Debian Bug report logs - #983832
d-itg: reproducible builds: Embedded timestamps in PDF files

version graph

Package: src:d-itg; Maintainer for src:d-itg is Debian QA Group <packages@qa.debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Tue, 2 Mar 2021 02:54:01 UTC

Severity: normal

Tags: patch

Fixed in version d-itg/2.8.1-r1023-6

Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>:
Bug#983832; Package src:d-itg. (Tue, 02 Mar 2021 02:54:04 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Debian QA Group <packages@qa.debian.org>. (Tue, 02 Mar 2021 02:54:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: d-itg: reproducible builds: Embedded timestamps in PDF files
Date: Mon, 01 Mar 2021 18:50:33 -0800
[Message part 1 (text/plain, inline)]
Source: d-itg
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in /usr/share/doc/d-itg/d-itg-manual.pdf:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/d-itg.html

  March·29,·2022
  vs.
  February·24,·2021


The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/


Thanks for maintaining d-itg!


live well,
  vagrant
[0001-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]
From c75d2dc65011d9a935e2a38ce26942e4088019b3 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 2 Mar 2021 02:44:02 +0000
Subject: [PATCH] debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to
 respect SOURCE_DATE_EPOCH when generating d-itg-manual.pdf.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 68f1e27..969c565 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,9 @@
 DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/buildflags.mk
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
 %:
 	dh $@
 
-- 
2.20.1

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
You have taken responsibility. (Sat, 08 Oct 2022 21:09:02 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Sat, 08 Oct 2022 21:09:02 GMT) (full text, mbox, link).


Message #10 received at 983832-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 983832-close@bugs.debian.org
Subject: Bug#983832: fixed in d-itg 2.8.1-r1023-6
Date: Sat, 08 Oct 2022 21:04:42 +0000
Source: d-itg
Source-Version: 2.8.1-r1023-6
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
d-itg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 983832@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated d-itg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 08 Oct 2022 12:28:56 -0700
Source: d-itg
Architecture: source
Version: 2.8.1-r1023-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 983832
Changes:
 d-itg (2.8.1-r1023-6) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to respect
     SOURCE_DATE_EPOCH when generating d-itg-manual.pdf. (Closes: #983832)
   * debian/control: Set Rules-Requires-Root to "no".
Checksums-Sha1:
 473c740c0960c0a773f1c663406eae15bd47d74d 1603 d-itg_2.8.1-r1023-6.dsc
 a34a43368f97dcdd1ca308143807164e0a1c851e 4744 d-itg_2.8.1-r1023-6.debian.tar.xz
Checksums-Sha256:
 8fc886062065f866fb7d144cb5afa84f22a98b6cc7cfff940492ec95b9a1e40a 1603 d-itg_2.8.1-r1023-6.dsc
 4c5b8eff03448f2ed7b85a1ec0e68faca16251c964299017c4b3c30c0e4a8c9e 4744 d-itg_2.8.1-r1023-6.debian.tar.xz
Files:
 337e1e4bfed43696ff3b3cc0ef07a34b 1603 net optional d-itg_2.8.1-r1023-6.dsc
 53befaab4a0020014b42b925bc83da1e 4744 net optional d-itg_2.8.1-r1023-6.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCY0HXRyAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqhukAP9FZH0/G1KvVrAE
ufoLpcqnxK6IVgkjhTEZJQRsj8jZegEA1mJXmJKRlMft5mJmBTFA3pCfU2izDK2b
MHcrJkDJBQk=
=/Pr8
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Fri, 11 Nov 2022 07:25:29 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 11:07:48 2023; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.