23d67a5d379401d7ee3a61ae05ad77 3013 ardour_5.12.0-3.dsc
 ab2f880ea1774fd02f4f76a6aa63a4b78e16588794bb80a14e634b0f12c6b30a 163488 ardour_5.12.0-3.debian.tar.xz
 3386744845f0f56d4ba92439e81953c72c7abff3e7bd076788b9abaa089874b7 18127 ardour_5.12.0-3_amd64.buildinfo
Files:
 402a93dfb3efa0931c2b3a861a0541e2 3013 sound optional ardour_5.12.0-3.dsc
 3e56f704561d9454806d20306d3d7f74 163488 sound optional ardour_5.12.0-3.debian.tar.xz
 0c3d2998653411b4ea34bcfa1625455b 18127 sound optional ardour_5.12.0-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=g04s
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.