Debian Bug report logs - #975046
open-iscsi: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: open-iscsi: please make the build reproducible

Date: Wed, 18 Nov 2020 10:39:01 +0000

[Message part 1 (text/plain, inline)]

Source: open-iscsi
Version: 2.1.2-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
open-iscsi could not be built reproducibly.

This is because the libopeniscsiusr/docs/kernel-doc script adds a
timestamp to the generated manpages. This script supports the
KBUILD_BUILD_TIMESTAMP environment variable though which is similar
to SOURCE_DATE_EPOCH but it supports any format that GNU date
will accept, even stuff like 'today + 4 days'.

Patch attached. Note the prefix '@' to '$(SOURCE_DATE_EPOCH)' so GNU
date interprets as a number of seconds though.

An alternative approach would be to ask upstream to move to
SOURCE_DATE_EPOCH, but it seems like KBUILD_BUILD_TIMESTAMP is used
elsewhere so I don't know the ramifications of this within the Kernel
ecosystem.


 [0] https://reproducible-builds.org/


Regards,

--
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[open-iscsi.diff.txt (text/plain, attachment)]

Message #10 received at 975046-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 975046-close@bugs.debian.org

Subject: Bug#975046: fixed in open-iscsi 2.1.3-1

Date: Thu, 24 Dec 2020 00:34:58 +0000

Source: open-iscsi
Source-Version: 2.1.3-1
Done: Chris Hofstaedtler <zeha@debian.org>

We believe that the bug you reported is fixed in the latest version of
open-iscsi, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 975046@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Chris Hofstaedtler <zeha@debian.org> (supplier of updated open-iscsi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 24 Dec 2020 00:09:46 +0000
Source: open-iscsi
Architecture: source
Version: 2.1.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian iSCSI Maintainers <open-iscsi@packages.debian.org>
Changed-By: Chris Hofstaedtler <zeha@debian.org>
Closes: 941099 975046
Changes:
 open-iscsi (2.1.3-1) unstable; urgency=medium
 .
   * [afee47d] New upstream version 2.1.3
     - Fixes CVE-2020-13987, CVE-2020-17437, CVE-2020-13988.
   * [236761e] Mark open-iscsi, iscsiuio M-A: foreign (Closes: #941099)
   * [3e25b6a] d/README.source: remove obsolete get-orig-source note
   * [296cd55] Explicitly set build date for docs.
     Thanks to Chris Lamb <lamby@debian.org> (Closes: #975046)
Checksums-Sha1:
 a7cc3576c2104b9a44aae135a435dfc27690750f 2578 open-iscsi_2.1.3-1.dsc
 19aa834f5a6033fd0e53d4e32a8f28c4a3d5ec58 619746 open-iscsi_2.1.3.orig.tar.gz
 414acf498df741825099e02dacfb0598661a87f9 50748 open-iscsi_2.1.3-1.debian.tar.xz
 e96a3c25bfda8f7fd5440693e530bf5828f8bde7 5912 open-iscsi_2.1.3-1_source.buildinfo
Checksums-Sha256:
 a6b89a9fc171b08d8cae394d49cd1a7233ec78ecbf91d46c63ec80c5166f54ed 2578 open-iscsi_2.1.3-1.dsc
 5410474b23552016220d04aa181903cb50ae988f29e99cb03f3e2de86a109be4 619746 open-iscsi_2.1.3.orig.tar.gz
 3f24066877367de92022bd51f94dda4664d315310b97a324f517055652dd7f7c 50748 open-iscsi_2.1.3-1.debian.tar.xz
 25929adc7d914780b173ef5681f7266b2060237be0c0bebe6f7d98cc75a328a7 5912 open-iscsi_2.1.3-1_source.buildinfo
Files:
 cc649edab553eb381d34358ec4b48cb9 2578 net optional open-iscsi_2.1.3-1.dsc
 b0bcc6a6658a3862bba66274ca973346 619746 net optional open-iscsi_2.1.3.orig.tar.gz
 dc82c0f263321cfde0fa088d4407278c 50748 net optional open-iscsi_2.1.3-1.debian.tar.xz
 ec4239845b64753a2bd03bb97dd8897f 5912 net optional open-iscsi_2.1.3-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=nQx6
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.