Debian Bug report logs - #977179
mlpost: reproducible builds: Embeds build time in various binaries

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: mlpost: reproducible builds: Embeds build time in various binaries

Date: Fri, 11 Dec 2020 22:00:27 -0800

[Message part 1 (text/plain, inline)]

Source: mlpost
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Various binaries in mlpost contain timestamps from the running build:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/mlpost.html

  /usr/lib/ocaml/mlpost/mlpost.a
  120 Sun·Jan··9·20:01:41·-12·2022	120 Tue·Dec··8·15:41:43·+14·2020


The attached patch fixes this by passing options to the call to date in
configure.in to use the SOURCE_DATE_EPOCH environment variable:

  https://reproducible-builds.org/docs/source-date-epoch/


Thanks for maintaining mlpost!


live well,
  vagrant

[0001-Patch-configure.in-to-use-SOURCE_DATE_EPOCH-for-the-.patch (text/x-diff, inline)]

From 9dac79dbe61945338a2c2a51f4f43d88b9dae464 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sat, 12 Dec 2020 05:49:48 +0000
Subject: [PATCH 1/2] Patch configure.in to use SOURCE_DATE_EPOCH for the date.

This patch relies on GNU extensions to date and may need further
adjustments to be made portable.

https://reproducible-builds.org/docs/source-date-epoch/
---
 configure.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/configure.in b/configure.in
index 5b47867..09078e7 100644
--- a/configure.in
+++ b/configure.in
@@ -34,7 +34,7 @@
 AC_INIT(mlpost,0.8.2,[],[],[])
 
 # The compilation date
-TODAY=`date`
+TODAY=`LC_ALL=C date --utc --date=@${SOURCE_DATE_EPOCH}`
 
 # Check for Ocaml compilers
 
-- 
2.29.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 977179-done@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 977180-done@bugs.debian.org, 977179-done@bugs.debian.org

Subject: Re: mlpost: reproducible builds issues fixed in newer version

Date: Thu, 15 Dec 2022 09:21:44 -0800

[Message part 1 (text/plain, inline)]

Version: 0.9-1

Both the timestamp and tarball issues appear to have been fixed for
about a year in bookworm/testing:

  https://tests.reproducible-builds.org/debian/history/mlpost.html

There are some build path issues still present in unstable, but neither
of these patches addressed those issues.


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.