Debian Bug report logs - #978577
coinor-symphony: reproducible builds: Embedded timestamps in PDF files

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: coinor-symphony: reproducible builds: Embedded timestamps in PDF files

Date: Mon, 28 Dec 2020 11:08:34 -0800

[Message part 1 (text/plain, inline)]

Source: coinor-symphony
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in /usr/share/doc/coinor-libsymphony-doc/man.pdf.gz:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/coinor-symphony.html

  November·29,·2020
  vs.
  January·2,·2022

The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

While this alone does not fix all reproducibility issues in
coinor-symphony (e.g. build paths), it should be reproducible once it
lands in bullseye, which does not vary build paths in the reproducible
builds test infrastructure.

Thanks for maintaining coinor-symphony!

live well,
  vagrant

[0001-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]

From e0f55da79c9c08ce566eb0808e765addde35ef44 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 28 Dec 2020 18:58:22 +0000
Subject: [PATCH 1/2] debian/rules: Set FORCE_SOURCE_DATE=1 in order for
 texlive to respect SOURCE_DATE_EPOCH for reproducible timestamps.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 6f39c85..fc42b74 100755
--- a/debian/rules
+++ b/debian/rules
@@ -2,6 +2,9 @@
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
 %:
 	dh $@ --without autoreconf
 
-- 
2.30.0.rc2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 978577-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 978577-close@bugs.debian.org

Subject: Bug#978577: fixed in coinor-symphony 5.6.16+repack1-3

Date: Mon, 28 Dec 2020 23:33:22 +0000

Source: coinor-symphony
Source-Version: 5.6.16+repack1-3
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
coinor-symphony, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 978577@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated coinor-symphony package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 28 Dec 2020 15:21:06 -0800
Source: coinor-symphony
Architecture: source
Version: 5.6.16+repack1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 978577 978578
Changes:
 coinor-symphony (5.6.16+repack1-3) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to respect
     SOURCE_DATE_EPOCH for reproducible timestamps. (Closes: #978577)
   * coinor-libsymphony-doc: Install example Makefile.in rather than
     Makefile. (Closes: #978578)
   * debian/control: Set Rules-Requires-Root to "no".
   * debian/control: Update Standards-Version to 4.5.1.
   * debian/control: Update Vcs headers.
Checksums-Sha1:
 fcc529206fcabb6ca2acbcc6f800a7c80ddbe97d 1874 coinor-symphony_5.6.16+repack1-3.dsc
 9c262bf674c85e1cb612b9fcd597f8f6d8da0a45 9432 coinor-symphony_5.6.16+repack1-3.debian.tar.xz
 55330517b7d4778e3e9dcc5b40c2328b0e0b2445 11880 coinor-symphony_5.6.16+repack1-3_amd64.buildinfo
Checksums-Sha256:
 68ebfedec0be046efc1ec2acebc330ca7da5ffe0d6076c80eb40ab0348d7955c 1874 coinor-symphony_5.6.16+repack1-3.dsc
 99ae1e00099cbcb0c5c652034f8f4abe85f83ea7b06d12091a5afa808d69413d 9432 coinor-symphony_5.6.16+repack1-3.debian.tar.xz
 54d6cf00d542eabf0b9b2cb5693071c9222376daab22dba4aae6a8da7750b68e 11880 coinor-symphony_5.6.16+repack1-3_amd64.buildinfo
Files:
 52600651938ae1940649b9e06da24567 1874 science optional coinor-symphony_5.6.16+repack1-3.dsc
 8c0e0fab62aa489a43c559268234b529 9432 science optional coinor-symphony_5.6.16+repack1-3.debian.tar.xz
 8343e83936ca309d966f0bbc366d181f 11880 science optional coinor-symphony_5.6.16+repack1-3_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX+ppeCAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqsryAQCA7ycKaef11U/r
DTSDYFN5HK1JXvO/UaL4Hlexdq7f5gEAuFdtITdKflMyiTljpRxw+G3RZrXvJ4yJ
JBeDIvhW4Q0=
=m+0E
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.