Debian Bug report logs - #986601
libjama -- Fails to build reproducibly: usrmerge + gzip inserts timestamps

[Message part 1 (text/plain, inline)]
Package: libjama
Version: 1.2.4-2.1
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: usrmerge
X-Debbugs-Cc: nilesh@debian.org, reproducible-bugs@lists.alioth.debian.org

Hi,

libjama does not build reproducibly due to two reasons:
	- gzip inserts time stamps so -n flag should be added
	- tar cf gives different permissions due to usrmerge.

The attached patch fixes this, please consider applying and uploading.

Nilesh

[libjama-reproducible.diff (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]
[Message part 1 (text/plain, inline)]
Control: user reproducible-builds@lists.alioth.debian.org
Control: usertags 986601 + timestamps umask
Control: usertags 986601 - usrmerge

On 2021-04-08, Nilesh Patra wrote:
> Package: libjama
...
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: usrmerge

> libjama does not build reproducibly due to two reasons:
> 	- gzip inserts time stamps so -n flag should be added

Added timestamps usertag.


> 	- tar cf gives different permissions due to usrmerge.

This does not appear related to usrmerge, but due to differences in
umask. Adjusted usertags to match.


Thanks for submitting reproducible builds patches!


live well,
  vagrant

> diff --git a/debian/rules b/debian/rules
> index da0fcbc..f75912b 100755
> --- a/debian/rules
> +++ b/debian/rules
> @@ -17,11 +17,11 @@ binary-indep: build
>  	install -p -m 644 Changes debian/tmp/usr/share/doc/libjama-dev/changelog
>  	install -p -m 644 debian/changelog debian/tmp/usr/share/doc/libjama-dev/changelog.Debian
>  	install -p -m 644 examples debian/tmp/usr/share/doc/libjama-dev
> -	gzip -9 debian/tmp/usr/share/doc/libjama-dev/*
> +	gzip -9n debian/tmp/usr/share/doc/libjama-dev/*
>  	install -p -m 644 README debian/tmp/usr/share/doc/libjama-dev
>  	install -p -m 644 debian/copyright debian/tmp/usr/share/doc/libjama-dev
> -	tar cf debian/tmp/usr/share/doc/libjama-dev/html-jama.tar html
> -	gzip -9 debian/tmp/usr/share/doc/libjama-dev/html-jama.tar
> +	tar caf debian/tmp/usr/share/doc/libjama-dev/html-jama.tar html --owner=0 --group=0 --numeric-owner --sort=name --mode=a+rX,og-w
> +	gzip -9n debian/tmp/usr/share/doc/libjama-dev/html-jama.tar
>  	chmod 644 debian/tmp/usr/share/doc/libjama-dev/html-jama.tar.gz
>  
>  	dpkg-gencontrol -isp
> _______________________________________________
> Reproducible-bugs mailing list
> Reproducible-bugs@alioth-lists.debian.net
> https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/reproducible-bugs

[signature.asc (application/pgp-signature, inline)]
[Message part 1 (text/plain, inline)]
user reproducible-builds@lists.alioth.debian.org
usertags 986601 + timestamps umask
usertags 986601 - usrmerge
thanks

Re-trying by sending directly to control@bugs.debian.org.

Guess the syntax using "Control" headers didn't quite work out...


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]
[Message part 1 (text/plain, inline)]
On 4/8/21 10:45 PM, Vagrant Cascadian wrote:
> Control: user reproducible-builds@lists.alioth.debian.org
> Control: usertags 986601 + timestamps umask
> Control: usertags 986601 - usrmerge
>
> On 2021-04-08, Nilesh Patra wrote:
>> Package: libjama
> ...
>> User: reproducible-builds@lists.alioth.debian.org
>> Usertags: usrmerge
>> libjama does not build reproducibly due to two reasons:
>> 	- gzip inserts time stamps so -n flag should be added
> Added timestamps usertag.
>
>
>> 	- tar cf gives different permissions due to usrmerge.
> This does not appear related to usrmerge, but due to differences in
> umask. Adjusted usertags to match.
Argh, righty. I wrote "usrmerge" instead of "umask"
> Thanks for submitting reproducible builds patches!
Thanks for pointing this out!


[signature.asc (application/pgp-signature, attachment)]
[Message part 1 (text/plain, inline)]
Control: tags 986601 pending

On 2021-04-08, Nilesh Patra wrote:
> libjama does not build reproducibly due to two reasons:
> 	- gzip inserts time stamps so -n flag should be added
> 	- tar cf gives different permissions due to usrmerge.

I have uploaded an NMU to DELAYED/10 fixing this issue:

diff -u libjama-1.2.4/debian/changelog libjama-1.2.4/debian/changelog

--- libjama-1.2.4/debian/changelog
+++ libjama-1.2.4/debian/changelog
@@ -1,3 +1,13 @@
+libjama (1.2.4-2.3) unstable; urgency=medium
+
+  * Non-maintainer upload.
+
+  [ Nilesh Patra ]
+  * Build reproducibly: fix timestamps issues by passing gzip -n and fix
+    permissions in included shipped tarball. (Closes: #986601)
+
+ -- Vagrant Cascadian <vagrant@reproducible-builds.org>  Thu, 15 Dec 2022 13:18:25 -0800
+
 libjama (1.2.4-2.2) unstable; urgency=medium
 
   * Non-maintainer upload.
diff -u libjama-1.2.4/debian/rules libjama-1.2.4/debian/rules
--- libjama-1.2.4/debian/rules
+++ libjama-1.2.4/debian/rules
@@ -17,11 +17,11 @@
 	install -p -m 644 Changes debian/tmp/usr/share/doc/libjama-dev/changelog
 	install -p -m 644 debian/changelog debian/tmp/usr/share/doc/libjama-dev/changelog.Debian
 	install -p -m 644 examples debian/tmp/usr/share/doc/libjama-dev
-	gzip -9 debian/tmp/usr/share/doc/libjama-dev/*
+	gzip -9n debian/tmp/usr/share/doc/libjama-dev/*
 	install -p -m 644 README debian/tmp/usr/share/doc/libjama-dev
 	install -p -m 644 debian/copyright debian/tmp/usr/share/doc/libjama-dev
-	tar cf debian/tmp/usr/share/doc/libjama-dev/html-jama.tar html
-	gzip -9 debian/tmp/usr/share/doc/libjama-dev/html-jama.tar
+	tar caf debian/tmp/usr/share/doc/libjama-dev/html-jama.tar html --owner=0 --group=0 --numeric-owner --sort=name --mode=a+rX,og-w
+	gzip -9n debian/tmp/usr/share/doc/libjama-dev/html-jama.tar
 	chmod 644 debian/tmp/usr/share/doc/libjama-dev/html-jama.tar.gz
 
 	dpkg-gencontrol -isp


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]
Source: libjama
Source-Version: 1.2.4-2.3
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
libjama, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 986601@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated libjama package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 15 Dec 2022 13:18:25 -0800
Source: libjama
Architecture: source
Version: 1.2.4-2.3
Distribution: unstable
Urgency: medium
Maintainer: Juan Esteban Monsalve Tobon <esteban@v7w.com>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 986601
Changes:
 libjama (1.2.4-2.3) unstable; urgency=medium
 .
   * Non-maintainer upload.
 .
   [ Nilesh Patra ]
   * Build reproducibly: fix timestamps issues by passing gzip -n and fix
     permissions in included shipped tarball. (Closes: #986601)
Checksums-Sha1:
 fe226ee396a0abcc70d6cccb006a76c6b079fde9 1178 libjama_1.2.4-2.3.dsc
 b5aeaef25cbc91d32ea1100b2fbf23d8fd517734 9978 libjama_1.2.4-2.3.diff.gz
Checksums-Sha256:
 00219d0d1a7ace92d4eb9960175f1f39a63bfaecde03676fff434437e70b0f67 1178 libjama_1.2.4-2.3.dsc
 017b667170b990a40d05fd7acd4ac80e6644db023b5a14e1dae65f27bb4c80f8 9978 libjama_1.2.4-2.3.diff.gz
Files:
 0ae99aba68d16a5ef6da9c7ab269bdcd 1178 math optional libjama_1.2.4-2.3.dsc
 2f9bf60d10f2c22e272c34da9937bb2b 9978 math optional libjama_1.2.4-2.3.diff.gz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCY5uRLCAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqoHxAQDooU3uyttQPpef
FILG7x5AH1Iz389tHxVbsB9Fp0F7SQD6AvgNtb41bzCpODVuqk11KJYKoZCxjBfs
4jxPZ1Wl1QI=
=jP2q
-----END PGP SIGNATURE-----





Debian Bug report logs - #986601 libjama -- Fails to build reproducibly: usrmerge + gzip inserts timestamps

Debian Bug report logs - #986601
libjama -- Fails to build reproducibly: usrmerge + gzip inserts timestamps