Debian Bug report logs - #892425
node-package-preamble: please make the output reproducible

version graph

Package: src:node-package-preamble; Maintainer for src:node-package-preamble is Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Fri, 9 Mar 2018 02:21:01 UTC

Severity: wishlist

Tags: patch

Found in version node-package-preamble/0.1.0-1

Done: "Chris Lamb" <lamby@debian.org>

Bug is archived. No further changes may be made.

Forwarded to https://github.com/mbostock/preamble/pull/4

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:21:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:21:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: node-package-preamble: please make the output reproducible
Date: Fri, 09 Mar 2018 02:19:26 +0000
[Message part 1 (text/plain, inline)]
Source: node-package-preamble
Version: 0.1.0-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: toolchain timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that node-package-preamble generates output that is not
reproducible which is affecting the reproducibility of (at least)
5 packages.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[node-package-preamble.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:27:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:27:05 GMT) (full text, mbox, link).


Message #10 received at 892425@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 892425@bugs.debian.org
Subject: Re: node-package-preamble: please make the output reproducible
Date: Fri, 09 Mar 2018 02:25:17 +0000
forwarded 892425 https://github.com/mbostock/preamble/pull/4
thanks

I've forwarded this upstream here:

  https://github.com/mbostock/preamble/pull/4


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Set Bug forwarded-to-address to 'https://github.com/mbostock/preamble/pull/4'. Request was from Chris Lamb <lamby@debian.org> to control@bugs.debian.org. (Fri, 09 Mar 2018 02:27:08 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:45:03 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:45:03 GMT) (full text, mbox, link).


Message #17 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: Ben Finney <bignose@debian.org>
Cc: submit@bugs.debian.org, 892425@bugs.debian.org
Subject: Re: Bug#892425: node-package-preamble: please make the output reproducible
Date: Fri, 09 Mar 2018 02:41:05 +0000
Hi Ben,

> Is this change generally useful to recipients of the upstream code base?
> Or is it specific to OS distributions?

It is generally useful, not specific to any OS.

> Does this constitute an improvement to the upstream code base? Or should
> remain a persistent patch in the Debian package?

Upstream. I've filed it here:

  https://github.com/mbostock/preamble/pull/4
 
> Does this change apply more generally to many JavaScript packages?

Not that I am aware of. It would only apply to a limit subset of
packages where:

  a) We use the output during a package build
  b) That output ends up in the resulting binaries
  c) The output actually is not reproducible (ie. dates).

(The only other example I can recall right now is in uglifyjs which
has non- determinstic dictionary ordering IIRC.)


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:45:05 GMT) (full text, mbox, link).


Acknowledgement sent to Ben Finney <bignose@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:45:05 GMT) (full text, mbox, link).


Message #22 received at submit@bugs.debian.org (full text, mbox, reply):

From: Ben Finney <bignose@debian.org>
To: Chris Lamb <lamby@debian.org>
Cc: submit@bugs.debian.org, 892425@bugs.debian.org
Subject: Re: Bug#892425: node-package-preamble: please make the output reproducible
Date: Fri, 09 Mar 2018 13:34:28 +1100
Chris Lamb <lamby@debian.org> writes:

> diff --git a/bin/preamble b/bin/preamble
> index a563140..be96d96 100755
> --- a/bin/preamble
> +++ b/bin/preamble
> @@ -3,12 +3,17 @@
>  var os = require("os"),
>      fs = require("fs");
>  
> +var now = new Date();
> +if (process.env.SOURCE_DATE_EPOCH) {
> +  now = new Date((process.env.SOURCE_DATE_EPOCH * 1000) + (now.getTimezoneOffset() * 60000));
> +}
> +
>  fs.readFile("package.json", "utf8", function(error, text) {
>    if (error) throw error;
>    var json = JSON.parse(text);
>    process.stdout.write("// " + (json.homepage || json.name)
>        + " Version " + json.version + "."
> -      + " Copyright " + (new Date).getFullYear()
> +      + " Copyright " + now.getFullYear()
>        + " " + json.author.name + (/\.$/.test(json.author.name) ? "" : ".")
>        + os.EOL);
>  });

Is this change generally useful to recipients of the upstream code base?
Or is it specific to OS distributions?

Does this constitute an improvement to the upstream code base? Or should
remain a persistent patch in the Debian package?

Does this change apply more generally to many JavaScript packages?

-- 
 \           “I prayed for twenty years but received no answer until I |
  `\          prayed with my legs.” —Frederick Douglass, escaped slave |
_o__)                                                                  |
Ben Finney <bignose@debian.org>



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:45:07 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:45:07 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:45:09 GMT) (full text, mbox, link).


Acknowledgement sent to Ben Finney <bignose@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:45:09 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 09 Mar 2018 02:51:03 GMT) (full text, mbox, link).


Acknowledgement sent to Ben Finney <bignose@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 09 Mar 2018 02:51:03 GMT) (full text, mbox, link).


Message #37 received at 892425@bugs.debian.org (full text, mbox, reply):

From: Ben Finney <bignose@debian.org>
To: Chris Lamb <lamby@debian.org>
Cc: 892425@bugs.debian.org
Subject: Re: Bug#892425: node-package-preamble: please make the output reproducible
Date: Fri, 9 Mar 2018 13:46:13 +1100
[Message part 1 (text/plain, inline)]
On 09-Mar-2018, Chris Lamb wrote:

> Upstream. I've filed it here:
>   https://github.com/mbostock/preamble/pull/4

I see that now, thank you.

> > Does this change apply more generally to many JavaScript packages?
> Not that I am aware of. It would only apply to a limit subset of
> packages where […]

Great, thank you for indulging my curiosity.

-- 
 \       “During the Middle Ages, probably one of the biggest mistakes |
  `\   was not putting on your armor because you were ‘just going down |
_o__)                                    to the corner.’” —Jack Handey |
Ben Finney <bignose@debian.org>
[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Thu, 03 Sep 2020 23:03:02 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Thu, 03 Sep 2020 23:03:02 GMT) (full text, mbox, link).


Message #42 received at 892425@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: 892425@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: Bug#892425: node-package-preamble: please make the output reproducible
Date: Thu, 03 Sep 2020 22:58:03 -0000
Chris Lamb wrote:

> [..]

Friendly ping on this?


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org, Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>:
Bug#892425; Package src:node-package-preamble. (Fri, 04 Sep 2020 04:21:02 GMT) (full text, mbox, link).


Acknowledgement sent to Xavier <yadd@debian.org>:
Extra info received and forwarded to list. Copy sent to Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>. (Fri, 04 Sep 2020 04:21:02 GMT) (full text, mbox, link).


Message #47 received at 892425@bugs.debian.org (full text, mbox, reply):

From: Xavier <yadd@debian.org>
To: Chris Lamb <lamby@debian.org>, 892425@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: [Pkg-javascript-devel] Bug#892425: node-package-preamble: please make the output reproducible
Date: Fri, 4 Sep 2020 06:05:03 +0200
Le 04/09/2020 à 00:58, Chris Lamb a écrit :
> Chris Lamb wrote:
> 
>> [..]
> 
> Friendly ping on this?
> 
> 
> Regards,

Hi,

I think we already fix that with https://bugs.debian.org/935790

Duplication ?

Cheers,
Xavier



Reply sent to "Chris Lamb" <lamby@debian.org>:
You have taken responsibility. (Fri, 04 Sep 2020 09:33:05 GMT) (full text, mbox, link).


Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Fri, 04 Sep 2020 09:33:05 GMT) (full text, mbox, link).


Message #52 received at 892425-done@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: "Xavier Guimard" <yadd@debian.org>, 892425-done@bugs.debian.org, reproducible-bugs@lists.alioth.debian.org
Subject: Re: [Pkg-javascript-devel] Bug#892425: node-package-preamble: please make the output reproducible
Date: Fri, 04 Sep 2020 10:28:59 +0100
Hi Xavier,
 
> I think we already fix that with https://bugs.debian.org/935790

Ah yes, well-spotted. Closing this bug accordingly.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-



Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 03 Oct 2020 07:27:02 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 13:57:03 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.