Debian Bug report logs - #998420
minia: reproducible builds: Embeds kernel version

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>

To: submit@bugs.debian.org

Subject: minia: reproducible builds: Embeds kernel version

Date: Wed, 03 Nov 2021 14:47:35 -0700

[Message part 1 (text/plain, inline)]

Source: minia
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: kernel
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The kernel version is embedded in /usr/bin/minia which cause
reproducibility issues.
  
  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/minia.html

  Linux-5.14.0-0.bpo.2-amd64
vs.
  Linux-5.10.0-9-amd64

The attached patch fixes this by using CMAKE_SYSTEM_NAME instead of
CMAKE_SYSTEM in src/build_info.hpp.in.


With this patch applied, minia should become reproducible on
tests.reproducible-builds.org.


Thanks for maintaining minia!


live well,
  vagrant

[0001-build_info.hpp.in-Patch-to-use-CMAKE_SYSTEM_NAME-ins.patch (text/x-diff, inline)]

From c0192d2eabddacfc3c728b930215094558799880 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Wed, 3 Nov 2021 21:11:32 +0000
Subject: [PATCH] build_info.hpp.in: Patch to use CMAKE_SYSTEM_NAME instead
 of CMAKE_SYSTEM.

CMAKE_SYSTEM captures the kernel version, which can reasonably vary
between builds. Use CMAKE_SYSTEM_NAME instead, which does not include
the version.

https://tests.reproducible-builds.org/debian/issues/unstable/captures_kernel_version_via_CMAKE_SYSTEM_issue.html
---
 src/build_info.hpp.in | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/build_info.hpp.in b/src/build_info.hpp.in
index d77e20c..f570b22 100644
--- a/src/build_info.hpp.in
+++ b/src/build_info.hpp.in
@@ -23,4 +23,4 @@
 #define STR_MINIA_VERSION     "${gatb-tool-version}"
 #define STR_MINIA_COMPILATION_FLAGS   "${gatb-core-flags}"
 #define STR_MINIA_COMPILER            "${CMAKE_C_COMPILER}  (${CMAKE_CXX_COMPILER_VERSION})"
-#define STR_MINIA_OPERATING_SYSTEM    "${CMAKE_SYSTEM}"
+#define STR_MINIA_OPERATING_SYSTEM    "${CMAKE_SYSTEM_NAME}"
-- 
2.33.1

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 998420-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 998420-close@bugs.debian.org

Subject: Bug#998420: fixed in minia 3.2.6-1

Date: Fri, 12 Nov 2021 09:03:42 +0000

Source: minia
Source-Version: 3.2.6-1
Done: Andreas Tille <tille@debian.org>

We believe that the bug you reported is fixed in the latest version of
minia, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 998420@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andreas Tille <tille@debian.org> (supplier of updated minia package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 12 Nov 2021 09:35:16 +0100
Source: minia
Architecture: source
Version: 3.2.6-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org>
Changed-By: Andreas Tille <tille@debian.org>
Closes: 998420
Changes:
 minia (3.2.6-1) unstable; urgency=medium
 .
   [ Steffen Moeller ]
   * New upstream version
   * debhelper-compat 13 (routine-update)
   * Adjusted build dependencies to patched version of gatb 1.4.2
   * d/rules - improved clean
   * d/watch - using regular releases again (up from 3.2.1 to 3.2.4)
 .
   [ Vagrant Cascadian ]
   * Do not embed kernel version in binary to enable reproducible builds
     Closes: #998420
 .
   [ Andreas Tille ]
   * Fix watchfile to detect new versions on github
   * New upstream version
   * Standards-Version: 4.6.0 (routine-update)
Checksums-Sha1:
 fe5a43ceb0587765eda645082d60c1e4e2472874 2126 minia_3.2.6-1.dsc
 50f25910ed9f9fe83806d901f6a50d79dc7337fe 1048908 minia_3.2.6.orig.tar.gz
 cc88d4d59db075a4919c4d4189d4e49a043646f6 17152 minia_3.2.6-1.debian.tar.xz
 26b5fe107be0574dc989b733a430337d46bf1441 7591 minia_3.2.6-1_amd64.buildinfo
Checksums-Sha256:
 f2484088c7364ae673ad16bb6cf0ddeb6e5c91438b13c956ef54a78aa44b6fab 2126 minia_3.2.6-1.dsc
 a201c5b479092617259cb1d5e0f0045b80c106e8e2aa9afe4834b4d3dd39ce78 1048908 minia_3.2.6.orig.tar.gz
 0d77477018ef45cfd12244cbf9d6070a12dbf7bd16f3ec033acc6cd2bf3e68ab 17152 minia_3.2.6-1.debian.tar.xz
 785bf007a69cce53924e46adef4b058538e601c3a2a97d63d05f3fa3171fde7d 7591 minia_3.2.6-1_amd64.buildinfo
Files:
 2a9e6862b962eb6c601c9746534a7213 2126 science optional minia_3.2.6-1.dsc
 9e69160f5ba19735a1635d10302f6f2b 1048908 science optional minia_3.2.6.orig.tar.gz
 1780b4af092addaa55bc4ae6f421b692 17152 science optional minia_3.2.6-1.debian.tar.xz
 7e42fd079e5c915a23530415423338dc 7591 science optional minia_3.2.6-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJFBAEBCgAvFiEE8fAHMgoDVUHwpmPKV4oElNHGRtEFAmGOJ8gRHHRpbGxlQGRl
Ymlhbi5vcmcACgkQV4oElNHGRtFlKg/7B+K7HHGqEgAiVCeCikWySq9glDlG06vJ
7sHxBWhB5B1YpXqcNjvzjru9wHjwkkDZaqVNqtTR+ERah+VoaXKrRHCT+VrHoaid
RccHg1ZG5fODAmSPV9hfcUO9Tn0Bmi43Gv7ieOvg3IZn1DVznfVyiBpZ4rokDanj
rZcrm4FZxohAJqKwN/82RPZdtQQuRJzaLaQIoXv/lmUBeDgeh15hXThuQqvbDxf6
5MUMuEVbjFt+zL7QqXlhbtLZ6LwmEZfU16cmErCpbDi+oJ/8k/7SjePwGEX3IL6/
BtCQnsgg+lSs/7U6NUpsL4SYUfsv/vD1el2dkLItUU1iqSax7Ln46kHcS3qIM0lg
PNB4AD5vNBPj0giy0OAwH/9xXKw3teQxGnMadrxERQrgIaCwdiOe2FEOa76MkBXd
Bc3iYOo/+xLTaUqL+IbyHcMP5QHzkafn+Qhukw3r01b7qAc8LgZhbUirPueXYbrE
g8P3Bb1r8bUOoz+/l8eJzzsD5n/bt3ZLXWKoZGVT3m187mvnTmUsZcQvmDhFFsaU
daJdrmxjSpHPJCa32tDnAcn3IkCEI67BXPpZ/N2LHw/I1wpFGdSfqASVyOPPpm6T
woVruG8bS3LWF4qUrFduMEKtdvtde37LFR/wp+F19kk5NkYO1oHvXOyQXXPddYgx
vGoz9xMxuyE=
=zDFV
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.