Debian Bug report logs - #977415
klayout: reproducible builds: Binaries contain build timestamps

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: klayout: reproducible builds: Binaries contain build timestamps

Date: Mon, 14 Dec 2020 14:25:18 -0800

[Message part 1 (text/plain, inline)]

Source: klayout
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Several binaries shipped with klayout include the build time:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/klayout.html

  ./usr/lib/klayout/klayout
  124 	2021-12-18
  124 	2020-11-16


The attached patch fixes this by adjusting the call to date in
version.sh to use the SOURCE_DATE_EPOCH environment variable.

This patch does not resolve all reproducibility issues (e.g. build
paths), but combined with a patch soon to follow, should make klayout
reproducible when it lands in bullseye (where build paths are not
tested).


Thanks for maintaining klayout!


live well,
  vagrant

[0001-Set-KLAYOUT_VERSION_DATE-in-version.sh-using-value-f.patch (text/x-diff, inline)]

From 7bf8f643614cf1398e7ef7108d3ba47200d8300d Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 14 Dec 2020 19:56:24 +0000
Subject: [PATCH 1/2] Set KLAYOUT_VERSION_DATE in version.sh using value from
 SOURCE_DATE_EPOCH.

  https://reproducible-builds.org/docs/source-date-epoch/

This patch requires GNU date extensions, and may require adjustments
for portability with other date implementations.
---
 version.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/version.sh b/version.sh
index 7065aa1..03192ba 100644
--- a/version.sh
+++ b/version.sh
@@ -8,7 +8,7 @@ KLAYOUT_VERSION="0.26.2"
 KLAYOUT_PYPI_VERSION="0.26.2"
 
 # The build date
-KLAYOUT_VERSION_DATE=$(date "+%Y-%m-%d")
+KLAYOUT_VERSION_DATE=$(LC_ALL=C date --utc --date=@${SOURCE_DATE_EPOCH} "+%Y-%m-%d")
 
 # The short SHA hash of the commit
 KLAYOUT_VERSION_REV=$(git rev-parse --short HEAD 2>/dev/null)
-- 
2.29.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 977415-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 977415-close@bugs.debian.org

Subject: Bug#977415: fixed in klayout 0.27.11-1

Date: Sat, 03 Sep 2022 14:58:56 +0000

Source: klayout
Source-Version: 0.27.11-1
Done: Carsten Schoenert <c.schoenert@t-online.de>

We believe that the bug you reported is fixed in the latest version of
klayout, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 977415@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Carsten Schoenert <c.schoenert@t-online.de> (supplier of updated klayout package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 03 Sep 2022 12:05:18 +0200
Source: klayout
Architecture: source
Version: 0.27.11-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Electronics Team <pkg-electronics-devel@lists.alioth.debian.org>
Changed-By: Carsten Schoenert <c.schoenert@t-online.de>
Closes: 977415 977416
Changes:
 klayout (0.27.11-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Carsten Schoenert ]
   * [0d74036] d/gbp.conf: Adding more default data
   * [2eb4aba] New upstream version 0.27.11
   * [bcace71] d/control: Increase debhelper to version 13
   * [8655ff8] d/control: Increase Standards-Version to 4.6.1
     No further changes needed.
   * [348c911] d/README.source: Adding basic information about source
 .
   [ Thomas Dorch ]
   * [3faff17] fixed debian/watch so it tracks klayout git releases
   * [0e78a4d] New upstream version 0.27.8
   * [356e3c7] d/copyright: Update copyright data
   * [972efd8] d/rules: Reorganize permission setting on *.py files
   * [58b24ac] d/watch: Update to version 4
   * [8b24c59] Rebuild patch queue from patch-queue branch
     Added patch:
     Set-KLAYOUT_VERSION_DATE-in-version.sh-using-value-from-S.patch
     (Closes: #977415)
   * [52264e0] fix lintian warning about ldconfig trigger
 .
   [ Vagrant Cascadian ]
   * [7cbcf66] d/rules: Generate wrapper consistently regardless of shell
     (Closes: #977416)
 .
   [ Thomas Dorch ]
Checksums-Sha1:
 216d9a8aa41a5eb62b114bd4c1a123c82cf90476 2087 klayout_0.27.11-1.dsc
 522b538ab93b69c31755296d4c64927d77f93506 57376311 klayout_0.27.11.orig.tar.gz
 316e628dda30a9b06a76cc580299748afb47e2ba 7640 klayout_0.27.11-1.debian.tar.xz
 59e9df74ce01acbe134eee1678c82338f3ae742d 13223 klayout_0.27.11-1_amd64.buildinfo
Checksums-Sha256:
 50844db0368884aeaf790e22cfa8ee595382933f291d278c11a49aeb8b5f675f 2087 klayout_0.27.11-1.dsc
 cc14c4840504c6b623548c0af1600c933791b2c76d012bda3468a3610b3ae15a 57376311 klayout_0.27.11.orig.tar.gz
 8c17116d6cb8056d898197433972e062fb5197368dfeaa1281c53b5b8c2ae0f1 7640 klayout_0.27.11-1.debian.tar.xz
 2d0e351e9907851e3507b61b4b7f78471d9c9477c7052846b5edfb659d4f84d2 13223 klayout_0.27.11-1_amd64.buildinfo
Files:
 a91b1a67bf31a843e790c01075baff1a 2087 electronics optional klayout_0.27.11-1.dsc
 430da00986aefc56391a273e82bef32e 57376311 electronics optional klayout_0.27.11.orig.tar.gz
 512e5dd93cdf14bf19caeefb3858bfe0 7640 electronics optional klayout_0.27.11-1.debian.tar.xz
 c6dbe1945492411db27d20c6c31cbbec 13223 electronics optional klayout_0.27.11-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=cMPL
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.