Debian Bug report logs - #976898
xorg-server: reproducible builds: Embeds running kernel version

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: xorg-server: reproducible builds: Embeds running kernel version

Date: Tue, 08 Dec 2020 23:44:38 -0800

[Message part 1 (text/plain, inline)]

Source: xorg-server
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: kernel
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org


The /usr/bin/Xorg binary and other generated binaries embed the running
kernel version:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/i386/diffoscope-results/xorg-server.html

  ./usr/bin/Xorg
  2623 	Linux·4.19.0-13-amd64·x86_64	2623 	Linux·4.19.0-13-686-pae·i686


This is due to configure.ac setting a default value with "uname -srm"
for OSNAME, which includes the running kernel version:

  https://tests.reproducible-builds.org/debian/issues/unstable/captures_kernel_version_issue.html


The attached patch passes --with-os-name=DEB_HOST_ARCH_OS to configure
which avoids embedding the running kernel version in the shipped
binaries.


Thanks for maintaining xorg-server!


live well,
  vagrant

[0001-debian-rules.flags-Specify-with-os-name-as-DEB_HOST_.patch (text/x-diff, inline)]

From 6f3281f6dbf0cc15a40c2561de822f10e169c798 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 9 Dec 2020 07:01:19 +0000
Subject: [PATCH] debian/rules.flags: Specify --with-os-name as
 DEB_HOST_ARCH_OS to avoid embedding the running kernel version, which may
 vary between builds.

https://tests.reproducible-builds.org/debian/issues/unstable/captures_kernel_version_issue.html
---
 debian/rules.flags | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/rules.flags b/debian/rules.flags
index 03486bb81..38596fe72 100644
--- a/debian/rules.flags
+++ b/debian/rules.flags
@@ -18,6 +18,7 @@ confflags += \
 	--disable-strict-compilation \
 	--disable-debug \
 	--with-int10=x86emu \
+	--with-os-name="$(DEB_HOST_ARCH_OS)" \
 	--with-os-vendor="$(VENDOR)" \
 	--with-builderstring="$(SOURCE_NAME) $(SOURCE_VERSION) ($(SUPPORT))" \
 	--with-xkb-path=/usr/share/X11/xkb \
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 976898-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 976898-close@bugs.debian.org

Subject: Bug#976898: fixed in xorg-server 2:1.20.10-3

Date: Wed, 17 Feb 2021 10:03:36 +0000

Source: xorg-server
Source-Version: 2:1.20.10-3
Done: Timo Aaltonen <tjaalton@debian.org>

We believe that the bug you reported is fixed in the latest version of
xorg-server, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 976898@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Timo Aaltonen <tjaalton@debian.org> (supplier of updated xorg-server package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 17 Feb 2021 11:17:43 +0200
Source: xorg-server
Architecture: source
Version: 2:1.20.10-3
Distribution: unstable
Urgency: medium
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Timo Aaltonen <tjaalton@debian.org>
Closes: 923198 976898 979751
Changes:
 xorg-server (2:1.20.10-3) unstable; urgency=medium
 .
   [ Julien Cristau ]
   * Drop workaround for mips* FTBFS added in 2:1.20.10-1, shouldn't be
     necessary anymore with the change in 2:1.20.10-2.
 .
   [ Sven Joachim ]
   * Recommend default-logind | logind rather than libpam-systemd in
     xserver-xorg-core (Closes: #923198).
   * Use mktemp rather than tempfile in xserver-xorg-legacy.postinst
     (Closes: #979751).
   * Use dpkg-vendor to get the vendor name, drop lsb-release from
     Build-Depends.
 .
    [ Vagrant Cascadian ]
   * Avoid embedding the running kernel version (Closes: #976898).
Checksums-Sha1:
 66d5328cd2b919b8e4b2c71d4d34070921b242c4 4466 xorg-server_1.20.10-3.dsc
 9e044bb042a17e26910ea36fc303dcff1b4f1a66 152420 xorg-server_1.20.10-3.diff.gz
 bf698d1ad3d5f5652dca48836e519fd01244559f 10080 xorg-server_1.20.10-3_source.buildinfo
Checksums-Sha256:
 e788cadae0cc9b47d0e4d363b4365cf5fc3aed83c74c32b764464e540db82d85 4466 xorg-server_1.20.10-3.dsc
 bb084966395db720b3daa1ee30f70945d60230d28162962ce119698da24dfa21 152420 xorg-server_1.20.10-3.diff.gz
 84e9a4e0ee8b0c9f92e67f63160b35cc3e9c1b3cf3fe0de32d64252c153ccac0 10080 xorg-server_1.20.10-3_source.buildinfo
Files:
 dedf8a9f20b151e13532aaeef5259aa3 4466 x11 optional xorg-server_1.20.10-3.dsc
 3041faa19041a9082aa8a6960478b394 152420 x11 optional xorg-server_1.20.10-3.diff.gz
 f5f1cec8f28571e710cd1c2997ccdcb6 10080 x11 optional xorg-server_1.20.10-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEdS3ifE3rFwGbS2Yjy3AxZaiJhNwFAmAs31EACgkQy3AxZaiJ
hNzhsA/+Kgu/iskQg3UrbKkeyPlzpXEH2dyeZebBOaS60+oh/DQ5Fdjxq1wPg3LU
Ya0852ufE5uTjZrJ1Rwxl5QZFsX6jdCHsEs08o8ivo3OraNmYzNFixubHn0I22ZH
EXZF1FZhsOUA7ywNxNw0wumVtRskgAcLtGV9K6TpvabdUiuLBb7k5VjcC+MtBTnl
XHhoLTFzEKQIOv7zoTKorr9NeyrZNYn2WZ1XqGlDtUPwGgN6VLo/jIMuBduQ+h24
BAUX7jwp+XL+OAqPsdb3mywB2M1owBZ8mEbNiyRpIaDUjd6LBjGstedMGYOfMtsV
iBapNMAVRb/6YI6CF6E1AP99CjFPCJHs98tMy7W+5QB4xNFGr+gJdFCW9wGrpwpZ
ulJpjdvQtg8psCJv48avmbDmyn2Pr8Z//Otw1y0zMR/W2Jfdtv0mR/Iuv7GyvCLD
jDjW7heRv9cqTTv8+wtXHe++JVXeN1HBy4kOdTpzNEEOo8bKC83EI+DwDQT4Jfby
OhoDbRnbjAXZy/s1iQYrXEnHFuT8vu/bd0+zDEMVTdx3jZ8QWxiIq69SJel3PVko
ljyq7+iAi2+/OqKuSzTGr4qVNUBrHEkH+MWrCKeOrH0jZPo7Rivcy2GtGP0VxGU7
eT9yCScWRMFv2hKmEN8kGo6i3LgrSVqaUWPTc5QfkixaFbm0oms=
=pQit
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.