Debian Bug report logs - #993444
libxml-sax-perl: Reproducible content for 'update-perl-sax-parsers'

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Roland Clobus <rclobus@rclobus.nl>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: libxml-sax-perl: Reproducible content for 'update-perl-sax-parsers'

Date: Wed, 01 Sep 2021 15:27:54 +0200

[Message part 1 (text/plain, inline)]

Package: libxml-sax-perl
Version: 1.02+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hello maintainers for libxml-sax-perl,

While working on the “reproducible builds” effort [1], I have noticed
that the output of the script 'update-perl-sax-parsers' is not stable.

You can reproduce this with the following snippet:
mkdir test
PERL_HASH_SEED=0 update-perl-sax-parsers --directory test --file
test/ParserDetails.ini --add XML::SAX::Expat --priority 10
mv test/10-XML\:\:SAX\:\:Expat seed0
PERL_HASH_SEED=42 update-perl-sax-parsers --directory test --file
test/ParserDetails.ini --add XML::SAX::Expat --priority 10
mv test/10-XML\:\:SAX\:\:Expat seed42
md5sum seed*

After issuing the add command, the generated ini file has a random order for
its keys. See [2] for more information.

The attached patch sorts the keys prior to writing the file.
Once applied, it will be possible for the live-build live image with the
Cinnamon desktop to be built reproducibly.

With kind regards,
Roland Clobus

 [1]: https://wiki.debian.org/ReproducibleBuilds
 [2]: https://reproducible-builds.org/docs/stable-outputs/

-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'testing-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-8-amd64 (SMP w/8 CPU threads)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages libxml-sax-perl depends on:
ii  libxml-namespacesupport-perl  1.12-1.1
ii  libxml-sax-base-perl          1.09-1.1
ii  perl                          5.32.1-5
ii  ucf                           3.0043

Versions of packages libxml-sax-perl recommends:
ii  libwww-perl            6.53-1
ii  libxml-sax-expat-perl  0.51-1

libxml-sax-perl suggests no packages.

[reproducible_ini_files.patch (text/plain, attachment)]

Message #8 received at 993444-submitter@bugs.debian.org (full text, mbox, reply):

From: gregor herrmann <noreply@salsa.debian.org>

To: 993444-submitter@bugs.debian.org

Subject: Bug#993444 marked as pending in libxml-sax-perl

Date: Wed, 01 Sep 2021 16:15:00 +0000

Control: tag -1 pending

Hello,

Bug #993444 in libxml-sax-perl reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/perl-team/modules/packages/libxml-sax-perl/-/commit/3bc98c3b4b01ef647c20f79e5311d221b6450291

------------------------------------------------------------------------
Sort the entries in the .ini-files. This generates the files with a constant content.

Closes: #993444
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/993444

Message #15 received at 993444-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 993444-close@bugs.debian.org

Subject: Bug#993444: fixed in libxml-sax-perl 1.02+dfsg-2

Date: Wed, 01 Sep 2021 16:34:55 +0000

Source: libxml-sax-perl
Source-Version: 1.02+dfsg-2
Done: gregor herrmann <gregoa@debian.org>

We believe that the bug you reported is fixed in the latest version of
libxml-sax-perl, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 993444@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
gregor herrmann <gregoa@debian.org> (supplier of updated libxml-sax-perl package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Sep 2021 18:11:27 +0200
Source: libxml-sax-perl
Architecture: source
Version: 1.02+dfsg-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Perl Group <pkg-perl-maintainers@lists.alioth.debian.org>
Changed-By: gregor herrmann <gregoa@debian.org>
Closes: 993444
Changes:
 libxml-sax-perl (1.02+dfsg-2) unstable; urgency=medium
 .
   * Team upload.
 .
   [ gregor herrmann ]
   * debian/watch: use uscan version 4.
 .
   [ Debian Janitor ]
   * Set upstream metadata fields: Repository.
   * Remove obsolete fields Contact, Name from debian/upstream/metadata
     (already present in machine-readable debian/copyright).
   * Update standards version to 4.5.0, no changes needed.
 .
   [ Roland Clobus ]
   * Sort the entries in the .ini-files. This generates the files with a
     constant content. (Closes: #993444)
 .
   [ gregor herrmann ]
   * Refresh patch parserdetails-debian (offset).
   * Update years of packaging copyright.
   * Declare compliance with Debian Policy 4.6.0.
   * Set Rules-Requires-Root: no.
   * Annotate test-only build dependencies with <!nocheck>.
   * Bump debhelper-compat to 13.
Checksums-Sha1:
 d17101241721bddca4cbaa0ed4b9cd8beff17f3b 2516 libxml-sax-perl_1.02+dfsg-2.dsc
 c4b2201df84d828bf5313cd03c427b0bdcf75997 14108 libxml-sax-perl_1.02+dfsg-2.debian.tar.xz
Checksums-Sha256:
 4d46a208d2240d21bd9d45bf60697ffff1c11ff41b5f9bef54c77f14fa88cfcd 2516 libxml-sax-perl_1.02+dfsg-2.dsc
 efe49e2447aada472081696f241f19b763738c8d35ea9a7561787848271a5759 14108 libxml-sax-perl_1.02+dfsg-2.debian.tar.xz
Files:
 bf6cd88ac69da41e20fd308f6a818ac7 2516 perl optional libxml-sax-perl_1.02+dfsg-2.dsc
 c05c04a71fb0054b0da2ebb8c258007d 14108 perl optional libxml-sax-perl_1.02+dfsg-2.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=PPw1
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.