Debian Bug report logs - #976716
jbbp: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: jbbp: please make the build reproducible

Date: Mon, 07 Dec 2020 10:48:57 +0000

[Message part 1 (text/plain, inline)]

Source: jbbp
Version: 2.0.2-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
jbbp could not be built reproducibly.

This is because the pom.xml embeds the absolute build path.

Patch attached that removes this part of the file; it cannot relate
to anything at runtime (and I can't see how/where the runtime code
uses this path) so it feels safe to remove.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[jbbp.diff.txt (text/plain, attachment)]

Message #10 received at 976716-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 976716-close@bugs.debian.org

Subject: Bug#976716: fixed in jbbp 2.0.2-3

Date: Mon, 07 Dec 2020 12:50:34 +0000

Source: jbbp
Source-Version: 2.0.2-3
Done: Roger Shimizu <rosh@debian.org>

We believe that the bug you reported is fixed in the latest version of
jbbp, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 976716@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Roger Shimizu <rosh@debian.org> (supplier of updated jbbp package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 07 Dec 2020 21:15:02 +0900
Source: jbbp
Architecture: source
Version: 2.0.2-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: Roger Shimizu <rosh@debian.org>
Closes: 976716
Changes:
 jbbp (2.0.2-3) unstable; urgency=medium
 .
   * debian/patches:
     - Add patch 03 to make the build reproducible.
       Thanks to Chris Lamb for his patch (Closes: #976716).
   * debian/control:
     - Mark libjbbp-java as Multi-Arch: foreign
Checksums-Sha1:
 926f4099160b194384c64000c8f4c2fd0f225952 2156 jbbp_2.0.2-3.dsc
 f35251cd3d75befd905e80bb3f9e36d550c62bed 4764 jbbp_2.0.2-3.debian.tar.xz
 d8214fe853bc4bb5fd311f246eadc1409c6d31b1 12103 jbbp_2.0.2-3_source.buildinfo
Checksums-Sha256:
 01fdf661a74b752f37cce3499f7fbe87a590d12ff270a737ff082b0634ef82b3 2156 jbbp_2.0.2-3.dsc
 bb6e36ee6bfbaa3f2acd04147a57c77f472e6e03652a3e704077eddc2f6a6dea 4764 jbbp_2.0.2-3.debian.tar.xz
 03c5b77060dd94c62c8c80916060ee0fb4f31152ffd36374473f33517918206d 12103 jbbp_2.0.2-3_source.buildinfo
Files:
 834028be6b0d98e362068a711d8f8f8b 2156 java optional jbbp_2.0.2-3.dsc
 e83eea7e04cbc6d1dc1a62deb4b4b009 4764 java optional jbbp_2.0.2-3.debian.tar.xz
 d41b747a689c5bc7d9d70a692863708c 12103 java optional jbbp_2.0.2-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=4yfR
-----END PGP SIGNATURE-----

Message #15 received at 976716@bugs.debian.org (full text, mbox, reply):

From: Emmanuel Bourg <ebourg@apache.org>

To: Chris Lamb <lamby@debian.org>, 976716@bugs.debian.org

Subject: Re: Bug#976716: jbbp: please make the build reproducible

Date: Mon, 7 Dec 2020 22:27:53 +0100

Le 07/12/2020 à 11:48, Chris Lamb a écrit :

> Whilst working on the Reproducible Builds effort [0] we noticed that
> jbbp could not be built reproducibly.
> 
> This is because the pom.xml embeds the absolute build path.

It looks like the ${basedir} variable was substituted by the uber-pom
plugin (from libuber-pom-java). This issue may occur again if this
plugin is used to build other packages, in which case it would be better
to fix the issue directly at the plugin level.

Emmanuel Bourg

Send a report that this bug log contains spam.