Debian Bug report logs - #935846
musescore-snapshot: please make the build reproducible

version graph

Package: src:musescore-snapshot; Maintainer for src:musescore-snapshot is Thorsten Glaser <tg@mirbsd.de>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Mon, 26 Aug 2019 20:03:02 UTC

Severity: wishlist

Tags: patch

Found in version musescore-snapshot/3.2.s20190704+dfsg1-1

Done: Thorsten Glaser <tg@mirbsd.de>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Thorsten Glaser <tg@mirbsd.de>:
Bug#935846; Package src:musescore-snapshot. (Mon, 26 Aug 2019 20:03:05 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Thorsten Glaser <tg@mirbsd.de>. (Mon, 26 Aug 2019 20:03:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: musescore-snapshot: please make the build reproducible
Date: Mon, 26 Aug 2019 21:01:36 +0100
[Message part 1 (text/plain, inline)]
Source: musescore-snapshot
Version: 3.2.s20190704+dfsg1-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: umask
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed
that musescore-snapshot could not be built reproducibly.

This is because it generated a zip file without normalising the
umask(2):

│ │ │ ├── ./usr/share/mscore-snapshot-3.2/workspaces/Advanced.workspace
│ │ │ │ ├── zipinfo /dev/stdin
│ │ │ │ │ @@ -1,4 +1,4 @@
│ │ │ │ │  Zip file size: 9607 bytes, number of entries: 2
│ │ │ │ │ --rw-r--r--  2.0 unx      134 bX defN 19-Jul-04 23:02 META-INF/container.xml
│ │ │ │ │ --rw-r--r--  2.0 unx   136628 bX defN 19-Jul-04 23:02 Advanced.xml
│ │ │ │ │ +-rw-rw-r--  2.0 unx      134 bX defN 19-Jul-04 23:02 META-INF/container.xml
│ │ │ │ │ +-rw-rw-r--  2.0 unx   136628 bX defN 19-Jul-04 23:02 Advanced.xml
│ │ │ │ │  2 files, 136762 bytes uncompressed, 9205 bytes compressed:  93.3%
│ │ │ ├── ./usr/share/mscore-snapshot-3.2/workspaces/Basic.workspace
│ │ │ │ ├── zipinfo /dev/stdin
│ │ │ │ │ @@ -1,4 +1,4 @@
│ │ │ │ │  Zip file size: 3477 bytes, number of entries: 2
│ │ │ │ │ --rw-r--r--  2.0 unx      131 bX defN 19-Jul-04 23:02 META-INF/container.xml
│ │ │ │ │ --rw-r--r--  2.0 unx    26328 bX defN 19-Jul-04 23:02 Basic.xml
│ │ │ │ │ +-rw-rw-r--  2.0 unx      131 bX defN 19-Jul-04 23:02 META-INF/container.xml
│ │ │ │ │ +-rw-rw-r--  2.0 unx    26328 bX defN 19-Jul-04 23:02 Basic.xml
│ │ │ │ │  2 files, 26459 bytes uncompressed, 3081 bytes compressed:  88.4%


Patch attached.

  [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[musescore-snapshot.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#935846; Package src:musescore-snapshot. (Mon, 26 Aug 2019 21:12:03 GMT) (full text, mbox, link).


Acknowledgement sent to Thorsten Glaser <tg@mirbsd.de>:
Extra info received and forwarded to list. (Mon, 26 Aug 2019 21:12:03 GMT) (full text, mbox, link).


Message #10 received at 935846@bugs.debian.org (full text, mbox, reply):

From: Thorsten Glaser <tg@mirbsd.de>
To: Chris Lamb <lamby@debian.org>, 935846@bugs.debian.org
Cc: reproducible-builds@lists.alioth.debian.org
Subject: Re: Bug#935846: musescore-snapshot: please make the build reproducible
Date: Mon, 26 Aug 2019 21:06:24 +0000 (UTC)
tags 935846 - patch
tags 935846 + confirmed
affects 935846 src:musescore
thanks

Hi Chris,

>This is because it generated a zip file without normalising the
>umask(2):

I know, src:musescore has the same problem, it will be addressed
in the next upload, as I don’t know what upstream will do yet.

>Patch attached.

That patch won’t work, cmake tar has no --long-options suitable
for what you’re trying to do. I’ve committed 56fe1387 as my
attempt at solving it in the packaging, for now, but haven’t
gotten around to testing it yet.

bye,
//mirabilos
-- 
„Cool, /usr/share/doc/mksh/examples/uhr.gz ist ja ein Grund,
mksh auf jedem System zu installieren.“
	-- XTaran auf der OpenRheinRuhr, ganz begeistert
(EN: “[…]uhr.gz is a reason to install mksh on every system.”)



Information forwarded to debian-bugs-dist@lists.debian.org, Thorsten Glaser <tg@mirbsd.de>:
Bug#935846; Package src:musescore-snapshot. (Tue, 27 Aug 2019 07:39:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Thorsten Glaser <tg@mirbsd.de>. (Tue, 27 Aug 2019 07:39:04 GMT) (full text, mbox, link).


Message #15 received at 935846@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: "Thorsten Glaser" <tg@mirbsd.de>, 935846@bugs.debian.org
Cc: "Reproducible builds folks" <reproducible-builds@lists.alioth.debian.org>
Subject: Re: Bug#935846: musescore-snapshot: please make the build reproducible
Date: Tue, 27 Aug 2019 08:36:57 +0100
Hi Thorsten,

> That patch won’t work, cmake tar has no --long-options suitable
> for what you’re trying to do.

Huh, it appeared to work for me so I wonder what was wrong with my
testcase. Anyway, I defer to thee. :)

> I’ve committed 56fe1387 as my attempt at solving it in the
> packaging for now

To potentially save others a few moments also finding a link, this is:

  https://evolvis.org/plugins/scmgit/cgi-bin/gitweb.cgi?p=alioth/musescore.git;a=commitdiff;h=56fe1387



Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-



Information forwarded to debian-bugs-dist@lists.debian.org:
Bug#935846; Package src:musescore-snapshot. (Tue, 27 Aug 2019 17:03:03 GMT) (full text, mbox, link).


Acknowledgement sent to Thorsten Glaser <tg@mirbsd.de>:
Extra info received and forwarded to list. (Tue, 27 Aug 2019 17:03:03 GMT) (full text, mbox, link).


Message #20 received at 935846@bugs.debian.org (full text, mbox, reply):

From: Thorsten Glaser <tg@mirbsd.de>
To: Chris Lamb <lamby@debian.org>
Cc: 935846@bugs.debian.org, Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>
Subject: Re: Bug#935846: musescore-snapshot: please make the build reproducible
Date: Tue, 27 Aug 2019 16:52:29 +0000 (UTC)
Hi Chris,

>Huh, it appeared to work for me so I wonder what was wrong with my
>testcase. Anyway, I defer to thee. :)

oh, interesting… I’ve been told that cmake has a tar builtin,
which doesn’t do these options… perhaps it calls out to the
system-wide tar if one exists (in which case the patch is not
upstreamable).

I’ll have a look when I have the time.

Thanks,
//mirabilos
-- 
<diogenese> Beware of ritual lest you forget the meaning behind it.
<igli> yeah but it means if you really care about something, don't
    ritualise it, or you will lose it. don't fetishise it, don't
    obsess. or you'll forget why you love it in the first place.



Information forwarded to debian-bugs-dist@lists.debian.org, Thorsten Glaser <tg@mirbsd.de>:
Bug#935846; Package src:musescore-snapshot. (Tue, 27 Aug 2019 19:51:06 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Thorsten Glaser <tg@mirbsd.de>. (Tue, 27 Aug 2019 19:51:06 GMT) (full text, mbox, link).


Message #25 received at 935846@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: "Thorsten Glaser" <tg@mirbsd.de>
Cc: 935846@bugs.debian.org, "Reproducible builds folks" <reproducible-builds@lists.alioth.debian.org>
Subject: Re: Bug#935846: musescore-snapshot: please make the build reproducible
Date: Tue, 27 Aug 2019 20:50:01 +0100
Hi Thorsten,

> >Huh, it appeared to work for me so I wonder what was wrong with my
> >testcase. Anyway, I defer to thee. :)
> 
> oh, interesting… I’ve been told that cmake has a tar builtin,
> which doesn’t do these options…

Ahh, I see:

  http://manpages.ubuntu.com/manpages/xenial/man1/cmake.1.html#command-line%20tool%20mode

> perhaps it calls out to the system-wide tar if one exists

Seems unlikely, alas. :(


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org 🍥 chris-lamb.co.uk
       `-



Added blocking bug(s) of 935846: 944691 Request was from Thorsten Glaser <tg@mirbsd.de> to control@bugs.debian.org. (Wed, 13 Nov 2019 21:24:03 GMT) (full text, mbox, link).


Marked Bug as done Request was from Thorsten Glaser <tg@mirbsd.de> to control@bugs.debian.org. (Sat, 08 Feb 2020 17:15:03 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Sat, 08 Feb 2020 17:15:04 GMT) (full text, mbox, link).


Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 08 Mar 2020 07:32:51 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 09:42:45 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.