Debian Bug report logs - #976447
circlator: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: circlator: please make the build reproducible

Date: Sat, 05 Dec 2020 10:42:43 +0000

[Message part 1 (text/plain, inline)]

Source: circlator
Version: 1.5.6-3
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: environment
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
circlator could not be built reproducibly.

This is because it generates a tarball without sorting its contents or
ensuring that the files do not inherit the user and group (etc.) of
the build environment.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

--
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[circlator.diff.txt (text/plain, attachment)]

Message #10 received at 976447-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 976447-close@bugs.debian.org

Subject: Bug#976447: fixed in circlator 1.5.6-4

Date: Sat, 05 Dec 2020 15:34:44 +0000

Source: circlator
Source-Version: 1.5.6-4
Done: Andreas Tille <tille@debian.org>

We believe that the bug you reported is fixed in the latest version of
circlator, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 976447@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated circlator package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 05 Dec 2020 16:10:11 +0100
Source: circlator
Architecture: source
Version: 1.5.6-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 976447
Changes:
 circlator (1.5.6-4) unstable; urgency=medium
 .
   [ Chris Lamb ]
   * make the build reproducible
     Closes: #976447
Checksums-Sha1:
 ab6fa1fe33815b6f9763d204cc6a80534692f702 2257 circlator_1.5.6-4.dsc
 62f47f52072e38cc546ae94bcb8b2d6926e81938 4260 circlator_1.5.6-4.debian.tar.xz
 a057c522f9c03546e39df1da1c4eebbba314273b 13684 circlator_1.5.6-4_amd64.buildinfo
Checksums-Sha256:
 3dc3092417031c0a58e3b0692623ab088edf896fe686921ab2cdcf45a278e134 2257 circlator_1.5.6-4.dsc
 7253034e662932dac878cf3e2656f37b0c18172e2172e965251d031cf037726b 4260 circlator_1.5.6-4.debian.tar.xz
 e861a904eee393a5ca1989cceedab4b523491e814ef35bf5983efacce92615e8 13684 circlator_1.5.6-4_amd64.buildinfo
Files:
 1fd32bd01699c2ef58bba6af2d57a6b1 2257 science optional circlator_1.5.6-4.dsc
 eed1b2231c225cd06f58a23a8b90af68 4260 science optional circlator_1.5.6-4.debian.tar.xz
 24da083bd9fb350d9bbc85b8695e1a62 13684 science optional circlator_1.5.6-4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=Yorz
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.