Debian Bug report logs - #915296
mpb: reproducible build (usrmerge): embeds path of bash found via PATH

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Andreas Henriksson <andreas@fatal.se>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: mpb: reproducible build (usrmerge): embeds path of bash found via PATH

Date: Sun, 2 Dec 2018 16:58:01 +0100

[Message part 1 (text/plain, inline)]

Source: mpb
Version: 1.5-3
Severity: normal
Tags: patch
User: md@linux.it
Usertags: usrmerge

Dear Maintainer,

The package currently fails to reproducibly build on merged-usr vs
non-merged systems.

The problem is caused by looking up the full path of bash at buildtime
and embedding than in shipped files.
On merged-usr systems /bin is as symlink to /usr/bin and normally
PATH contains /usr/bin before /bin, thus /usr/bin/bash is found on
merged-usr while on a non-merged system it's /bin/bash .

This is easily fixed by passing the AC_PATH_PROG variable explicitly
to configure, ie. SH_JOB=/bin/bash.
Please see attached  debdiff.

Regards,
Andreas Henriksson

[mpb-usrmerge.debdiff (text/plain, attachment)]

Message #10 received at 915296-close@bugs.debian.org (full text, mbox, reply):

From: Thorsten Alteholz <debian@alteholz.de>

To: 915296-close@bugs.debian.org

Subject: Bug#915296: fixed in mpb 1.7.0-4

Date: Wed, 02 Jan 2019 15:21:14 +0000

Source: mpb
Source-Version: 1.7.0-4

We believe that the bug you reported is fixed in the latest version of
mpb, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 915296@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thorsten Alteholz <debian@alteholz.de> (supplier of updated mpb package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 02 Jan 2019 11:32:14 +0100
Source: mpb
Binary: mpb mpb-mpi mpb-doc mpb-dev mpb-scm
Architecture: source amd64 all
Version: 1.7.0-4
Distribution: sid
Urgency: medium
Maintainer: Thorsten Alteholz <debian@alteholz.de>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Description:
 mpb        - MIT Photonic-Bands
 mpb-dev    - MIT Photonic-Bands development files
 mpb-doc    - MIT Photonic-Bands documentation
 mpb-mpi    - MIT Photonic-Bands, parallel (mpich) version
 mpb-scm    - MIT Photonic-Bands initialisation files
Closes: 915296 917947
Changes:
 mpb (1.7.0-4) unstable; urgency=medium
 .
   * debian/control: build everything on any architecture (Closes: #917947)
   * debian/rules: Pass SH_JOB=/bin/bash to configure (Closes: #915296)
                    - fixes reproducible build on merged-usr vs non-merged
                   Thanks to Andreas Henriksson for the patch.
Checksums-Sha1:
 b114b6c5f9d089cf1f8dbbfef574122bf768b2f1 2263 mpb_1.7.0-4.dsc
 beea61d928c773e4a008f4c2d3f600f6322a3948 1052539 mpb_1.7.0.orig.tar.gz
 1c8712843c12e4af48128197edfa8d5c53a0f3b7 144284 mpb_1.7.0-4.debian.tar.xz
 de7045a16af432143b59e7cc2e131fb14ff4e98c 743956 mpb-dbgsym_1.7.0-4_amd64.deb
 6b32666576530aaac9b41d3a57cd2c76a6fbefb4 10844 mpb-dev_1.7.0-4_amd64.deb
 5be1e24fa9c2990410bdd9b7df9d10a58f8ff994 844224 mpb-doc_1.7.0-4_all.deb
 bea0cf168caba9282421a9f0a64754055fa9b43a 708508 mpb-mpi-dbgsym_1.7.0-4_amd64.deb
 e49dc05254ad6ef77194325cc702420bc50d7338 187112 mpb-mpi_1.7.0-4_amd64.deb
 fac653f669385684d609cf8e6c5eae86ada587fb 14824 mpb-scm_1.7.0-4_all.deb
 a5f79c1103461a0a7195df119bb4bdfb485a874a 9456 mpb_1.7.0-4_amd64.buildinfo
 af84daf5f91f2730ea748f390755a357425cdc9b 211072 mpb_1.7.0-4_amd64.deb
Checksums-Sha256:
 a9cd8c53dddce3fc7e079ae871c88475725ef6f96697963736ef3de3c213ebe1 2263 mpb_1.7.0-4.dsc
 9b9b23b079f656d6c758da034822f7ab6b4128fb6c907c8506fa38b786908c7e 1052539 mpb_1.7.0.orig.tar.gz
 9d64f3eaf55ceac57e0e63635ae176d0321ec531a2ca05fb13168a19561d95c9 144284 mpb_1.7.0-4.debian.tar.xz
 b97b6af8924be32d95ea54368ef6d3ee3e5af40f6a1e041d5345c0e7dbff6258 743956 mpb-dbgsym_1.7.0-4_amd64.deb
 96964cdfdb40056e51c734c67762f92ae9a43c2c87fa919a186cffeb4f414c4a 10844 mpb-dev_1.7.0-4_amd64.deb
 32d6f5bc9ee89f85fac2e02b14efce6dbb19c35dc264d7cbd9be4b8b03a0bc9f 844224 mpb-doc_1.7.0-4_all.deb
 979425808cfcb2413f80f797593b6ac169b4f261efd262755e727e67695b16ca 708508 mpb-mpi-dbgsym_1.7.0-4_amd64.deb
 58ffdce29ef5981808149cc5f51cfe5bf10f7a37c3745e015aa53797d0727d34 187112 mpb-mpi_1.7.0-4_amd64.deb
 0542bce4ebfcbc6ab93d2aed789d8f3770d1067fb27be2f01b7098249b2a5568 14824 mpb-scm_1.7.0-4_all.deb
 0775903f4b5923e0262a6905ebc4a73fc91368999eafc13308e9e13fe7adf139 9456 mpb_1.7.0-4_amd64.buildinfo
 6bd616ea6a9aae7faf8ba242d39b5909d2c468874854d2141f45b9177c25f922 211072 mpb_1.7.0-4_amd64.deb
Files:
 3a2eb17712a92229dab483091fad057c 2263 science optional mpb_1.7.0-4.dsc
 a7dc5cd2fabb39aaa2ca31cf73cd788a 1052539 science optional mpb_1.7.0.orig.tar.gz
 3d7e4f8c16f80791455c74ebfdee6cd2 144284 science optional mpb_1.7.0-4.debian.tar.xz
 084f297bc5bf2d91136888104b3b8f6c 743956 debug optional mpb-dbgsym_1.7.0-4_amd64.deb
 e89afe3c9fac33a065e795e2bfeff2a5 10844 devel optional mpb-dev_1.7.0-4_amd64.deb
 c97e660e1963c3f37071c5c6381894c3 844224 doc optional mpb-doc_1.7.0-4_all.deb
 ed6e1ade42c09120b5781cac351fca94 708508 debug optional mpb-mpi-dbgsym_1.7.0-4_amd64.deb
 2f4e0ca3757d651a67c3193174005cd7 187112 science optional mpb-mpi_1.7.0-4_amd64.deb
 0a5221733c1e854eafac804b844c844e 14824 science optional mpb-scm_1.7.0-4_all.deb
 3636f331267ff26cdd21b25a942fd8b1 9456 science optional mpb_1.7.0-4_amd64.buildinfo
 2da71be9f06d6cea7ce10be2cf416b9e 211072 science optional mpb_1.7.0-4_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAlwsynNfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR2zEEACiHTQSYlGRJbfI2Y3cVOWG53jBSRCk
azmf2PqKPC5d/f4FZWsjGswyAr2MUlHUmlVL+MPqZpM5WXd2V5F7wi3v/WcFFDG0
jo816+SMGOy+jj1dybk/l08d5LD+UyNAnL3YNa/JympOWx5jT01qJB4zhZqqO6vH
0tewLYmdRgw6cmoSqT7a5dyfVUyG8H1kQ6DgSYr8xeOnPwesfK+W20cEuzQlIAXT
cr7FRO2TGejgLJf2L3bZHTnU7I4BiDjzPq5+YVZDi6BmUNzlSDZtfWJce0SCMcuA
oXb64l0T+rM5j2Lx5YVpGIlvF4F3C/SRODpDrwUvOMIgyhKsUFLMQqgj8UoJ2HWX
TApsW25nDHL3toN2TkWqcNpvHbOdhN2eJp8B/5ipiBpHN4TpP4fSZKlINOptQf83
NZbMgH6izMtuRdYrXkhucZYKbTa+2X2pFShRZDWR4nQL2UUM26sm/c9wjfIYraJP
Lufe+RyaI0+b2eCTqltkH11lMBt5rugWMtF5ySzbqhb42K4bHYiqL43+XOGZ9UV5
l1dWwKHWfHCn7os8JJvEny2SS5IKyYKO9D3ftZB21ikN0yz1L2VgB2X6ZwEp7AFf
KogvLRK3zFu81WhURts+u+biumk0767F8yGUMJGPitmiBLDQ6FOlR9xAxs8Cavno
ITRapd7l84KGwQ==
=DXvc
-----END PGP SIGNATURE-----

Message #15 received at 915296@bugs.debian.org (full text, mbox, reply):

From: Andreas Henriksson <andreas@fatal.se>

To: 915296@bugs.debian.org

Subject: mpb-doc: /usr/share/doc/mpb/examples/Makefile* causes unreproducibility

Date: Thu, 3 Jan 2019 09:07:10 +0100

Hi,

Thanks for quickly fixing the reported issue.

Just wanted to also mention that to reach "fully reproducible" build,
the package still has problems in mpb-doc as the file shipped in
/usr/share/doc/mpb/examples/Makefile.gz embeds full path of build
directory and other issues.

It seems to me like the Makefiles (Makefile.am, Makefile.in and
Makefile.gz) aren't actually useful to ship in the binary package
(as EXTRA_DIST is the only content of Makefile.am it seems to be
only for upstreams purpose of marking which files should be included
in the tarball generation). I would thus suggest you simply
"rm -f usr/share/doc/mpb/examples/Makefile*" to make the package fully
reproducible.

Regards,
Andreas Henriksson

Send a report that this bug log contains spam.