Debian Bug report logs - #977610
webauth: reproducible builds: Embeds username, hostname and build time

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: webauth: reproducible builds: Embeds username, hostname and build time

Date: Thu, 17 Dec 2020 11:23:58 -0800

[Message part 1 (text/plain, inline)]

Source: webauth
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps username hostname
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The running kernel is embedded in /usr/bin/webauth:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/webauth.html

  (Built·by·pbuilder1@ionos5-amd64·on·2021-12-31·06:30:01·UTC)
  (Built·by·pbuilder2@i-capture-the-hostname·on·2020-11-28·00:10:17·UTC)


The attached patch fixes this by setting the username and hostname to
UNKNOWN and using SOURCE_DATE_EPOCH for the timestamp.


Thanks for maintaining webauth!


live well,
  vagrant

[0001-Remove-embedding-of-username-hostname-and-set-date-t.patch (text/x-diff, inline)]

From 434ea84de3496aa04d17798d1e20566bf18b93de Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 16 Dec 2020 19:38:45 +0000
Subject: [PATCH] Remove embedding of username, hostname and set date to use
 SOURCE_DATE_EPOCH.

https://reproducible-builds.org/docs/source-date-epoch/
---
 configure.ac | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/configure.ac b/configure.ac
index 0dab897f..164d6285 100644
--- a/configure.ac
+++ b/configure.ac
@@ -28,9 +28,9 @@ AC_PROG_MKDIR_P
 
 dnl Store information about the time the package was configured and the person
 dnl who configured it into another variable.
-webauth_user=`(whoami || /usr/ucb/whoami || echo UNKNOWN) 2>/dev/null`
-webauth_host=`(hostname || echo UNKNOWN) 2>/dev/null`
-webauth_date=`(date -u +"%Y-%m-%d %T UTC" || echo UNKNOWN) 2>/dev/null`
+webauth_user=UNKNOWN
+webauth_host=UNKNOWN
+webauth_date=`(LC_ALL date -u --date=@${SOURCE_DATE_EPOCH} +"%Y-%m-%d %T UTC" || echo UNKNOWN) 2>/dev/null`
 AC_DEFINE_UNQUOTED([PACKAGE_BUILD_INFO],
     ["Built by $webauth_user@$webauth_host on $webauth_date"],
     [Define to information about when and by whom the package was built.])
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 977610-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 977610-close@bugs.debian.org

Subject: Bug#977610: fixed in webauth 4.7.0-8

Date: Mon, 21 Dec 2020 07:37:08 +0000

Source: webauth
Source-Version: 4.7.0-8
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
webauth, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 977610@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated webauth package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 20 Dec 2020 23:09:07 -0800
Source: webauth
Architecture: source
Version: 4.7.0-8
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 977610
Changes:
 webauth (4.7.0-8) unstable; urgency=medium
 .
   * QA upload.
   * Add patch to remove embedding of username, hostname and set date to
     use SOURCE_DATE_EPOCH. (Closes: #977610)
   * debian/rules: Run tests in C.UTF-8 locale.
   * debian/source/options: Drop custom compression setting.
   * debian/rules: Remove --parallel argument to dh, already the default.
   * debian/control: Update Vcs headers.
   * Remove obsolete lintian overrides.
   * debian/control: Update to debhelper-compat 13.
   * debian/copyright: Update "Format" to use https URL.
   * debian/rules: Add override for dh_missing to pass --list-missing.
   * debian/control: Update Standards-Version to 4.5.1.
   * Add patch to convert document encodings to UTF-8.
Checksums-Sha1:
 b526f958504bac2465463d71bcf6b87b7e626928 2632 webauth_4.7.0-8.dsc
 7c960416a198e55760633c4af55d94434b8dc5bf 35640 webauth_4.7.0-8.debian.tar.xz
 a934e1546fbb21ddf29cf14665ffb1662f23ba21 14173 webauth_4.7.0-8_amd64.buildinfo
Checksums-Sha256:
 3dd3c1f0e615cb47e465a404053f39b530b7182f4d93151d7b4ef6e29ead3ef8 2632 webauth_4.7.0-8.dsc
 a1d2f493c586a93c37b911242498e8344ac8f285cc2857c001e2e1dec6439413 35640 webauth_4.7.0-8.debian.tar.xz
 b9162c5d71196f95a6fb1d46eebd7ca44d855d00d10e2a87416fa407f74bede3 14173 webauth_4.7.0-8_amd64.buildinfo
Files:
 3acee92812b14a0c6c3b0b0ac50736e2 2632 web optional webauth_4.7.0-8.dsc
 ed71fc37f40f7dab70c94156beef050c 35640 web optional webauth_4.7.0-8.debian.tar.xz
 3d30291a36b9d1220fefdd73278a573a 14173 web optional webauth_4.7.0-8_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX+BLxSAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqtQmAQDbuaid6Wgzlh9o
zPLVJ7lTdIiqplsWeJIsArSSfMVdcAEAovQVgtkYsXQPBdqnJYbtLrWvyxdDghkA
g81jIEqLIAc=
=UKQ5
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.