Debian Bug report logs - #995960
xnee: reproducible builds: embeds time and username in documentation

version graph

Package: src:xnee; Maintainer for src:xnee is Vincent Bernat <bernat@debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Sat, 9 Oct 2021 00:30:01 UTC

Severity: normal

Tags: patch

Fixed in version xnee/3.19-8

Done: Vincent Bernat <bernat@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Vincent Bernat <bernat@debian.org>:
Bug#995960; Package src:xnee. (Sat, 09 Oct 2021 00:30:04 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Vincent Bernat <bernat@debian.org>. (Sat, 09 Oct 2021 00:30:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: xnee: reproducible builds: embeds time and username in documentation
Date: Fri, 08 Oct 2021 17:26:52 -0700
[Message part 1 (text/plain, inline)]
Source: xnee
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: username timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The username and build time is embedded in /usr/share/doc/xnee/xnee.ps.gz.

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/xnee.html

  %DVIPSSource:··TeX·output·2021.10.08:0802
vs.
  %DVIPSSource:··TeX·output·2022.11.11:1638

  %%CreationDate:·Fri·Oct··8·08:02:16·2021
vs.
  %%CreationDate:·Fri·Nov·11·16:37:50·2022
  
  %%For:·pbuilder1
vs.
  %%For:·pbuilder2

The attached patches fix this in debian/rules by setting
FORCE_SOURCE_DATE=1 to fix the DVIPSSource timestamp, and manually
adjusting the CreationDate and For headers in the .ps file directly.

With these patches applied, xnee should be reproducible on
tests.reproducible-builds.org!


Thanks for maintaining xnee!


live well,
  vagrant
[0001-debian-rules-Fix-date-im-embedded-xnee.ps.patch (text/x-diff, inline)]
From 52f8dc5c3e4986fdb349fd1fca46b786e01f3814 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Fri, 8 Oct 2021 23:41:00 +0000
Subject: [PATCH 1/2] debian/rules: Fix date im embedded xnee.ps.

Export FORCE_SOURCE_DATE=1 to get texlive to respect
SOURCE_DATE_EPOCH, which fixes the embedded timestamp in DVIPSSource
in xnee.ps.

Adjust the "CreationDate" header in xnee.ps to use the date from
debian/changelog instead of the current time.
---
 debian/rules | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/debian/rules b/debian/rules
index 0a30558..87800cc 100755
--- a/debian/rules
+++ b/debian/rules
@@ -10,8 +10,14 @@ DEB_CONFIGURE_EXTRA_FLAGS := --disable-gui --disable-gnome-applet \
 
 DEB_DH_STRIP_ARGS_libxnee0 = --dbgsym-migration="libxnee-dbg"
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
+CHANGELOG_DATE=$(shell dpkg-parsechangelog -Sdate)
+
 binary-install/xnee-doc::
 	sed -i s+$$(printf "\r")++g debian/xnee-doc/usr/share/info/xnee.info
-
+	# Fix embedded timestamp in .ps document
+	sed -i -e "s/%%CreationDate: .*/%%CreationDate: $(CHANGELOG_DATE)/g" debian/xnee-doc/usr/share/doc/xnee/xnee.ps
 clean::
 	rm -f examples/simple_bash.sh share/xnee.sh
-- 
2.30.2

[0002-debian-rules-Fix-embedded-username-in-xnee.ps.patch (text/x-diff, inline)]
From 2d3a9ea580a8dad7a7852255627e96aa9ebc6000 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sat, 9 Oct 2021 00:07:30 +0000
Subject: [PATCH 2/2] debian/rules: Fix embedded username in xnee.ps

Adjust the "For" header in xnee.ps to specify "debian-build" instead
of the username.
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 87800cc..cd23542 100755
--- a/debian/rules
+++ b/debian/rules
@@ -19,5 +19,8 @@ binary-install/xnee-doc::
 	sed -i s+$$(printf "\r")++g debian/xnee-doc/usr/share/info/xnee.info
 	# Fix embedded timestamp in .ps document
 	sed -i -e "s/%%CreationDate: .*/%%CreationDate: $(CHANGELOG_DATE)/g" debian/xnee-doc/usr/share/doc/xnee/xnee.ps
+	# Fix embedded username in .ps document
+	sed -i -e "s/%%For: .*/%%For: debian-build/g" debian/xnee-doc/usr/share/doc/xnee/xnee.ps
+
 clean::
 	rm -f examples/simple_bash.sh share/xnee.sh
-- 
2.30.2

[signature.asc (application/pgp-signature, inline)]

Reply sent to Vincent Bernat <bernat@debian.org>:
You have taken responsibility. (Sun, 10 Oct 2021 19:24:03 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Sun, 10 Oct 2021 19:24:03 GMT) (full text, mbox, link).


Message #10 received at 995960-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 995960-close@bugs.debian.org
Subject: Bug#995960: fixed in xnee 3.19-8
Date: Sun, 10 Oct 2021 19:20:21 +0000
Source: xnee
Source-Version: 3.19-8
Done: Vincent Bernat <bernat@debian.org>

We believe that the bug you reported is fixed in the latest version of
xnee, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 995960@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Vincent Bernat <bernat@debian.org> (supplier of updated xnee package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 10 Oct 2021 21:06:25 +0200
Source: xnee
Architecture: source
Version: 3.19-8
Distribution: unstable
Urgency: medium
Maintainer: Vincent Bernat <bernat@debian.org>
Changed-By: Vincent Bernat <bernat@debian.org>
Closes: 995960
Changes:
 xnee (3.19-8) unstable; urgency=medium
 .
   * d/rules: make xnee reproducible, thanks to Vagrant Cascadian.
     Closes: #995960.
Checksums-Sha1:
 dc7c2a68dc1394b3efae4df44cf756532563f127 2212 xnee_3.19-8.dsc
 2830e71b099c5e814878971a2040e85bbd6f9a07 1893109 xnee_3.19.orig.tar.gz
 c26739ec30c038ee47adf9280ac1ac559d1f34b3 16476388 xnee_3.19-8.debian.tar.xz
 61b7a289d8ae8f08af5a9282b4d058a046976b01 12795 xnee_3.19-8_amd64.buildinfo
Checksums-Sha256:
 7ba4321ba7df29c401ea6ef44a4311fafcae2f865629f9d9aa4738c2e45c3c56 2212 xnee_3.19-8.dsc
 52a41e5cf62f81b7a3e5b58124eb3565e1e12028abda63f547fbbe0d98a2c212 1893109 xnee_3.19.orig.tar.gz
 6fb7fe573ae087130df3835adff2b82de1d177b8b573304da33c1443ae102575 16476388 xnee_3.19-8.debian.tar.xz
 bb9492c4fa256ebcaa9eaa2d16c148621dddd6ef0050d13b644db476ba173a02 12795 xnee_3.19-8_amd64.buildinfo
Files:
 1455886fb3db44d8b2e7c9a1c2dddd42 2212 x11 optional xnee_3.19-8.dsc
 560e8126950d8d4e7c30fc844d556482 1893109 x11 optional xnee_3.19.orig.tar.gz
 d7376c258d6ae355f6380c33f6a88d57 16476388 x11 optional xnee_3.19-8.debian.tar.xz
 09d39d69d8c81a0c2a73e22389ea1ca9 12795 x11 optional xnee_3.19-8_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=AAcz
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 13 Nov 2021 07:28:28 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed May 17 12:59:42 2023; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.