Debian Bug report logs - #977428
lprng: reproducible builds: Binaries contain embedded paths from usrmerge systems

version graph

Package: src:lprng; Maintainer for src:lprng is Debian QA Group <packages@qa.debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Tue, 15 Dec 2020 00:45:01 UTC

Severity: normal

Tags: patch

Fixed in version lprng/3.8.B-5

Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>:
Bug#977428; Package src:lprng. (Tue, 15 Dec 2020 00:45:03 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>. (Tue, 15 Dec 2020 00:45:03 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: lprng: reproducible builds: Binaries contain embedded paths from usrmerge systems
Date: Mon, 14 Dec 2020 16:40:24 -0800
[Message part 1 (text/plain, inline)]
Source: lprng
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: usrmerge
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Several binaries shipped with lprng include embedded paths to the "chown"
and "chgrp" commands:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/lprng.html

  427 	/bin/chown
  427 	/usr/bin/chown


The attached patch fixes this by passing the CHOWN and CHGRP variables
to configure.


Thanks for maintaining lprng!


live well,
  vagrant
[0001-debian-rules-Pass-CHOWN-and-CHGRP-to-configure.patch (text/x-diff, inline)]
From 53f042a2da5cb8a554255e0171f3f39598dbf423 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 15 Dec 2020 00:29:41 +0000
Subject: [PATCH] debian/rules: Pass CHOWN and CHGRP to configure.

The path to "chown" and "chgrp" may vary as either /bin/CMD or
/usr/bin/CMD if the system is configured as a usrmerge system. Use
/bin/CMD for the most compatible location.

https://tests.reproducible-builds.org/debian/issues/unstable/paths_vary_due_to_usrmerge_issue.html
---
 debian/rules | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 4470ae1..4af91b3 100755
--- a/debian/rules
+++ b/debian/rules
@@ -22,7 +22,9 @@ override_dh_auto_configure:
 		--enable-kerberos_checks --enable-kerberos \
 		--with-groupid=lp \
 		--disable-remote \
-		--enable-lpd.conf.local
+		--enable-lpd.conf.local \
+		CHOWN=/bin/chown \
+		CHGRP=/bin/chgrp \
 
 override_dh_auto_install: $(autogen-files)
 	# Add here commands to install the package into debian/lprng.
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
You have taken responsibility. (Mon, 21 Dec 2020 22:21:09 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Mon, 21 Dec 2020 22:21:09 GMT) (full text, mbox, link).


Message #10 received at 977428-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 977428-close@bugs.debian.org
Subject: Bug#977428: fixed in lprng 3.8.B-5
Date: Mon, 21 Dec 2020 22:19:39 +0000
Source: lprng
Source-Version: 3.8.B-5
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
lprng, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 977428@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated lprng package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 21 Dec 2020 13:38:59 -0800
Source: lprng
Architecture: source
Version: 3.8.B-5
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 977428
Changes:
 lprng (3.8.B-5) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Pass CHOWN and CHGRP to configure (Closes: #977428).
   * debian/control: Update Priority to optional.
   * debian/changelog: Fix erroneous email address in old changelog entry.
   * debian/changelog: Remove trailing whitespace.
   * debian/control: Fix typo in "Vcs-Browser".
   * debian/control: Set Rules-Requires-Root to "no".
   * debian/copyright: Update URL for "Format".
   * debian/copyright: Update to BSD-4 license.
   * Update to debhelper-compat 13.
   * debian/control: Add Pre-Depends for "${misc:Pre-Depends}".
   * debian/control: Update to Standards-Version 4.5.1.
Checksums-Sha1:
 715a6dd953c073d3357782f7881172ec8ff3d78a 1336 lprng_3.8.B-5.dsc
 a035ea3123ed68ffc66c223da5390be288d5d0cf 32908 lprng_3.8.B-5.debian.tar.xz
 1a6457a57451a9225bc9f624fdd8a48b0a903faa 5744 lprng_3.8.B-5_amd64.buildinfo
Checksums-Sha256:
 a5cf454f1155ad459e505ef339b65c0fa11ad2b4ad0c58435e0c4cc51cf08e2e 1336 lprng_3.8.B-5.dsc
 dc0cc0d1b354a5f78877e3a69ffcbb15122d96679b506f8cb9090191a6891765 32908 lprng_3.8.B-5.debian.tar.xz
 579d89fcc2f27139338224e2a50d6ac48b90b8449894efc275297409c363c9db 5744 lprng_3.8.B-5_amd64.buildinfo
Files:
 c3695438f918e360d9b3567ac690f4e1 1336 net optional lprng_3.8.B-5.dsc
 5d27af5345d99ead1764d1f09e9c68d0 32908 net optional lprng_3.8.B-5.debian.tar.xz
 eedc5e4c1efc08d3107802336361a358 5744 net optional lprng_3.8.B-5_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX+EXmyAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqkMpAP4i+WOcErbhLGCF
RSRD/hjP3vQL1hU9sQSdZhdXj46xdwEA9UIkmui6qnmnlcQFFUbTFJHmhem0vCSc
eDjFJepK7w0=
=IPoa
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 24 Jan 2021 07:26:05 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 12:49:37 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.