Debian Bug report logs - #909476
botan: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>

To: submit@bugs.debian.org

Subject: botan: please make the build reproducible

Date: Mon, 24 Sep 2018 13:01:35 +0100

[Message part 1 (text/plain, inline)]

Source: botan
Version: 2.6.0-3
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that botan could not be built reproducibly.

This is because it encodes CFLAGS into a shipped file, and these will
vary on the build path due to Reproducible-related parameters passed to
GCC. 

Patch attached that strips them in debian/rules but an alternative
approach would be to simply strip these from upstream's build.in
template that builds this file.


 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[botan.diff.txt (text/plain, attachment)]

Message #10 received at 909476-close@bugs.debian.org (full text, mbox, reply):

From: Laszlo Boszormenyi (GCS) <gcs@debian.org>

To: 909476-close@bugs.debian.org

Subject: Bug#909476: fixed in botan 2.8.0-1

Date: Fri, 04 Jan 2019 08:10:14 +0000

Source: botan
Source-Version: 2.8.0-1

We believe that the bug you reported is fixed in the latest version of
botan, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 909476@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated botan package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 01 Jan 2019 11:31:02 +0000
Source: botan
Binary: botan libbotan-2-8 libbotan-2-dev libbotan-2-doc python3-botan
Architecture: source amd64 all
Version: 2.8.0-1
Distribution: experimental
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 botan      - multiplatform crypto library (2.x version)
 libbotan-2-8 - multiplatform crypto library (2.x version)
 libbotan-2-dev - multiplatform crypto library (2.x version)
 libbotan-2-doc - multiplatform crypto library (2.x version)
 python3-botan - multiplatform crypto library (2.x version), Python3 module
Closes: 905335 909476 916970
Changes:
 botan (2.8.0-1) experimental; urgency=medium
 .
   * New upstream release.
   * Library transition from libbotan-2-7 to libbotan-2-8 .
   * Fix ARM CPU detection (closes: #916970).
   * Overhaul copyright file (closes: #905335).
   * Update Standards-Version to 4.3.0 .
 .
   [ Chris Lamb <lamby@debian.org> ]
   * Make the build reproducible (closes: #909476).
Checksums-Sha1:
 4628aaa26a3d5c7c11f50f1d0e25f32f9b0ed0d0 2047 botan_2.8.0-1.dsc
 709be6570b974209c6916b0fcd6dd508d55d1a05 7214880 botan_2.8.0.orig.tar.gz
 f3d0ab019f2b90934811696edff28fc4ecf87f2c 5712 botan_2.8.0-1.debian.tar.xz
 e2b04a8fcc4d4cbba99560b890373e4f923fd664 3784668 botan-dbgsym_2.8.0-1_amd64.deb
 c95ddb45a6c1b81385f45d32ddeb754d064c2e89 10208 botan_2.8.0-1_amd64.buildinfo
 6a5605278c16da45fb66bdb813e2c9d98a02010f 187708 botan_2.8.0-1_amd64.deb
 7b69fcf7e94bafd275e38bfee15d1d64895f2ef6 35533272 libbotan-2-8-dbgsym_2.8.0-1_amd64.deb
 78ece0f790953ef7d5c9cac764e61970b0a811d0 1525396 libbotan-2-8_2.8.0-1_amd64.deb
 3e7b2a20536eb3ad99d6bd04f33e02726b95e783 2301576 libbotan-2-dev_2.8.0-1_amd64.deb
 10ee26541775d70c7c395a1bc60d3f03c194a19c 404868 libbotan-2-doc_2.8.0-1_all.deb
 cea2a57bd3b46d2631013d94885bf658a87944ca 12916 python3-botan_2.8.0-1_amd64.deb
Checksums-Sha256:
 45091a09e55821bcb1c78af3122b3c5d9ea46b0fd293239e2dcbc5e86dbd3ce0 2047 botan_2.8.0-1.dsc
 3d2b359394261c3b173f0d89bba814d6794d95dd057d958365a3cc2d52cbdcd0 7214880 botan_2.8.0.orig.tar.gz
 3d43f19493f153275db891a47f89bad134621e968a0a91a05a6d74cdb90ddced 5712 botan_2.8.0-1.debian.tar.xz
 b1e7c87d2ee003407690a05a4cf45820280311cbea04a8bb09f8ac67d77fafc1 3784668 botan-dbgsym_2.8.0-1_amd64.deb
 129827fb103ff1e1d5f58a9750ac7cbba6295b54787b7be7bcdc980038b7841d 10208 botan_2.8.0-1_amd64.buildinfo
 e6695ffa29913bfe744d6064dacdc10d95e6132d86be9e870a0f46002b7f3930 187708 botan_2.8.0-1_amd64.deb
 2e3a9fa0cd8dbea4ad61c12b570d1a4537d338e38496de6e735b8537b104e53b 35533272 libbotan-2-8-dbgsym_2.8.0-1_amd64.deb
 bf396d8e3a39b27027293eb9717298c2b061a24e718a3d2046e6b54c3951920b 1525396 libbotan-2-8_2.8.0-1_amd64.deb
 8bfda26bd6f757ae3840342d519e733d00057ae006ac1bcd8d3ff6a9f8747e01 2301576 libbotan-2-dev_2.8.0-1_amd64.deb
 ed96880267c40716aa556f4e29ebd88024839bdbd3cf199b44af9bfb7b1cb7c9 404868 libbotan-2-doc_2.8.0-1_all.deb
 708450513017eed089f38b25ce95530496a20581decc8489f9e4f84ed019989f 12916 python3-botan_2.8.0-1_amd64.deb
Files:
 a15fe603ddfa782b8b151a9c8c0714c1 2047 libs optional botan_2.8.0-1.dsc
 0e9e0659cb1aa63adceebcb0f7762eef 7214880 libs optional botan_2.8.0.orig.tar.gz
 9547e3891f51e18eaca0e245adfa9f33 5712 libs optional botan_2.8.0-1.debian.tar.xz
 27473c4e22c71ac14474f767e80abbe2 3784668 debug optional botan-dbgsym_2.8.0-1_amd64.deb
 300bf1e867f52b37bc5ba0ed756093c8 10208 libs optional botan_2.8.0-1_amd64.buildinfo
 c9e12809dcfeefa23de01163f1b633f5 187708 libdevel optional botan_2.8.0-1_amd64.deb
 10e46525cdacc74806d521496b0c9027 35533272 debug optional libbotan-2-8-dbgsym_2.8.0-1_amd64.deb
 58cab2e81a6ef46ee8f69aeace189438 1525396 libs optional libbotan-2-8_2.8.0-1_amd64.deb
 0ca3d5f37fc00309e46b4329f99a690e 2301576 libdevel optional libbotan-2-dev_2.8.0-1_amd64.deb
 f2325bc8b5d0bead995d0b89bfa01f20 404868 doc optional libbotan-2-doc_2.8.0-1_all.deb
 87bb1053d360b220b74f9fbd913555d2 12916 python optional python3-botan_2.8.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=T6cy
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.