Debian Bug report logs - #973595
emscripten: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: emscripten: please make the build reproducible

Date: Mon, 02 Nov 2020 10:13:26 +0000

[Message part 1 (text/plain, inline)]

Source: emscripten
Version: 2.0.8~dfsg-6
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
emscripten could not be built reproducibly.

This is because it generates a switch/case statement using Python's
random functionality.

Patch attached that seeds this random component using the
SOURCE_DATE_EPOCH environment variable [1].

 [0] https://reproducible-builds.org/
 [1] https://reproducible-builds.org/specs/source-date-epoch/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[emscripten.diff.txt (text/plain, attachment)]

Message #10 received at 973595@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: 973595@bugs.debian.org

Subject: Re: emscripten: please make the build reproducible

Date: Mon, 02 Nov 2020 10:29:55 +0000

forwarded 973595 https://github.com/emscripten-core/emscripten/pull/12679
thanks

I've forwarded this upstream here:

  https://github.com/emscripten-core/emscripten/pull/12679


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

Message #17 received at 973595-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 973595-close@bugs.debian.org

Subject: Bug#973595: fixed in emscripten 2.0.8~dfsg1-1

Date: Mon, 02 Nov 2020 15:48:31 +0000

Source: emscripten
Source-Version: 2.0.8~dfsg1-1
Done: Jonas Smedegaard <dr@jones.dk>

We believe that the bug you reported is fixed in the latest version of
emscripten, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 973595@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jonas Smedegaard <dr@jones.dk> (supplier of updated emscripten package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 02 Nov 2020 16:36:23 +0100
Source: emscripten
Architecture: source
Version: 2.0.8~dfsg1-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org>
Changed-By: Jonas Smedegaard <dr@jones.dk>
Closes: 973595
Changes:
 emscripten (2.0.8~dfsg1-1) experimental; urgency=medium
 .
   * repackage source tarball:
     + avoid convenience code copies:
       - python module ply (packaged separately)
       - Java Native Interface forked with added emjvm.js
         (seemingly unused)
   * drop obsolete lintian overrides
   * build-depend on and suggest python3-ply,
     and document its use in long description
   * update patches 1001 2003 for omitted source files
   * add patch 2009 to use system-shared closure-compiler
   * add patch 1005 to make build reproducible;
     closes: bug#973595, thanks to Chris Lamb
   * avoid checking tests requiring closure-compiler
   * copyright: tighten coverage of musl
   * adjust build routines for omitted source files
Checksums-Sha1:
 440a3f91660ee18ea6d208eedd67ad0a6a74ed5e 2497 emscripten_2.0.8~dfsg1-1.dsc
 3247b987333f8c52791f330532877e08c16261e6 17779680 emscripten_2.0.8~dfsg1.orig.tar.xz
 a1d3b84552377bf42cc5c8b33021b4a451973583 81656 emscripten_2.0.8~dfsg1-1.debian.tar.xz
 db5e952bcf239c1cafec68ec0babb44229e7cd29 13851 emscripten_2.0.8~dfsg1-1_amd64.buildinfo
Checksums-Sha256:
 27e4f0a10faa09f46d9772bd8d29e49b650c9c91188e87ff55af4c66d4b3fb78 2497 emscripten_2.0.8~dfsg1-1.dsc
 e9f75bd5ba2f51b5e40db1e5aeaae708f129d03a98ac575246d837e392ddba75 17779680 emscripten_2.0.8~dfsg1.orig.tar.xz
 030795d0f8363865f6a6ba6686c0e3a7c46543b3b5ed52d0dad31da5b4279eb8 81656 emscripten_2.0.8~dfsg1-1.debian.tar.xz
 a20d447eaf411e920f61349e1e0c2db960a491b688e0541325043a6c134f01ec 13851 emscripten_2.0.8~dfsg1-1_amd64.buildinfo
Files:
 9767f75a876ac2c0913ffc3fa38494b6 2497 devel optional emscripten_2.0.8~dfsg1-1.dsc
 3cdaf2f25272724c0f33e1d4fdb130f1 17779680 devel optional emscripten_2.0.8~dfsg1.orig.tar.xz
 18ff51f5f0cbcf8e107c5ca3be860dcb 81656 devel optional emscripten_2.0.8~dfsg1-1.debian.tar.xz
 edd773c01589c8de0cff07ffb20f3dfd 13851 devel optional emscripten_2.0.8~dfsg1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAl+gKNAACgkQLHwxRsGg
ASFEYg/8D65dBbGF1YmsAC7XWnxvazn0DLKofUyYPG71zcjuwW+9jYagUBDdM15C
v+WigJ4kVrx/rM2on+m0xkWKC/Q2E4/WUTmELidfpMfy22lgwxsuwPsMIk6PVZ13
KJ6neWdmebcXWZyzt8AnetKutS7uCsFW2HzKM0gJhwfQqW+txKyAj1gHWV0ulig7
AY3uQ3RTpFqPyrrENu7ByL1AZaLfDnQzZSxOvjF7k0UPyZ+1NyeY4M4wqqTOm2BY
/0TQg20Xqh+0HcFNp+HfPmkPudg06eT+Z88Qd8zum34xSjdYJcoGaM1E4lACAj/h
4AcexFi8WN3A2RS3jNfQvneiH2CWs81zHPPRWFYXx3zi3BtRfALZx+xwt6KCfQ7h
SgFb7I5u1+gf2O5PYIokYx0oE2yqr/bhidlL08S4wU1d6eXtu6zh6/lvk8zEJ13f
ucvC6Gfv6CxQ0kOyUvV0qKp596IoeNlbVzHmulGGukTY2CzRvOpEVnSnYNFSWV8x
py0/caZ7InF1IPwLfbxJzeFSyfEScC8EQ4Fr4qw4llIi8NtyM/rYvye+m/h04m+f
q6QLxzx2DQj9KWaIriw2Kvre8RVYcex1M4DdEabr7BxThjD/VevrkWyUr8eOID9v
iqYBLDIIPuTQQhZ1Z6OLXEuacrmyhctPhHkGS6ec9ZJrtLRUQso=
=IeIB
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.