Debian Bug report logs - #974957
dynare: reproducible builds: PDFs contain date of build

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: dynare: reproducible builds: PDFs contain date of build

Date: Mon, 16 Nov 2020 22:47:23 -0800

[Message part 1 (text/plain, inline)]

Source: dynare
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Several PDFs shipped in dynare packages embed the build date:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/dynare.html

  ./usr/share/doc/dynare/gsa.pdf.gz
  7 	October·29,·2020	7 	December·2,·2021


The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/


live well,
  vagrant

[0001-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]

From 0049faf101dad15076b360c7dfaba4c51f24f980 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 16 Nov 2020 23:42:45 +0000
Subject: [PATCH 1/2] debian/rules: Set FORCE_SOURCE_DATE=1 in order for
 texlive to respect SOURCE_DATE_EPOCH for reproducible timestamps.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 2977853..c77220d 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,9 @@ include /usr/share/octave/debian/defs.make
 include /usr/share/dpkg/pkg-info.mk
 export DEB_VERSION_UPSTREAM
 
+# Needed for texlive to respect SOURCE_DATE_EPOCH when setting date
+export FORCE_SOURCE_DATE=1
+
 %:
 	dh $@ --with sphinxdoc,elpa
 
-- 
2.29.2

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 974957-submitter@bugs.debian.org (full text, mbox, reply):

From: Sébastien Villemot <sebastien@debian.org>

To: 974957-submitter@bugs.debian.org

Subject: Bug#974957 marked as pending in dynare

Date: Wed, 25 Nov 2020 09:28:52 +0000

Control: tag -1 pending

Hello,

Bug #974957 in dynare reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/pkg-octave-team/dynare/-/commit/ec3d6128ce949f09675c28a30efec0f7fba0144f

------------------------------------------------------------------------
Make generated PDFs reproducible

Closes: #974957
Thanks: Vagrant Cascadian
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/974957

Message #15 received at 974957-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 974957-close@bugs.debian.org

Subject: Bug#974957: fixed in dynare 4.6.3-1

Date: Wed, 25 Nov 2020 09:48:25 +0000

Source: dynare
Source-Version: 4.6.3-1
Done: =?utf-8?q?S=C3=A9bastien_Villemot?= <sebastien@debian.org>

We believe that the bug you reported is fixed in the latest version of
dynare, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 974957@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sébastien Villemot <sebastien@debian.org> (supplier of updated dynare package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 25 Nov 2020 09:44:32 +0100
Source: dynare
Architecture: source
Version: 4.6.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Octave Group <team+pkg-octave-team@tracker.debian.org>
Changed-By: Sébastien Villemot <sebastien@debian.org>
Closes: 974957 974959
Changes:
 dynare (4.6.3-1) unstable; urgency=medium
 .
   * New upstream version 4.6.3
   * Bump S-V to 4.5.1
   * Make generated PDFs reproducible.
     Thanks to Vagrant Cascadian (Closes: #974957)
   * Remove auto-generated files which cause reproducibility issues.
     Thanks to Vagrant Cascadian (Closes: #974959)
Checksums-Sha1:
 a5dd1dd492631de48d9cae506bf9c0367e64e078 2680 dynare_4.6.3-1.dsc
 cfec58dc2d0e21fd549b8b405bda3fc1e9a84535 17286312 dynare_4.6.3.orig.tar.xz
 b8811126ea972784a5db6947843474c7add2cc5f 2292 dynare_4.6.3.orig.tar.xz.asc
 9d38ec57fa5385a413b701407d1e4489d8fa1216 57364 dynare_4.6.3-1.debian.tar.xz
 a77aefc65db49711da5dd1f1fa7d7aa13e9843ed 23966 dynare_4.6.3-1_amd64.buildinfo
Checksums-Sha256:
 e686fe94e6df23e6a588118c516e0e4d087f5b5f97d491bf1e9a6c065474bb8a 2680 dynare_4.6.3-1.dsc
 1e346fc70a8ab47cad115ecb7116d98c920b366069a2491170661c51664352fd 17286312 dynare_4.6.3.orig.tar.xz
 ff1968529adee0b1b6fcb1ff3310345a5e61d878d0b4552fe0cdb4ff05a6c445 2292 dynare_4.6.3.orig.tar.xz.asc
 b7b0b3477fd9b707efbae2a31a253d42c8a7e9cbe9c04fc356cee3395058c092 57364 dynare_4.6.3-1.debian.tar.xz
 10a50aca47962505b9805f5065a1ac60101e9f3213d0ee3481e8ab0aa19b6336 23966 dynare_4.6.3-1_amd64.buildinfo
Files:
 83a79d1e199d7af7545a3e4439a78189 2680 math optional dynare_4.6.3-1.dsc
 d683f9f15c8535f7124fdbbe0b0d6334 17286312 math optional dynare_4.6.3.orig.tar.xz
 930be29316c396f645b9ddcf82d146a0 2292 math optional dynare_4.6.3.orig.tar.xz.asc
 0e1c95c71f7187a7d943f53cd7a24648 57364 math optional dynare_4.6.3-1.debian.tar.xz
 12a18cd5de32ca16d9f27dbcd2e5b3b7 23966 math optional dynare_4.6.3-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=o3dS
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.