Debian Bug report logs - #991106
antlr: reproducible builds: timestamps .jar file

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: antlr: reproducible builds: timestamps .jar file

Date: Wed, 14 Jul 2021 07:45:53 -0700

[Message part 1 (text/plain, inline)]

Source: antlr
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Timestamps are embedded in the antlr.jar file:

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/antlr.html

  ./usr/share/java/antlr-2.7.7.jar

  System.err.println("ANTLR·Parser·Generator···Version·2.7.7·(20210621)···1989-2005");
  vs.
  System.err.println("ANTLR·Parser·Generator···Version·2.7.7·(20220726)···1989-2005");

  Tool.version·=·"2.7.7·(20210621)";
  vs.
  Tool.version·=·"2.7.7·(20220726)";

  public·static·final·String·datestamp·=·"20210621";
  vs.
  public·static·final·String·datestamp·=·"20220726";

  public·static·final·String·project_version·=·"2.7.7·(20210621)";
  vs.
  public·static·final·String·project_version·=·"2.7.7·(20220726)";


The attached patches fix this by adding support for SOURCE_DATE_EPOCH to
configure.in and Makefile.in.


With these patches applied (and the recently submitted patch regarding
example Makefiles), antlr should become reproducible on the
tests.reproducible-builds.org infrastructure.


Thanks for maintaining antlr!


live well,
  vagrant

[0002-configure.in-Set-timestamp-from-SOURCE_DATE_EPOCH-va.patch (text/x-diff, inline)]

From 720ef9012317fd3254c5f4624fc076627d7ad434 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 14 Jul 2021 14:25:12 +0000
Subject: [PATCH 2/3] configure.in: Set timestamp from SOURCE_DATE_EPOCH
 variable.

https://reproducible-builds.org/docs/source-date-epoch/
---
 configure.in | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/configure.in b/configure.in
index 8100f62a..c9aa8db0 100644
--- a/configure.in
+++ b/configure.in
@@ -111,7 +111,11 @@ AC_SUBST([APTC])
 VERSION=`echo $PACKAGE_VERSION | cut -d . -f 1`
 SUBVERSION=`echo $PACKAGE_VERSION | cut -d . -f 2`
 PATCHLEVEL=`echo $PACKAGE_VERSION | cut -d . -f 3`
-TIMESTAMP=`date +%Y%m%d`
+# Set TIMESTAMP from SOURCE_DATE_EPOCH
+# https://reproducible-builds.org/docs/source-date-epoch/
+SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH:-$(date +%s)}"
+DATE_FMT="+%Y%m%d"
+TIMESTAMP=`date -u -d "@$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u -r "$SOURCE_DATE_EPOCH" "$DATE_FMT" 2>/dev/null || date -u "$DATE_FMT"`
 
 ## @abs_this_builddir@  - absolute path to top of build directory.
 ## According to GNU autoconf we can rely on that there's a proper
-- 
2.32.0

[0003-Makefile.in-Set-timestamp-from-SOURCE_DATE_PEOCH-env.patch (text/x-diff, inline)]

From 70f31c66e4e8b0d3a2b9a66a3edfed74f991c2a4 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 14 Jul 2021 14:27:53 +0000
Subject: [PATCH 3/3] Makefile.in: Set timestamp from SOURCE_DATE_PEOCH
 environment variable.

https://reproducible-builds.org/docs/source-date-epoch/
---
 Makefile.in | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/Makefile.in b/Makefile.in
index 8fa86d69..e44ca4b8 100644
--- a/Makefile.in
+++ b/Makefile.in
@@ -46,7 +46,14 @@ maintainer-clean: distclean
 # Rule to make a tarball exclusive all kinds of fluff
 #
 
-TIMESTAMP       = $(shell date +%Y%m%d)
+# Set TIMESTAMP from SOURCE_DATE_EPOCH
+# https://reproducible-builds.org/docs/source-date-epoch/
+DATE_FMT = +%Y%m%d
+ifdef SOURCE_DATE_EPOCH
+    TIMESTAMP ?= $(shell date -u -d "@$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u -r "$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u "$(DATE_FMT)")
+else
+    TIMESTAMP ?= $(shell date "$(DATE_FMT)")
+endif
 TAR_DIR         = $(versioneddir)
 TAR_FILE	      = $(versioneddir).tar
 
-- 
2.32.0

[signature.asc (application/pgp-signature, inline)]

Message #8 received at 991106-submitter@bugs.debian.org (full text, mbox, reply):

From: Tony Mancill <noreply@salsa.debian.org>

To: 991106-submitter@bugs.debian.org

Subject: Bug#991106 marked as pending in antlr

Date: Wed, 11 Aug 2021 03:56:40 +0000

Control: tag -1 pending

Hello,

Bug #991106 in antlr reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/java-team/antlr/-/commit/e180ba89226ee6e56183a446e4ddeb6fbee79c19

------------------------------------------------------------------------
add patches for reproducible builds (timestamps in .jar file) (Closes: #991106)
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/991106

Message #15 received at 991106-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 991106-close@bugs.debian.org

Subject: Bug#991106: fixed in antlr 2.7.7+dfsg-11

Date: Fri, 20 Aug 2021 04:33:57 +0000

Source: antlr
Source-Version: 2.7.7+dfsg-11
Done: tony mancill <tmancill@debian.org>

We believe that the bug you reported is fixed in the latest version of
antlr, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 991106@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
tony mancill <tmancill@debian.org> (supplier of updated antlr package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 19 Aug 2021 20:39:15 -0700
Source: antlr
Architecture: source
Version: 2.7.7+dfsg-11
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers <pkg-java-maintainers@lists.alioth.debian.org>
Changed-By: tony mancill <tmancill@debian.org>
Closes: 991104 991106
Changes:
 antlr (2.7.7+dfsg-11) unstable; urgency=medium
 .
   * Add patches for reproducible builds:
     - Do not install example Makefiles (Closes: #991104)
     - Predictable timestamps in .jar file (Closes: #991106)
     Thanks to Vagrant Cascadian for the patches.
   * antlr-doc and libantlr-java are Multi-Arch: foreign
   * Bump Standards-Version to 4.5.1
   * Use debhelper-compat 13
   * Freshen debian/copyright
   * Add myself to Uploaders
Checksums-Sha1:
 7b69be57c5a54bc5ed3f08027564bfa75b4a96d7 2295 antlr_2.7.7+dfsg-11.dsc
 bee343931d8e2cc831ab16c7a5d30e76ce3624cf 15536 antlr_2.7.7+dfsg-11.debian.tar.xz
 089fbaed46c7667f0479fa930cd031bdfa31892d 10334 antlr_2.7.7+dfsg-11_amd64.buildinfo
Checksums-Sha256:
 c3602caeef055462644ff41c00090d3f70c10d55b8ab73eb5dc556fec09a6a59 2295 antlr_2.7.7+dfsg-11.dsc
 519396e88fb92db24462408a86776301adaa86855702929db324efc66d41b357 15536 antlr_2.7.7+dfsg-11.debian.tar.xz
 19341458d1154a04b08bdfa4d334f50ab1a313dbe78d2c1c751b35ff8cd4e4dc 10334 antlr_2.7.7+dfsg-11_amd64.buildinfo
Files:
 2624b868cf14cb2abaffa71a67caad97 2295 java optional antlr_2.7.7+dfsg-11.dsc
 6586aa840438cfea752821734635eb6e 15536 java optional antlr_2.7.7+dfsg-11.debian.tar.xz
 735b1af163df04fcb44e3d3feddb7e87 10334 java optional antlr_2.7.7+dfsg-11_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=SMrO
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.