Debian Bug report logs - #977151
cctools: reproducible builds: Embeds build date in binaries

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: cctools: reproducible builds: Embeds build date in binaries

Date: Fri, 11 Dec 2020 11:44:11 -0800

[Message part 1 (text/plain, inline)]

Source: cctools
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build date gets embedded in several binaries:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/cctools.html

  /usr/bin/deltadb_query
  203 	2020-11-26·00:34:53·-1200	203 	2021-12-30·09:02:59·+1400


The attached patch passes --build-date using SOURCE_DATE_EPOCH, which is
set to the last debian/changelog entry so that timestamps are
reproducible between builds:

  https://reproducible-builds.org/docs/source-date-epoch/

Thanks for maintaining cctools!

live well,
  vagrant

[0001-debian-rules-Pass-build-date-to-configure-using-SOUR.patch (text/x-diff, inline)]

From 823edb83aaf709a4f48fe5454d31662af9e96001 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Fri, 11 Dec 2020 18:51:18 +0000
Subject: [PATCH 1/3] debian/rules: Pass --build-date to configure using
 SOURCE_DATE_EPOCH.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 10e18f3..8ab2a75 100755
--- a/debian/rules
+++ b/debian/rules
@@ -19,7 +19,8 @@ override_dh_auto_configure:
 		--with-mpi-path /usr --with-fuse-path /usr --with-zlib-path /usr \
 		--with-python3-path /usr/bin/python3 \
 		--with-python2-path no \
-		--without-system-parrot
+		--without-system-parrot \
+		--build-date "$(shell LC_ALL=C date --utc --date=@$${SOURCE_DATE_EPOCH})" \
 
 override_dh_auto_test:
 	# disable the tests for now on upstream's request. they will be reenabled
-- 
2.29.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 977151-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 977151-close@bugs.debian.org

Subject: Bug#977151: fixed in cctools 7.1.2-5

Date: Tue, 15 Dec 2020 13:49:16 +0000

Source: cctools
Source-Version: 7.1.2-5
Done: Alastair McKinstry <mckinstry@debian.org>

We believe that the bug you reported is fixed in the latest version of
cctools, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 977151@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alastair McKinstry <mckinstry@debian.org> (supplier of updated cctools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 15 Dec 2020 12:55:50 +0000
Source: cctools
Architecture: source
Version: 7.1.2-5
Distribution: unstable
Urgency: medium
Maintainer: Alastair McKinstry <mckinstry@debian.org>
Changed-By: Alastair McKinstry <mckinstry@debian.org>
Closes: 977151 977153 977154
Changes:
 cctools (7.1.2-5) unstable; urgency=medium
 .
   [ Vagrant Cascadian ]
   * Embeds the home dir in binaries. Closes: #977151
   * Embeds the home dir in binaries. Closes: #977153
 .
   [ Alastair McKinstry ]
   * Set no-parallel to make build reproducible. Closes: #977154
Checksums-Sha1:
 45dd3aa195d995be1b29e000ac7061364e4775d0 2488 cctools_7.1.2-5.dsc
 869114852376e24d04a448e846c189108fec2222 22864 cctools_7.1.2-5.debian.tar.xz
Checksums-Sha256:
 b9a9137da485e47bd10f9d3fd2dc7ed34c953eb4bc66c6faa059b0f6c3accd35 2488 cctools_7.1.2-5.dsc
 3d7bc10ad9c6ea40510e4fc76bc4c43de8485c0e89a1cc59e08803da8908f20d 22864 cctools_7.1.2-5.debian.tar.xz
Files:
 4d400b0135478b0cc94354ffe7694395 2488 utils optional cctools_7.1.2-5.dsc
 7b3ff43365df0f9752433dc3050e7ba4 22864 utils optional cctools_7.1.2-5.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEgjg86RZbNHx4cIGiy+a7Tl2a06UFAl/YvGEACgkQy+a7Tl2a
06UYWw/+Nq3GaX9f87yGbViYxe3F+1fBpLFxlQvkKhTSGl61TUDvvSsrJOJePTcA
SaHaeTqTHsACan/mo479X7KYIBEnYWOP6E6G9n4PNu5TtBUBk0DNPmemrpV4cURd
f3rS/HnLXXKf1UWC+3Z6PZOzXcEi8/Ln9f0YOA1bnKjwQgafs1H4lpE2ShC3B1pD
ndq2U3G76bcH2qUowoMoljiHczJrg7/2vsycH3otQoNWNbAyboSOICX3CfwRVvqy
cVne1nC4OP21SXcH3wtU1YnvO7Jxe++bsp8+k4W08nbUPilkerYd/3FM+z/2Q3mk
45Wu920YDlskcTXQ0xJa05h5H1qUJppkpxAeX8fz3NKJN01Gftig1QzBGdOpzPn7
VMBBWDzDsMEXg2PksodZ6f8rSQbRBWa6uEg8VqYhJV1eohpnrsl9y20XelYFj8OP
1s1j9Af2T2G6FEt6fKsuZ8YkSk43Qr+poyQQS59voMcchOUZonRQ0j8as60ku66r
q0WBInEqD/cAAPOafEUXKLuLXGomtyqKG78GZ2FZwI2qZOZaAuWhKt81RxPBrh0Q
ZPkxc3BZwkGL89LxUE4+ugrZNfujCel/VTiLA+x4EoZs3Efe9X/dIP1h16Lnf2Bg
XBYL+sVARG64yip1Pbb00P1Hwc974bhrheArux9bZGrbGdyNYFg=
=vO23
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.