Debian Bug report logs - #995401
canna: reproducible builds: Embedded timestamps in .dvi file

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: canna: reproducible builds: Embedded timestamps in .dvi file

Date: Thu, 30 Sep 2021 09:34:36 -0700

[Message part 1 (text/plain, inline)]

Source: canna
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in /usr/share/doc/canna/canna.dvi.gz:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/canna.html

  ... TeX·output·2022.
  vs.
  ... TeX·output·2021.

  ... 10.25:1509
  vs.
  ... 09.23:1050


The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

With this patch applied, canna should build reproducibly on
tests.reproducible-builds.org


Thanks for maintaining canna!


live well,
  vagrant

[0001-debian-rules-Set-FORCE_SOURCE_DATE-1-in-order-for-te.patch (text/x-diff, inline)]

From f52e280a95ab71bf59521c30d95add4f0d989819 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Thu, 30 Sep 2021 09:28:54 -0700
Subject: [PATCH] debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to
 respect SOURCE_DATE_EPOCH when generating .dvi file.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/debian/rules b/debian/rules
index 1f8b2b7..2811685 100755
--- a/debian/rules
+++ b/debian/rules
@@ -6,6 +6,8 @@ export DH_VERBOSE=1
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
 
 export DPKG_EXPORT_BUILDFLAGS = 1
 include /usr/share/dpkg/default.mk
-- 
2.30.2

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 995401-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 995401-close@bugs.debian.org

Subject: Bug#995401: fixed in canna 3.7p3-18

Date: Mon, 09 May 2022 21:06:20 +0000

Source: canna
Source-Version: 3.7p3-18
Done: Vagrant Cascadian <vagrant@debian.org>

We believe that the bug you reported is fixed in the latest version of
canna, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 995401@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@debian.org> (supplier of updated canna package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 09 May 2022 13:25:00 -0700
Source: canna
Architecture: source
Version: 3.7p3-18
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@debian.org>
Closes: 995401
Changes:
 canna (3.7p3-18) unstable; urgency=medium
 .
   * QA upload.
   * debian/rules: Set FORCE_SOURCE_DATE=1 in order for texlive to respect
     SOURCE_DATE_EPOCH when generating .dvi file. (Closes: #995401)
   * libcann1g: Remove explicit calls to ldconfig from postinst and postrm,
     now handled by dpkg triggers.
   * Update to debhelper-compat 13.
   * canna: Avoid recursive chown to /var/lib/canna and /var/log/canna by
     explicitly calling the files to be chowned.
Checksums-Sha1:
 cd56c28ab493372dbfb7204199aa5ddffb556d0d 1495 canna_3.7p3-18.dsc
 dffa17063ed50099efa6d5eb1aba3cf628ce2b3b 53812 canna_3.7p3-18.debian.tar.xz
 4acfb3bfdf9d258f872b6d9992862f54d47dc3d6 9097 canna_3.7p3-18_arm64.buildinfo
Checksums-Sha256:
 47ad77f0531798ca4ff5bfbf559d2fa34f036670c9fe960133a79ed492b6692e 1495 canna_3.7p3-18.dsc
 317ea00f4b3f90ea6fdba1c01c30de0ff62f5026fdcf0bee041e444368467c2f 53812 canna_3.7p3-18.debian.tar.xz
 d49d135acd887ac918d42981ea460da281f80dc7fb5fbf373fb42c6c87b021db 9097 canna_3.7p3-18_arm64.buildinfo
Files:
 9c27bf87c5f17f03524e19ed5455b287 1495 utils optional canna_3.7p3-18.dsc
 b8b9533c2134359c0f6b1e888df19ff5 53812 utils optional canna_3.7p3-18.debian.tar.xz
 bcbb3295d5475764fca186e5e20d0842 9097 utils optional canna_3.7p3-18_arm64.buildinfo

-----BEGIN PGP SIGNATURE-----

iIkEARYKADEWIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCYnl+FBMcdmFncmFudEBk
ZWJpYW4ub3JnAAoJENxRj8h/lxaq04ABAPg+CJKJkwQH4ypaHECOwm4DGqgkdx1j
rRKFFEPACu9TAP0cyBeID4YQDb88OTv3vqPa4P0owGorTF3fTpdBnwWFDg==
=FRDO
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.