Debian Bug report logs - #995217
maildirsync: reproducible builds: tarball in examples does not build reproducibly

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: maildirsync: reproducible builds: tarball in examples does not build reproducibly

Date: Mon, 27 Sep 2021 17:54:01 -0700

[Message part 1 (text/plain, inline)]

Source: maildirsync
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: umask username fileordering
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The username, uid, group name, gid and umask are embedded in the example
tarball of mailbalance:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/maildirsync.html

  /usr/share/doc/maildirsync/examples/mailbalance-0.2.0.tar.gz

  drwxr-xr-x···0·pbuilder1··(1111)·pbuilder1··(1111)········0·2010-11-01·18:38:55.000000·mailbalance-0.2.0/
  vs.
  drwxrwxr-x···0·pbuilder2··(2222)·pbuilder2··(2222)········0·2010-11-01·18:38:55.000000·mailbalance-0.2.0/

The attached patch fixes this by instead including the files in the
examples directory directly. The files are not particularly large and
dpkg does various forms of normalization on it.


Thanks for maintaining maildirsync!


live well,
  vagrant

[0001-Install-mailbalance-example-directly-into-examples.patch (text/x-diff, inline)]

From f3bdf22ca846a2ba42e2f80d42a99e9b004bfc0c Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 28 Sep 2021 00:35:35 +0000
Subject: [PATCH] Install mailbalance example directly into examples.

The way the tarball was built embeds various information from the
build environment (username, groupname, uid, gid, umask) and the
ordering of the files was unpredictible.

The tarball only saves a small amount of additional space, so instead
just install the files directly.

https://tests.reproducible-builds.org/debian/issues/different_due_to_umask_issue.html
https://tests.reproducible-builds.org/debian/issues/users_and_groups_in_tarball_issue.html
https://tests.reproducible-builds.org/debian/issues/random_order_in_tarball_issue.html
---
 debian/examples | 1 +
 debian/rules    | 3 ---
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/debian/examples b/debian/examples
index e0e9a33..615a8f0 100644
--- a/debian/examples
+++ b/debian/examples
@@ -1 +1,2 @@
 sample.sh
+contrib/mailbalance-0.2.0
diff --git a/debian/rules b/debian/rules
index 34e0cbb..1bdefc4 100755
--- a/debian/rules
+++ b/debian/rules
@@ -11,6 +11,3 @@ execute_after_dh_auto_clean:
 
 execute_after_dh_auto_install:
 	cp maildirsync.pl debian/maildirsync/usr/bin/maildirsync
-
-execute_after_dh_installexamples:
-	cd contrib && tar -cf - mailbalance-0.2.0 | gzip -n -9 > ../debian/maildirsync/usr/share/doc/maildirsync/examples/mailbalance-0.2.0.tar.gz
-- 
2.33.0

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 995217-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 995217-close@bugs.debian.org

Subject: Bug#995217: fixed in maildirsync 1.2-4

Date: Tue, 28 Sep 2021 16:05:09 +0000

Source: maildirsync
Source-Version: 1.2-4
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>

We believe that the bug you reported is fixed in the latest version of
maildirsync, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 995217@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated maildirsync package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 28 Sep 2021 15:31:03 +0000
Source: maildirsync
Architecture: source
Version: 1.2-4
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 995217
Changes:
 maildirsync (1.2-4) unstable; urgency=medium
 .
   * QA upload.
   * Install mailbalance example directly into examples (Closes: #995217).
   * debian/patches: Adjust mailbanace example to call bash from /bin
     rather than /usr/local/bin.
   * debian/control: Add Vcs-Browser and Vcs-Git.
   * debian/control: Update Standards-Version to 4.6.0.
Checksums-Sha1:
 1dd89bfcc8125a2cff4e23451a6d1cb1e3591abd 1408 maildirsync_1.2-4.dsc
 78f9533659eb144926c209a9f01e38b096596edd 5628 maildirsync_1.2-4.debian.tar.xz
Checksums-Sha256:
 bfe63d632c032a612cd180b23fb2b352fd8b3ff79ca07efb30ba2c7dc229cfff 1408 maildirsync_1.2-4.dsc
 4f7e8e35ef6b83ac0d2ef05dd3bf3a8c3f566535e425a1d5d9fd3c9d0673b827 5628 maildirsync_1.2-4.debian.tar.xz
Files:
 8ea07fd77b7222c7fbcd977378921540 1408 mail optional maildirsync_1.2-4.dsc
 88d55d05f5eb255cb625ef01e07cc6cb 5628 mail optional maildirsync_1.2-4.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYVM6iSAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqrhjAP4u5VzSjXsB2Um8
+CBkAyE5iCSGEaxkgLYsxjTww/SIqgD/YVhky2CssTfGJkcTTShCQ+IAwQ3HysVy
Jm/6PGfVxAk=
=GzM9
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.