Debian Bug report logs - #976359
debian-history: reproducible builds: Embedded timestamps in various documentation files

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: debian-history: reproducible builds: Embedded timestamps in various documentation files

Date: Thu, 03 Dec 2020 15:07:19 -0800

[Message part 1 (text/plain, inline)]

Source: debian-history
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Several .pdf, .html, .txt and .epub files shipped in debian-history
embed the build date:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/debian-history.html

  /usr/share/doc/debian-history/docs/project-history.es.pdf
  40 	11·de·diciembre     40 	9·de·noviembre
  41 	de·2021             41 	de·2020

The two attached patches fix these issues, one by setting PUBDATE to use
UTC in debian/rules, and the other by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

These patches unfortunately do not fix all reproducibility issues in
debian-history; There are randomized bookid identifiers in the .epub
files I have not yet figured out how to fix, but will make it a little
easier to debug the remaining issues once the patches are applied.


live well,
  vagrant

[0001-debian-rules-Use-UTC-for-PUBDATE.patch (text/x-diff, inline)]

From bbbb34abded4cd0e9206eef2ac9cd0215a0ed5d1 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@debian.org>
Date: Thu, 3 Dec 2020 14:06:34 -0800
Subject: [PATCH 1/2] debian/rules: Use UTC for PUBDATE.

Without this, the timezone of the system can result in unreproducible
builds.

  https://reproducible-builds.org/docs/timezones/
---
 debian/rules | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 2cdebb8..b4e2c2a 100755
--- a/debian/rules
+++ b/debian/rules
@@ -8,7 +8,7 @@ include /usr/share/dpkg/pkg-info.mk
 # version of this Debian package (debian/changelog)
 PUBVERSION := $(DEB_VERSION)
 # short date of this Debian package (debian/changelog)
-PUBDATE := $(shell { date +'%Y-%m-%d' -d"@$(SOURCE_DATE_EPOCH)" ; })
+PUBDATE := $(shell { date +'%Y-%m-%d' --utc -d"@$(SOURCE_DATE_EPOCH)" ; })
 
 export PUBVERSION
 export PUBDATE
-- 
2.20.1

[0002-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]

From 33f260b5e63dbad4886c79616b48c415a4b292cb Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@debian.org>
Date: Thu, 3 Dec 2020 14:09:53 -0800
Subject: [PATCH 2/2] debian/rules: Set FORCE_SOURCE_DATE=1 in order for
 texlive to respect SOURCE_DATE_EPOCH for reproducible timestamps.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/debian/rules b/debian/rules
index b4e2c2a..92d5d65 100755
--- a/debian/rules
+++ b/debian/rules
@@ -12,6 +12,8 @@ PUBDATE := $(shell { date +'%Y-%m-%d' --utc -d"@$(SOURCE_DATE_EPOCH)" ; })
 
 export PUBVERSION
 export PUBDATE
+# Needed for texlive to respect SOURCE_DATE_EPOCH when setting date
+export FORCE_SOURCE_DATE=1
 
 ## ----------------------------------------------------------------------
 ## uncomment this to turn on verbose mode
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Message #12 received at 976359-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 976359-close@bugs.debian.org

Subject: Bug#976359: fixed in debian-history 2.26

Date: Tue, 26 Oct 2021 05:48:26 +0000

Source: debian-history
Source-Version: 2.26
Done: Bdale Garbee <bdale@gag.com>

We believe that the bug you reported is fixed in the latest version of
debian-history, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 976359@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bdale Garbee <bdale@gag.com> (supplier of updated debian-history package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 25 Oct 2021 22:23:14 -0600
Source: debian-history
Architecture: source
Version: 2.26
Distribution: unstable
Urgency: medium
Maintainer: Bdale Garbee <bdale@gag.com>
Changed-By: Bdale Garbee <bdale@gag.com>
Closes: 962436 976359
Changes:
 debian-history (2.26) unstable; urgency=medium
 .
   [ Bdale Garbee ]
   * apply patch from Vagrant Cascadian that improves reproducibility of
     builds, closes: #976359
   * incorporate updated Portuegese translation, closes: #962436
   * update to latest debhelper compat and policy versions
 .
   [ Debian Janitor ]
   * Apply multi-arch hints.
     + debian-history: Add Multi-Arch: foreign.
Checksums-Sha1:
 215c01f532c0b0fe4c4921ab8fe4c976e32fba2c 1919 debian-history_2.26.dsc
 44fd5e5b6e20de1180b12cc2a5d34668e98325d5 285840 debian-history_2.26.tar.xz
 49e66cfde8de2c3bdf754ed247243452872b36b6 12101 debian-history_2.26_amd64.buildinfo
Checksums-Sha256:
 b723f0e0bd205de3db6ad6158a7dc6e22a74efaa011a9939f11893eb27b8d53a 1919 debian-history_2.26.dsc
 420bea904aab985584b26f102957c6665de63b389aad5bf41dec2b9527441296 285840 debian-history_2.26.tar.xz
 2ba695b268c8631e8809fb3fc0532fa22af221653ec138a1575d739054d37be7 12101 debian-history_2.26_amd64.buildinfo
Files:
 94a652dba818ba1d09e77132f45be56c 1919 doc optional debian-history_2.26.dsc
 f4cbb5d06485854fa7c1ba11ef0cfeb5 285840 doc optional debian-history_2.26.tar.xz
 e50742a9b45fbf50f6d33adea3534f59 12101 doc optional debian-history_2.26_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=pPUX
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.