Debian Bug report logs - #978946
gfxboot: reproducible builds: Embeds user id, group id and timestamps in cpio files

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: gfxboot: reproducible builds: Embeds user id and group id in cpio files

Date: Thu, 31 Dec 2020 15:51:34 -0800

[Message part 1 (text/plain, inline)]

Source: gfxboot
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: username
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Various cpio archives shipped in gfxboot contain the user id and group
id of the build user:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/gfxboot.html

  etc/bootsplash/example_01/cdrom/bootlogo

  -rw-r--r--···1·····1111·····1111····42639·2020-12-24·13:17:48.000000·init
  vs.
  -rw-r--r--···1·····2222·····2222····42639·2022-01-26·19:45:05.000000·init


The attached patch fixes this by passing the owner argument to the cpio
calls when creating the archives.


Unfortunately, the cpio archives also embed the timestamps of the files
included, which will likely vary between builds, so this does not
resolve all reproducibility issues with these archives.


Thanks for maintaining gfxboot!


live well,
  vagrant

[0001-Patch-calls-to-create-cpio-archives-to-set-owner-and.patch (text/x-diff, inline)]

From 7a670f72d5305aaf692597f1748937d552d290a3 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Thu, 31 Dec 2020 08:57:55 +0000
Subject: [PATCH 1/2] Patch calls to create cpio archives to set owner and
 group.

---
 bin/unpack_bootlogo      | 2 +-
 gfxboot                  | 4 ++--
 themes/openSUSE/Makefile | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/bin/unpack_bootlogo b/bin/unpack_bootlogo
index ec83d0b..7672e16 100755
--- a/bin/unpack_bootlogo
+++ b/bin/unpack_bootlogo
@@ -48,7 +48,7 @@ sub unpack_bootlogo
     }
   }
 
-  open P, "| cd $tmp; cpio --quiet -o >../bootlogo";
+  open P, "| cd $tmp; cpio --quiet --owner=+0:+0 -o >../bootlogo";
   print P "$_\n" for grep $_, @files;
   if($xdir) { print P "$_\n" for @ext }
   close P;
diff --git a/gfxboot b/gfxboot
index f7cda36..4015dd2 100755
--- a/gfxboot
+++ b/gfxboot
@@ -2597,7 +2597,7 @@ sub pack_archive
     }
 
     if(@pack_list) {
-      open $f, "| ( cd $dir ; cpio --quiet -o ) >$file/$archive";
+      open $f, "| ( cd $dir ; cpio --quiet --owner=+0:+0 -o ) >$file/$archive";
       print $f join("\n", @pack_list);
       close $f;
     }
@@ -2606,7 +2606,7 @@ sub pack_archive
   else {
     $file = $gfxboot_tmp->file;
 
-    $i = system "cd $dir ; find . | cpio --quiet -o >$file 2>/dev/null";
+    $i = system "cd $dir ; find . | cpio --quiet --owner=+0:+0 -o >$file 2>/dev/null";
     die "$file: failed to create archive\n" if $i;
   }
 
diff --git a/themes/openSUSE/Makefile b/themes/openSUSE/Makefile
index 3a71f9b..1c8de69 100644
--- a/themes/openSUSE/Makefile
+++ b/themes/openSUSE/Makefile
@@ -56,7 +56,7 @@ ifdef DEFAULT_LANG
 	@echo $(DEFAULT_LANG) >bootlogo.dir/lang
 endif
 	@sh -c 'cd bootlogo.dir; chmod +t * ; chmod -t init languages'
-	@sh -c 'cd bootlogo.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet -o >../bootlogo'
+	@sh -c 'cd bootlogo.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet --owner=+0:+0 -o >../bootlogo'
 
 message: src/main.bin src/gfxboot.cfg help-boot/.ready po/.ready fonts/.ready
 	@rm -rf message.dir
@@ -71,7 +71,7 @@ ifdef DEFAULT_LANG
 	@echo $(DEFAULT_LANG) >message.dir/lang
 	@echo $(DEFAULT_LANG) >>message.dir/languages
 endif
-	@sh -c 'cd message.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet -o >../message'
+	@sh -c 'cd message.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet --owner=+0:+0 -o >../message'
 
 clean:
 	@for i in $(SUBDIRS) ; do [ ! -f $$i/Makefile ] ||  make -C $$i clean || break ; done
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 978946@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 978946@bugs.debian.org

Subject: Re: gfxboot: reproducible builds: Embeds user id and group id in cpio files

Date: Thu, 31 Dec 2020 20:25:28 -0800

[Message part 1 (text/plain, inline)]

Control: tags 978946 fixed-upstream

On 2020-12-31, Vagrant Cascadian wrote:
> Various cpio archives shipped in gfxboot contain the user id and group
> id of the build user:
>
>   https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/gfxboot.html
>
>   etc/bootsplash/example_01/cdrom/bootlogo
>
>   -rw-r--r--···1·····1111·····1111····42639·2020-12-24·13:17:48.000000·init
>   vs.
>   -rw-r--r--···1·····2222·····2222····42639·2022-01-26·19:45:05.000000·init
>
>
> The attached patch fixes this by passing the owner argument to the cpio
> calls when creating the archives.

This is fixed upstream:

  https://github.com/openSUSE/gfxboot/pull/35

> Unfortunately, the cpio archives also embed the timestamps of the files
> included, which will likely vary between builds, so this does not
> resolve all reproducibility issues with these archives.

Timestamp issues also fixed upstream in the same pull request.


I think applying similar patches to themes/examples* may still be
needed.


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #17 received at 978946@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 978946@bugs.debian.org

Subject: Re: gfxboot: reproducible builds: Embeds user id and group id in cpio files

Date: Sun, 03 Jan 2021 00:39:58 -0800

[Message part 1 (text/plain, inline)]

On 2020-12-31, Vagrant Cascadian wrote:
> On 2020-12-31, Vagrant Cascadian wrote:
>> Various cpio archives shipped in gfxboot contain the user id and group
>> id of the build user:
>>
>>   https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/gfxboot.html
>>
>>   etc/bootsplash/example_01/cdrom/bootlogo
>>
>>   -rw-r--r--···1·····1111·····1111····42639·2020-12-24·13:17:48.000000·init
>>   vs.
>>   -rw-r--r--···1·····2222·····2222····42639·2022-01-26·19:45:05.000000·init
>>
>>
>> The attached patch fixes this by passing the owner argument to the cpio
>> calls when creating the archives.
>
> This is fixed upstream:
>
>   https://github.com/openSUSE/gfxboot/pull/35
>
>> Unfortunately, the cpio archives also embed the timestamps of the files
>> included, which will likely vary between builds, so this does not
>> resolve all reproducibility issues with these archives.
>
> Timestamp issues also fixed upstream in the same pull request.

The first two patches are the above mentioned patches from upstream, and
fix the themes shipped in gfxboot-themes package.


> I think applying similar patches to themes/examples* may still be
> needed.

The remaining patches apply similar fixes to the gfxboot script and to
the themes/examples* which are included in the gfxboot-dev package.

One of the patches removes directories from the cpio archive, as the
example themes only included a "." directory with timestamps. This patch
needs further testing to ensure it behaves properly.


With these patches and the locale patch from #979125, gfxboot should be
reproducible.


live well,
  vagrant

[0001-ensure-theme-builds-are-reproducible-bsc-1124165.patch (text/x-diff, inline)]

From 2dfa8c4db749531e819fd5901593bec14546e388 Mon Sep 17 00:00:00 2001
From: Steffen Winterfeldt <wfeldt@opensuse.org>
Date: Tue, 5 Feb 2019 11:37:39 +0100
Subject: [PATCH 1/6] ensure theme builds are reproducible (bsc #1124165)

Themes contains two cpio archives. Ensure they are identical in each
build.
---
 themes/openSUSE/Makefile | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/themes/openSUSE/Makefile b/themes/openSUSE/Makefile
index 3a71f9b..3f13519 100644
--- a/themes/openSUSE/Makefile
+++ b/themes/openSUSE/Makefile
@@ -55,8 +55,8 @@ bootlogo: src/main.bin src/gfxboot.cfg help-install/.ready po/.ready fonts/.read
 ifdef DEFAULT_LANG
 	@echo $(DEFAULT_LANG) >bootlogo.dir/lang
 endif
-	@sh -c 'cd bootlogo.dir; chmod +t * ; chmod -t init languages'
-	@sh -c 'cd bootlogo.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet -o >../bootlogo'
+	@sh -c 'cd bootlogo.dir; chmod +t * ; chmod -t init languages ; touch -r ../src/main.bc *'
+	@sh -c 'cd bootlogo.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet --reproducible --owner=+0:+0 -o >../bootlogo'
 
 message: src/main.bin src/gfxboot.cfg help-boot/.ready po/.ready fonts/.ready
 	@rm -rf message.dir
@@ -71,7 +71,8 @@ ifdef DEFAULT_LANG
 	@echo $(DEFAULT_LANG) >message.dir/lang
 	@echo $(DEFAULT_LANG) >>message.dir/languages
 endif
-	@sh -c 'cd message.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet -o >../message'
+	@sh -c 'cd message.dir; touch -r ../src/main.bc *'
+	@sh -c 'cd message.dir; echo * | sed -e "s/ /\n/g" | cpio --quiet --reproducible --owner=+0:+0 -o >../message'
 
 clean:
 	@for i in $(SUBDIRS) ; do [ ! -f $$i/Makefile ] ||  make -C $$i clean || break ; done
-- 
2.30.0

[0002-adjust-unpack_bootlogo-script.patch (text/x-diff, inline)]

From ed66277ddff593ec565a245c74944f1a2c7344bd Mon Sep 17 00:00:00 2001
From: Steffen Winterfeldt <wfeldt@opensuse.org>
Date: Tue, 5 Feb 2019 13:19:01 +0100
Subject: [PATCH 2/6] adjust unpack_bootlogo script

---
 bin/unpack_bootlogo | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/bin/unpack_bootlogo b/bin/unpack_bootlogo
index ec83d0b..851a601 100755
--- a/bin/unpack_bootlogo
+++ b/bin/unpack_bootlogo
@@ -21,7 +21,7 @@ sub unpack_bootlogo
 
   @files = `cpio --quiet -t <$dir/bootlogo`;
 
-  system "cd $tmp; cpio --quiet -i <../bootlogo";
+  system "cd $tmp; cpio --quiet --preserve-modification-time -i <../bootlogo";
 
   for (@files) {
     chomp;
@@ -48,7 +48,7 @@ sub unpack_bootlogo
     }
   }
 
-  open P, "| cd $tmp; cpio --quiet -o >../bootlogo";
+  open P, "| cd $tmp; cpio --quiet --reproducible --owner=+0:+0 -o >../bootlogo";
   print P "$_\n" for grep $_, @files;
   if($xdir) { print P "$_\n" for @ext }
   close P;
-- 
2.30.0

[0004-gfxboot-pass-reproducible-and-owner-to-cpio.patch (text/x-diff, inline)]

From 82bbe3441842dea44396dc5905923d4145be3c72 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Fri, 1 Jan 2021 03:38:21 +0000
Subject: [PATCH 4/6] gfxboot: pass --reproducible and --owner to cpio.

---
 gfxboot | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gfxboot b/gfxboot
index f7cda36..48e5707 100755
--- a/gfxboot
+++ b/gfxboot
@@ -2597,7 +2597,7 @@ sub pack_archive
     }
 
     if(@pack_list) {
-      open $f, "| ( cd $dir ; cpio --quiet -o ) >$file/$archive";
+      open $f, "| ( cd $dir ; cpio --quiet --reproducible --owner=+0:+0 -o ) >$file/$archive";
       print $f join("\n", @pack_list);
       close $f;
     }
@@ -2606,7 +2606,7 @@ sub pack_archive
   else {
     $file = $gfxboot_tmp->file;
 
-    $i = system "cd $dir ; find . | cpio --quiet -o >$file 2>/dev/null";
+    $i = system "cd $dir ; find . | cpio --quiet --reproducible --owner=+0:+0 -o >$file 2>/dev/null";
     die "$file: failed to create archive\n" if $i;
   }
 
-- 
2.30.0

[0005-gfxboot-do-not-include-directory-in-cpio-archive.patch (text/x-diff, inline)]

From a94c1e737b8575e44a04d6030801d28763bda983 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 3 Jan 2021 03:21:23 +0000
Subject: [PATCH 5/6] gfxboot: do not include directory in cpio archive.

---
 gfxboot | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gfxboot b/gfxboot
index 48e5707..bb5767f 100755
--- a/gfxboot
+++ b/gfxboot
@@ -2606,7 +2606,7 @@ sub pack_archive
   else {
     $file = $gfxboot_tmp->file;
 
-    $i = system "cd $dir ; find . | cpio --quiet --reproducible --owner=+0:+0 -o >$file 2>/dev/null";
+    $i = system "cd $dir ; find . -type f | cpio --quiet --reproducible --owner=+0:+0 -o >$file 2>/dev/null";
     die "$file: failed to create archive\n" if $i;
   }
 
-- 
2.30.0

[0006-themes-example-Makefile-Set-time-on-files-in-example.patch (text/x-diff, inline)]

From 7c83e791ec4b2f3220516de1ce619123174832e2 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Fri, 1 Jan 2021 04:09:40 +0000
Subject: [PATCH 6/6] themes/example*/Makefile: Set time on files in example
 themes using Makefile as a reference time.

---
 themes/example_01/Makefile | 1 +
 themes/example_02/Makefile | 1 +
 themes/example_03/Makefile | 1 +
 themes/example_04/Makefile | 1 +
 themes/example_05/Makefile | 1 +
 themes/example_06/Makefile | 1 +
 themes/example_07/Makefile | 1 +
 7 files changed, 7 insertions(+)

diff --git a/themes/example_01/Makefile b/themes/example_01/Makefile
index a3d1be4..c54659d 100644
--- a/themes/example_01/Makefile
+++ b/themes/example_01/Makefile
@@ -12,6 +12,7 @@ bootlogo: example_*.bc
 	@rm -rf $@.dir
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 
 clean:
diff --git a/themes/example_02/Makefile b/themes/example_02/Makefile
index c0d551d..5eb150c 100644
--- a/themes/example_02/Makefile
+++ b/themes/example_02/Makefile
@@ -13,6 +13,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp font.fnt $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 
 font:
diff --git a/themes/example_03/Makefile b/themes/example_03/Makefile
index 4e18e35..2c7de7c 100644
--- a/themes/example_03/Makefile
+++ b/themes/example_03/Makefile
@@ -13,6 +13,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp clouds.jpg font.fnt $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 
 font:
diff --git a/themes/example_04/Makefile b/themes/example_04/Makefile
index e54c817..b3bcd70 100644
--- a/themes/example_04/Makefile
+++ b/themes/example_04/Makefile
@@ -13,6 +13,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp clouds.jpg font.fnt $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 
 font:
diff --git a/themes/example_05/Makefile b/themes/example_05/Makefile
index e54c817..b3bcd70 100644
--- a/themes/example_05/Makefile
+++ b/themes/example_05/Makefile
@@ -13,6 +13,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp clouds.jpg font.fnt $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 
 font:
diff --git a/themes/example_06/Makefile b/themes/example_06/Makefile
index 0a3c7cd..88c0b08 100644
--- a/themes/example_06/Makefile
+++ b/themes/example_06/Makefile
@@ -16,6 +16,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp $(FILES) $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 	@ln -snf bootlogo message
 
diff --git a/themes/example_07/Makefile b/themes/example_07/Makefile
index 0a3c7cd..88c0b08 100644
--- a/themes/example_07/Makefile
+++ b/themes/example_07/Makefile
@@ -16,6 +16,7 @@ bootlogo: example_*.bc font
 	@mkdir $@.dir
 	$(GFXBOOT_COMPILE) $(BFLAGS) -l $@.log -c $< $@.dir/init
 	@cp $(FILES) $@.dir
+	touch --reference Makefile $@.dir/*
 	$(GFXBOOT) --archive $@.dir --pack-archive $@
 	@ln -snf bootlogo message
 
-- 
2.30.0

[signature.asc (application/pgp-signature, inline)]

Message #22 received at 978946@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 978946@bugs.debian.org

Subject: Re: gfxboot: reproducible builds: Embeds user id and group id in cpio files

Date: Sun, 03 Jan 2021 00:56:22 -0800

[Message part 1 (text/plain, inline)]

On 2021-01-03, Vagrant Cascadian wrote:
> One of the patches removes directories from the cpio archive, as the
> example themes only included a "." directory with timestamps. This patch
> needs further testing to ensure it behaves properly.

...

> From a94c1e737b8575e44a04d6030801d28763bda983 Mon Sep 17 00:00:00 2001
> From: Vagrant Cascadian <vagrant@reproducible-builds.org>
> Date: Sun, 3 Jan 2021 03:21:23 +0000
> Subject: [PATCH 5/6] gfxboot: do not include directory in cpio archive.
>
> ---
>  gfxboot | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/gfxboot b/gfxboot
> index 48e5707..bb5767f 100755
> --- a/gfxboot
> +++ b/gfxboot
> @@ -2606,7 +2606,7 @@ sub pack_archive
>    else {
>      $file = $gfxboot_tmp->file;
>  
> -    $i = system "cd $dir ; find . | cpio --quiet --reproducible --owner=+0:+0 -o >$file 2>/dev/null";
> +    $i = system "cd $dir ; find . -type f | cpio --quiet --reproducible --owner=+0:+0 -o >$file 2>/dev/null";
>      die "$file: failed to create archive\n" if $i;
>    }
>  
> -- 
> 2.30.0

Actually, using "find . -mindepth 1" instead of "find . -type f" seems
safer, as it will only exclude the "." directory, in case a theme makes
use of a subdirectory... though all currently shipped themes do not
appear to include subdirectories.


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #27 received at 978946@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 978946@bugs.debian.org

Subject: Re: gfxboot: reproducible builds: Embeds user id, group id and timestamps in cpio files

Date: Sun, 03 Jan 2021 01:33:32 -0800

[Message part 1 (text/plain, inline)]

Control: forwarded 978946 https://github.com/openSUSE/gfxboot/pull/49
Control: retitle 978946 gfxboot: reproducible builds: Embeds user id, group id and timestamps in cpio files

On 2021-01-03, Vagrant Cascadian wrote:
> On 2020-12-31, Vagrant Cascadian wrote:
>> I think applying similar patches to themes/examples* may still be
>> needed.
>
> The remaining patches apply similar fixes to the gfxboot script and to
> the themes/examples* which are included in the gfxboot-dev package.

Submitted a pull request upstream for the patches not already applied
upstream.


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #36 received at 978946@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: 978946@bugs.debian.org

Subject: Re: gfxboot: reproducible builds: Embeds user id, group id and timestamps in cpio files

Date: Sun, 03 Jan 2021 01:35:09 -0800

user reproducible-builds@lists.alioth.debian.org
usertags 978946 + timestamps
thanks

Message #41 received at 978946-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 978946-close@bugs.debian.org

Subject: Bug#978946: fixed in gfxboot 4.5.73-1

Date: Mon, 04 Jan 2021 02:34:04 +0000

Source: gfxboot
Source-Version: 4.5.73-1
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
gfxboot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 978946@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated gfxboot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 03 Jan 2021 18:04:09 -0800
Source: gfxboot
Architecture: source
Version: 4.5.73-1
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 783398 978946 979125
Changes:
 gfxboot (4.5.73-1) unstable; urgency=medium
 .
   * QA upload.
   * Update to new upstream version 4.5.73. (Closes: #783398)
   * gfxboot: pass --reproducible and --owner to cpio. (Closes: #978946)
   * gfxboot: avoid including the "." directory in the cpio archive.
     (Closes: #978946)
   * themes/example*/Makefile: Set time on files in example themes using
     Makefile as a reference time.  (Closes: #978946)
   * debian/rules: Pass C.UTF-8 locale when building documentation.
     (Closes: #979125)
   * debian/control: Set Rules-Requires-Root to "no".
   * debian/rules: Create a VERSION file since upstream expects it.
   * debian/rules: Do not build test themes.
   * debian/control: Update Vcs headers.
   * debian/copyright: Use https URLs and drop broken link
   * debian/control: Update Homepage.
   * debian/source/options, debian/rules: Drop custom compression.
   * Update to debhelper-compat 13.
   * debian/rules: Remove obsolete dh_install override.
   * debian/rules: Do not pass --parallel to dh as it is now the default.
   * debian/rules: Add target to update upstream changelog.
   * changelog.upstream: Add changelog for upstream version 4.5.73.
   * debian/rules: Copy upstream changelog during build.
   * gfxboot-themes: Add lintian override for
     package-contains-documentation-outside-usr-share-doc.
   * debian/control: Update Standards-Version to 4.5.1.
   * debian/control: Add ${perl:Depends} to Depends.
Checksums-Sha1:
 c2c5c7d74ab86c4b39d77940c226855844f1f449 1609 gfxboot_4.5.73-1.dsc
 13de6fbf9acbfb5551a3a2804cf9e82c9870c3ef 9781997 gfxboot_4.5.73.orig.tar.gz
 acc01c0cc21f274acbc3994b9c0c4b011874eea5 12716 gfxboot_4.5.73-1.debian.tar.xz
Checksums-Sha256:
 6f23a28ae06f1decb79112990d8cc7d034134c92fb1f6e41d8533b7e1f626d6e 1609 gfxboot_4.5.73-1.dsc
 13e2e3e225d9782b9adf82197176d9ba4545d8b613915f0b2b5628c3d99fc3bd 9781997 gfxboot_4.5.73.orig.tar.gz
 15ef0ce75ecef853b2fe21879c0db21fb14b194cabba11d1d677be86879fad62 12716 gfxboot_4.5.73-1.debian.tar.xz
Files:
 e08278a1f5692bf7c7fb13390a02a0bb 1609 misc optional gfxboot_4.5.73-1.dsc
 500a2194268bb5c1dbb497b2b8105bd3 9781997 misc optional gfxboot_4.5.73.orig.tar.gz
 53a759501f614a230e960d4bda0fc062 12716 misc optional gfxboot_4.5.73-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX/J5tSAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqitCAP9NJvtds5zTP2ze
RRVyRluRrlRJiSukz/f3BxtlbkblnQD/aPOi35EZQReo+mHqDWUdfjXuwAOackm6
U3/BNsr4SQs=
=miBm
-----END PGP SIGNATURE-----

Message #46 received at 978946-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 978946-close@bugs.debian.org

Subject: Bug#978946: fixed in gfxboot 4.5.73-2

Date: Mon, 04 Jan 2021 18:33:24 +0000

Source: gfxboot
Source-Version: 4.5.73-2
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
gfxboot, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 978946@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated gfxboot package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 04 Jan 2021 10:14:56 -0800
Source: gfxboot
Architecture: source
Version: 4.5.73-2
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 978946
Changes:
 gfxboot (4.5.73-2) unstable; urgency=medium
 .
   * QA upload.
   * themes/example*/Makefile: Use the .bc files as a reference date.
     (Closes: #978946)
Checksums-Sha1:
 68108cf087dd1b5e07a775119254ac2d93f77ac7 1609 gfxboot_4.5.73-2.dsc
 1ed22c33845f539ae43e0d31ec715a8064ee8202 12976 gfxboot_4.5.73-2.debian.tar.xz
Checksums-Sha256:
 69c201d5c09dd4bce41ccdbb1696847a082afada71a65964947d32cc7359c6f3 1609 gfxboot_4.5.73-2.dsc
 facef39eb05480eae0513473cf7cc83d3e84dab376c438819e7ebb6cff8cefbc 12976 gfxboot_4.5.73-2.debian.tar.xz
Files:
 b166d790bd9caee69638ea0bc5c7fbb4 1609 misc optional gfxboot_4.5.73-2.dsc
 93eadf6e03dd78d0e1332425d6b09147 12976 misc optional gfxboot_4.5.73-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX/Nc7yAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqhqaAQDVky269lLwwZFS
BFjK6LdRLZyVNrYKvF65MWssg1cwHQD/c0nRF7hCnE/8EgPv15nXX74dcGY1qQqN
AAGHtUCAAwc=
=GnPI
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.