Debian Bug report logs - #976348
debian-faq: reproducible builds: Embedded timestamps in PDF files

version graph

Package: src:debian-faq; Maintainer for src:debian-faq is Javier Fernandez-Sanguino Peña <jfs@debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Thu, 3 Dec 2020 19:27:01 UTC

Severity: normal

Tags: patch

Fixed in version debian-faq/11.0

Done: Dr. Tobias Quathamer <toddy@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Javier Fernandez-Sanguino Peña <jfs@debian.org>:
Bug#976348; Package src:debian-faq. (Thu, 03 Dec 2020 19:27:04 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Javier Fernandez-Sanguino Peña <jfs@debian.org>. (Thu, 03 Dec 2020 19:27:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: debian-faq: reproducible builds: Embedded timestamps in PDF files
Date: Thu, 03 Dec 2020 11:24:55 -0800
[Message part 1 (text/plain, inline)]
Source: debian-faq
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Several PDFs shipped in various debian-faq packages embed the build date:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/debian-faq.html
  
  /usr/share/doc/debian/FAQ/debian-faq.de.pdf.gz
  2 	5.·Januar·2022          2 	3.·Dezember·2020

The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

live well,
  vagrant

[0001-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]
From 7176b957c5e7d3adaa539ac9f9eb70285ad7ccea Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Thu, 3 Dec 2020 19:20:06 +0000
Subject: [PATCH] debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to
 respect SOURCE_DATE_EPOCH for reproducible timestamps.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 64bb6b8..f3f359d 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,8 @@
 #!/usr/bin/make -f
 
+# Needed for texlive to respect SOURCE_DATE_EPOCH when setting date
+export FORCE_SOURCE_DATE=1
+
 %:
 	dh $@
 
-- 
2.29.2

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Javier Fernandez-Sanguino Peña <jfs@debian.org>:
Bug#976348; Package src:debian-faq. (Thu, 10 Dec 2020 02:12:03 GMT) (full text, mbox, link).


Acknowledgement sent to Joost van Baal-Ilić <joostvb@debian.org>:
Extra info received and forwarded to list. Copy sent to Javier Fernandez-Sanguino Peña <jfs@debian.org>. (Thu, 10 Dec 2020 02:12:03 GMT) (full text, mbox, link).


Message #10 received at 976348@bugs.debian.org (full text, mbox, reply):

From: Joost van Baal-Ilić <joostvb@debian.org>
To: Vagrant Cascadian <vagrant@reproducible-builds.org>, 976348@bugs.debian.org
Subject: Re: Bug#976348: debian-faq: reproducible builds: Embedded timestamps in PDF files
Date: Thu, 10 Dec 2020 03:01:09 +0100
Hi Vagrant,

Thanks a lot, just commited.

Bye,

Joost




Information forwarded to debian-bugs-dist@lists.debian.org, Javier Fernandez-Sanguino Peña <jfs@debian.org>:
Bug#976348; Package src:debian-faq. (Sun, 31 Oct 2021 06:03:04 GMT) (full text, mbox, link).


Acknowledgement sent to Osamu Aoki <osamu@debian.org>:
Extra info received and forwarded to list. Copy sent to Javier Fernandez-Sanguino Peña <jfs@debian.org>. (Sun, 31 Oct 2021 06:03:04 GMT) (full text, mbox, link).


Message #15 received at 976348@bugs.debian.org (full text, mbox, reply):

From: Osamu Aoki <osamu@debian.org>
To: 976348@bugs.debian.org
Subject: reproduceble build
Date: Sun, 31 Oct 2021 15:01:09 +0900
Control: tags -1 pending




Added tag(s) pending. Request was from Osamu Aoki <osamu@debian.org> to 976348-submit@bugs.debian.org. (Sun, 31 Oct 2021 06:03:05 GMT) (full text, mbox, link).


Reply sent to toddy@debian.org (Dr. Tobias Quathamer):
You have taken responsibility. (Tue, 05 Apr 2022 17:21:05 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Tue, 05 Apr 2022 17:21:05 GMT) (full text, mbox, link).


Message #22 received at 976348-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 976348-close@bugs.debian.org
Subject: Bug#976348: fixed in debian-faq 11.0
Date: Tue, 05 Apr 2022 17:19:05 +0000
Source: debian-faq
Source-Version: 11.0
Done: Dr. Tobias Quathamer <toddy@debian.org>

We believe that the bug you reported is fixed in the latest version of
debian-faq, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 976348@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Dr. Tobias Quathamer <toddy@debian.org> (supplier of updated debian-faq package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 23 Nov 2021 22:56:49 +0100
Source: debian-faq
Binary: debian-faq debian-faq-de debian-faq-fr debian-faq-it debian-faq-ja debian-faq-ko debian-faq-nl debian-faq-pt debian-faq-ru debian-faq-zh-cn
Architecture: source all
Version: 11.0
Distribution: unstable
Urgency: medium
Maintainer: Javier Fernandez-Sanguino Peña <jfs@debian.org>
Changed-By: Dr. Tobias Quathamer <toddy@debian.org>
Description:
 debian-faq - Debian Frequently Asked Questions
 debian-faq-de - Debian Frequently Asked Questions, in German
 debian-faq-fr - Debian Frequently Asked Questions, in French
 debian-faq-it - Debian Frequently Asked Questions, in Italian
 debian-faq-ja - Debian Frequently Asked Questions, in Japanese
 debian-faq-ko - Debian Frequently Asked Questions, in Korean
 debian-faq-nl - Debian Frequently Asked Questions, in Dutch
 debian-faq-pt - Debian Frequently Asked Questions, in Portuguese
 debian-faq-ru - Debian Frequently Asked Questions, in Russian
 debian-faq-zh-cn - Debian Frequently Asked Questions, in Simplified Chinese
Closes: 956647 976348 982823
Changes:
 debian-faq (11.0) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Sebul ]
   * 2021-10: ko/*.po: Add new translation into Korean.
 .
   [ Américo Monteiro ]
   * 2021-10: pt/*.po: Add new (partly) translation into Portuguese.
     Closes: #982823
 .
   [ Wenbin Lv ]
   * 2021-08, 2021-09, 2021-10: zh-cn/*po: update/add Chinese translation.
 .
   [ Frans Spiesschaert ]
   * Dutch translation update.
 .
   [ Joost van Baal-Ilić ]
   * debian/rules: apply patch contributed by Vagrant Cascadian: "Set
     FORCE_SOURCE_DATE=1 in order for texlive to respect SOURCE_DATE_EPOCH
     for reproducible timestamps" in PDF files. Closes: #976348
   * Enable new Korean and Portuguese translations:
     - debian-faq-{ko,pt}.{doc-base,install}: added
     - debian/control: add new debian-faq-ko and debian-faq-pt binary packages
 .
   [ Holger Wansing ]
   * Get rid of mentions of FTP, since Debian has shut down their FTP services.
   * Remove FFIS from the document (no longer active).
   * Get rid of Build-Depends-Indep: xmlroff (no more in effective use).
     Closes: #956647
   * Remove mention of 'laptop' task (has been deleted from the installer).
 .
   [ Dr. Tobias Quathamer ]
   * Update data for bullseye
   * Use debhelper v13
   * Update Standards-Version to 4.6.0, no changes needed
   * German translation update.
 .
   [ Boyuan Yang ]
   * en/customizing.dbk: Correctly point out the system service that handles
     /etc/rc.local file (/lib/systemd/system/rc-local.service instead of
     /lib/systemd/rc.local.service).
Checksums-Sha1:
 93ac65e85f3f7e307c75ce778f2af8c7adb7ce07 2424 debian-faq_11.0.dsc
 14e16639965caa7559c4f66ba71c9ce5fddb5d88 734212 debian-faq_11.0.tar.xz
 4a7d8c54daa4f05bf82724ef92ff4e86319cebd1 570712 debian-faq-de_11.0_all.deb
 891d441e088ddd39af541adcd2012cf1c071be1f 559208 debian-faq-fr_11.0_all.deb
 0ebb78efaac54fa23a9d7175ec0e9ed9d9533676 548060 debian-faq-it_11.0_all.deb
 b29b071f8a4aec48e83924aed4c52a74e7e20870 183252 debian-faq-ja_11.0_all.deb
 0b66d52bf3b0d10b534bd21a76e9d5f4ca2dd6fd 177120 debian-faq-ko_11.0_all.deb
 fff05d444853157f1510ef7a0b2aa77947286f7d 564680 debian-faq-nl_11.0_all.deb
 ca9da5dd7187c0d5a7a1c2d79f385cda98cda83d 546392 debian-faq-pt_11.0_all.deb
 7de4ac74449ce3095f09dbd21d78ae996386ee3e 625452 debian-faq-ru_11.0_all.deb
 c83fa7578c92021f8d4423ad05d21712dcb6f284 174876 debian-faq-zh-cn_11.0_all.deb
 70299b0a6e9c70f0cc3453e9e78d270a5d487183 97883 debian-faq.en.html.tar.gz
 1395307235080d9976518c80cfd6bdecaa693d41 365583 debian-faq.en.pdf.gz
 091d81170d1504430f7700f5d3adb59bdb3ca8fc 58333 debian-faq.en.txt.gz
 4b2db1f2b206e51f52f0f7428a77f4404609adb5 528092 debian-faq_11.0_all.deb
 5a5bead2aab2d7bfa8f4f88c4fb5255345974e5b 14368 debian-faq_11.0_amd64.buildinfo
Checksums-Sha256:
 5c4cda0bb04f2ca1c5fa2559363afcdaca98cfd33ee96eb1756800b26132b331 2424 debian-faq_11.0.dsc
 782a16a78d6f718e572f726ff57a7f3e76874f80712a45f75b87eababbc6c923 734212 debian-faq_11.0.tar.xz
 9cbbdd2cf5966f2bc492a5d5e38c72a8977f051e3386d54a3b87768e400ee803 570712 debian-faq-de_11.0_all.deb
 9578b23307c9dbdcd1045ed1f769bd58927c05c5337d8b5d1fbd4e646ac11c0f 559208 debian-faq-fr_11.0_all.deb
 46d5fa02f58709bf4aa7617d45f733e7fd500009330dc81c95e5acdf7b8d3bd3 548060 debian-faq-it_11.0_all.deb
 05ea43ce6f3fe28d86f31843414c2e67b374621c2e45a890614094c3d182ae04 183252 debian-faq-ja_11.0_all.deb
 82ff4044c6fadd535c5ad35854999ce82bd6a4616c983a8e3ebbeb21785dfc9d 177120 debian-faq-ko_11.0_all.deb
 48906a3239074d4f7e1669bee1229accc85750499eeb099d70d73c0d4fa27490 564680 debian-faq-nl_11.0_all.deb
 93d677f00e5441472183a900eae5e517797ae2b7ad3c8b8caad854b90be517f6 546392 debian-faq-pt_11.0_all.deb
 519ef48892a0d141e51e3d40ec6216cb49c536fa4579f81b2a2d7d8346f16635 625452 debian-faq-ru_11.0_all.deb
 0ccdcdbc46e8073ef9110705769a7416952d69ceb864e710fcd746d1bf93c149 174876 debian-faq-zh-cn_11.0_all.deb
 94898a8391d3b7051a462b281de7dec0e5a3743802ac2ef7cd4e9d46a54ff406 97883 debian-faq.en.html.tar.gz
 d20b90e577a051eb7b2f96a7ebb682c803f2e9ce16fb7381d7340a544a1c83c6 365583 debian-faq.en.pdf.gz
 e2a22b6f8e2d6cd453514d7f8f3e5dde36e839560cd2d453a9c778cb23c83ab1 58333 debian-faq.en.txt.gz
 4818a67849a64f0204355559b0ccd4c8c4f1fb188641136feb36f9d71d4692bc 528092 debian-faq_11.0_all.deb
 8129b47d9929bf92b03b5de13646258cc9f5d74a77f22321c67cd106bedb63d0 14368 debian-faq_11.0_amd64.buildinfo
Files:
 a828724fbebab355f04d729f104c886b 2424 doc standard debian-faq_11.0.dsc
 67de7e79292cc64db413a567a4e4bdcf 734212 doc standard debian-faq_11.0.tar.xz
 6b75ccf6e077276ec6e4372548f68bf0 570712 doc optional debian-faq-de_11.0_all.deb
 73385262a8376cbfaad098069d3d8a75 559208 doc optional debian-faq-fr_11.0_all.deb
 f27f0438174f7352e56dcb5c2b34e356 548060 doc optional debian-faq-it_11.0_all.deb
 64cf8a8108ec4033fc594e69a2ea85ad 183252 doc optional debian-faq-ja_11.0_all.deb
 7056be750aa0feca2cf7575ed3cbdf50 177120 doc optional debian-faq-ko_11.0_all.deb
 d2f0b570d33e6408f0a46b0f35226c4d 564680 doc optional debian-faq-nl_11.0_all.deb
 fdeb633599d9a35ab2f29f1a6f83aad7 546392 doc optional debian-faq-pt_11.0_all.deb
 962edb4803c77adea37c72cef27d5809 625452 doc optional debian-faq-ru_11.0_all.deb
 bd44b6d674c0b6dbeff6d9861ffdac61 174876 doc optional debian-faq-zh-cn_11.0_all.deb
 54865037a8f989ba36909a414a269303 97883 byhand - debian-faq.en.html.tar.gz
 0992ff3bc2e6601834fe52132eec15ca 365583 byhand - debian-faq.en.pdf.gz
 659d4d50e1d1352b7a5a2208bd5242ac 58333 byhand - debian-faq.en.txt.gz
 2182561bea68b63c4fac7af5eaea0933 528092 doc standard debian-faq_11.0_all.deb
 d147b4f42c9196bde22997b602545e94 14368 doc standard debian-faq_11.0_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEE0cuPObxd7STF0seMEwLx8Dbr6xkFAmGdZW8ACgkQEwLx8Dbr
6xmm4A//fJdHIRgrNZmilTl7tRlcMTql2ec9WeR9sL03YJfpWgjA+8H4Iuged5hk
IRM2jN1fcpkRUBB8qkKNdb2ao8aKl0dROFSFmvuTmg0oUi4/osVm8HTVCJWvHS09
tAhyLvA3PqEAl6hu5HUCAcHEGLnhtRyMxC5lEc5Ahp9oIrVLer8iZ0a3uyQz+bih
SESz0rfoTCMx8k4Yoze1BYKYYC+wv99gTGcidJuBJAVNX/KguYRzjyOR9u09dntZ
PBztmfPXpp+YgjI12J0OvtnKCmc1kCp5DOj4ktBGy0mlGRf6aHU985EC46G+8x3z
mBMcCxCYeIRGw8gMGY8Cfn8z6U4LjBAy+g/5Pl4T65z8Rw8owlmvjEUGTo9PEDgl
kORq4PiGMkqr3IaPMCei/J4r0014u6CcfGuO8c4+l4gjBAtBeD7pxQQQ/gDeIjdy
TTWzJBOP+uQ9/+lJx+l46oTWIVil2qarvzqnpluqeFNiHS2HkEPh2M3Mjm1hNkNO
sNYauDk5MJgmn/Ddf59jmMlnJgv4Vsj9cTihhseYmtIgij53ggp0OQhBdbzuPlaI
9I7srbPkpwpo7r0QBzhqgNMbEiP2KKIA1EUGk/pz6X0skTUKpXDqm61uqm+0VN9s
Fx6AKgjim+LzPW2wICzgt0z1vOwXp7yDvLhkMB9ryCesPjRg8tA=
=iTYy
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 03 Jul 2022 07:26:45 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 12:49:42 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.