Debian Bug report logs - #990999
biber: reproducible builds: timezone-specific timestamps in PDF

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: biber: reproducible builds: timezone-specific timestamps in PDF

Date: Mon, 12 Jul 2021 09:02:09 -0700

[Message part 1 (text/plain, inline)]

Source: biber
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps timezone
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

A timezone-specific timestamp is embedded in biber.pdf:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/biber.html

  CreationDate:·"D:20210109045745-12'00'"
  vs.
  CreationDate:·"D:20210110065745+14'00'"


The attached patches fix this by calling lualatex with the --utc
argument in debian/rules and by patching biber.tex to not include a
document ID.

With these patches applied, biber should become reproducible on the
tests.reproducible-builds.org infrastructure.


Thanks for maintaining biber!


live well,
  vagrant

[0001-doc-biber.tex-Do-not-generate-document-ID.patch (text/x-diff, inline)]

From e28893e3a4f317e2abce517b24c7707c760d1878 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 12 Jul 2021 15:46:27 +0000
Subject: [PATCH 1/2] doc/biber.tex: Do not generate document ID.

The document ID is typically a hash of various information about the
built document including build path and time of document build.
---
 doc/biber.tex | 1 +
 1 file changed, 1 insertion(+)

diff --git a/doc/biber.tex b/doc/biber.tex
index 0df48fad..02e03b6a 100644
--- a/doc/biber.tex
+++ b/doc/biber.tex
@@ -1,4 +1,5 @@
 \documentclass{ltxdockit}
+\pdfvariable suppressoptionalinfo \numexpr512\relax
 \usepackage{btxdockit}
 \usepackage[british]{babel}
 \usepackage[strict=true,autostyle=true]{csquotes}
-- 
2.32.0

[0002-debian-rules-Build-PDF-using-UTC-timezone-and-specif.patch (text/x-diff, inline)]

From ffdb8786f64b2b195cb93be22f4a0356a0f56bc2 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Mon, 12 Jul 2021 15:49:11 +0000
Subject: [PATCH 2/2] debian/rules: Build PDF using UTC timezone and specified
 output directory.

Without specifying the timezone, embedded timestamps in the document
may vary between builds.

https://reproducible-builds.org/docs/timezones/
---
 debian/rules | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/debian/rules b/debian/rules
index 94f0241c..820c0048 100755
--- a/debian/rules
+++ b/debian/rules
@@ -10,8 +10,8 @@ export TEXMFVAR
 
 override_dh_auto_build:
 	dh_auto_build
-	# does not work at the moment
-	cd doc && lualatex biber.tex && lualatex biber.tex && lualatex biber.tex
-	
+	# Build biber.pdf using utc timezone
+	lualatex --utc --output-directory=doc doc/biber.tex
+
 override_dh_auto_test:
 	dh_auto_test -- test_files="$(TEST_FILES)"
-- 
2.32.0

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 990999@bugs.debian.org (full text, mbox, reply):

From: Hilmar Preuße <hille42@web.de>

To: Vagrant Cascadian <vagrant@reproducible-builds.org>

Cc: 990999@bugs.debian.org

Subject: Re: Bug#990999: biber: reproducible builds: timezone-specific timestamps in PDF

Date: Wed, 1 Sep 2021 09:42:35 +0200

[Message part 1 (text/plain, inline)]

X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Am 12.07.2021 um 18:02 teilte Vagrant Cascadian mit:

Hi Vagrant,

> The attached patches fix this by calling lualatex with the --utc
> argument in debian/rules and by patching biber.tex to not include a
> document ID.
> 
> With these patches applied, biber should become reproducible on the
> tests.reproducible-builds.org infrastructure.
> 
Thanks for the patches. Did you consider to offer the first patch to 
biber upstream?

The second patch I've committed to your git repo.

Hilmar
-- 
sigfault

[OpenPGP_signature (application/pgp-signature, attachment)]

Message #15 received at 990999@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: Hilmar Preuße <hille42@web.de>

Cc: 990999@bugs.debian.org

Subject: Re: Bug#990999: biber: reproducible builds: timezone-specific timestamps in PDF

Date: Wed, 08 Sep 2021 17:06:32 -0700

[Message part 1 (text/plain, inline)]

On 2021-09-01, Hilmar Preuße wrote:
> Am 12.07.2021 um 18:02 teilte Vagrant Cascadian mit:
>> The attached patches fix this by calling lualatex with the --utc
>> argument in debian/rules and by patching biber.tex to not include a
>> document ID.
>> 
>> With these patches applied, biber should become reproducible on the
>> tests.reproducible-builds.org infrastructure.
>> 
> Thanks for the patches. Did you consider to offer the first patch to 
> biber upstream?


doc/biber.tex: Do not generate document ID.

I could submit it upstream, if you'd like.

Since I'm not familiar with the biber package, I do like to solicit
input from the maintainers of the Debian packages as they often have a
working relationship with upstream.


> The second patch I've committed to your git repo.

Thanks!

For the record, looks like it was commit:

  https://github.com/debian-tex/biber/commit/bcae25a0592b69650389e46a1910252160745c9d


live well,
  vagrant

[signature.asc (application/pgp-signature, inline)]

Message #20 received at 990999@bugs.debian.org (full text, mbox, reply):

From: Hilmar Preuße <hille42@web.de>

To: Vagrant Cascadian <vagrant@reproducible-builds.org>

Cc: 990999@bugs.debian.org

Subject: Re: Bug#990999: biber: reproducible builds: timezone-specific timestamps in PDF

Date: Thu, 30 Dec 2021 22:41:45 +0100

[Message part 1 (text/plain, inline)]

Am 09.09.2021 um 02:06 teilte Vagrant Cascadian mit:

Hi,

> I could submit it upstream, if you'd like.
> 
> Since I'm not familiar with the biber package, I do like to solicit
> input from the maintainers of the Debian packages as they often have a
> working relationship with upstream.
> 

Forwarded to upstream: https://github.com/plk/biber/issues/395

Hilmar
-- 
sigfault

[OpenPGP_signature (application/pgp-signature, attachment)]

Message #25 received at 990999-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 990999-close@bugs.debian.org

Subject: Bug#990999: fixed in biber 2.16-2

Date: Fri, 31 Dec 2021 13:18:43 +0000

Source: biber
Source-Version: 2.16-2
Done: Hilmar Preusse <hille42@web.de>

We believe that the bug you reported is fixed in the latest version of
biber, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 990999@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hilmar Preusse <hille42@web.de> (supplier of updated biber package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 31 Dec 2021 13:51:21 +0100
Source: biber
Architecture: source
Version: 2.16-2
Distribution: unstable
Urgency: medium
Maintainer: Debian TeX Task Force <debian-tex-maint@lists.debian.org>
Changed-By: Hilmar Preusse <hille42@web.de>
Closes: 990999
Changes:
 biber (2.16-2) unstable; urgency=medium
 .
   [ Hilmar Preusse ]
   * Move links/install overrides from d/rules into separate files.
   * Call lualatex w/ option --utc when building doc (see #990999).
   * Add patch "reproducible builds: timezone-specific timestamps in PDF".
     (Closes: #990999)
 .
   [ Debian Janitor ]
   * Remove constraints unnecessary since buster:
     + Build-Depends: Drop versioned constraint on libconfig-autoconf-perl,
       libextutils-libbuilder-perl, liblingua-translit-perl,
       libtest-pod-coverage-perl and libtest-pod-perl.
     + biber: Drop versioned constraint on liblingua-translit-perl and
       libunicode-collate-perl in Depends.
Checksums-Sha1:
 3a4a6a5bb05ef6d6de1e7e39aaaaf4f54687935f 3392 biber_2.16-2.dsc
 8d6c2d5a69dfbc951645ccaab8b6d5c864c5cdf3 11972 biber_2.16-2.debian.tar.xz
 adf0e0941d3ce788aac21e264fd48d2b45671e31 13181 biber_2.16-2_source.buildinfo
Checksums-Sha256:
 54f7d5415857440dad20ddf13efbedef9c8deb51370d9221fd41f0240eb02056 3392 biber_2.16-2.dsc
 b67638cc09d4fa645d7993a9d3397c51acdf94e3828e6b6fc48340dba2f28421 11972 biber_2.16-2.debian.tar.xz
 2f08a0ef831d6a4afbcf441aa2c64d31ea6aac75aa6a0f519e5e68205379dc9a 13181 biber_2.16-2_source.buildinfo
Files:
 98c703c749eedbf49131b282b9e3e351 3392 perl optional biber_2.16-2.dsc
 c9abae9b05fe8febd0a7872dc2e9d2f2 11972 perl optional biber_2.16-2.debian.tar.xz
 9d5f79003ecb6d2897284db60dca2e66 13181 perl optional biber_2.16-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=x792
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.