Debian Bug report logs - #999866
liboqs: please make the build reproducible

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: liboqs: please make the build reproducible

Date: Wed, 17 Nov 2021 14:48:03 -0800

[Message part 1 (text/plain, inline)]

Source: liboqs
Version: 0.7.0.27.gba5b61a7+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: environment
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
liboqs could not be built reproducibly.

This is because it embeds ${CMAKE_SYSTEM_PROCESSOR} and ${CMAKE_HOST_SYSTEM}
via the OQS_COMPILE_BUILD_TARGET define. Luckily, the code itself uses
an ifdef, so a patch is attached that simply prevents this being added to the
header file.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[liboqs.diff.txt (text/plain, attachment)]

Message #10 received at 999866@bugs.debian.org (full text, mbox, reply):

From: Andrius Merkys <merkys@debian.org>

To: Chris Lamb <lamby@debian.org>, 999866@bugs.debian.org

Subject: Re: Bug#999866: liboqs: please make the build reproducible

Date: Thu, 18 Nov 2021 07:51:17 +0200

Control: tags -1 + pending

On 2021-11-18 00:48, Chris Lamb wrote:
> Whilst working on the Reproducible Builds effort [0] we noticed that
> liboqs could not be built reproducibly.
> 
> This is because it embeds ${CMAKE_SYSTEM_PROCESSOR} and ${CMAKE_HOST_SYSTEM}
> via the OQS_COMPILE_BUILD_TARGET define. Luckily, the code itself uses
> an ifdef, so a patch is attached that simply prevents this being added to the
> header file.
> 
>  [0] https://reproducible-builds.org/

Patch added, thanks!

Best,
Andrius

Message #17 received at 999866-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 999866-close@bugs.debian.org

Subject: Bug#999866: fixed in liboqs 0.7.0.32.g8df1a81d+dfsg-1

Date: Tue, 23 Nov 2021 07:03:51 +0000

Source: liboqs
Source-Version: 0.7.0.32.g8df1a81d+dfsg-1
Done: Andrius Merkys <merkys@debian.org>

We believe that the bug you reported is fixed in the latest version of
liboqs, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 999866@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Andrius Merkys <merkys@debian.org> (supplier of updated liboqs package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 23 Nov 2021 01:40:43 -0500
Source: liboqs
Architecture: source
Version: 0.7.0.32.g8df1a81d+dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: Andrius Merkys <merkys@debian.org>
Changed-By: Andrius Merkys <merkys@debian.org>
Closes: 999823 999866
Changes:
 liboqs (0.7.0.32.g8df1a81d+dfsg-1) unstable; urgency=medium
 .
   * New upstream version 0.7.0.32.g8df1a81d+dfsg (Closes: #999823).
   * Fixing reproducibility issue (Closes: #999866). Thanks Chris Lamb.
Checksums-Sha1:
 b118a2124096dc92c8618f1acec0c027834cc06f 2149 liboqs_0.7.0.32.g8df1a81d+dfsg-1.dsc
 54dd4c62d6dc0006501dbb745295fc32379130af 3655388 liboqs_0.7.0.32.g8df1a81d+dfsg.orig.tar.xz
 b8acad3f139470b712def2752251d9d1802970f4 6424 liboqs_0.7.0.32.g8df1a81d+dfsg-1.debian.tar.xz
 d72957129d4155c50e2bda809906ca8a93975c01 8142 liboqs_0.7.0.32.g8df1a81d+dfsg-1_source.buildinfo
Checksums-Sha256:
 644ca7442afafc978a6f8ce210ef7cf43c855406c5ad88aea3f366599ae2e05a 2149 liboqs_0.7.0.32.g8df1a81d+dfsg-1.dsc
 4c2e80be9bfdf625944f64435dc2ac3a329e796723e57a180247060009fb2cb9 3655388 liboqs_0.7.0.32.g8df1a81d+dfsg.orig.tar.xz
 db177351d9beaeb53de70dd64ed075fc1dbf9cf8dc1e47b140c34092cf7d1894 6424 liboqs_0.7.0.32.g8df1a81d+dfsg-1.debian.tar.xz
 e30331e0f98c6806a251efc01f0bc69b9ab3857bae3f05d84477a6901e46617e 8142 liboqs_0.7.0.32.g8df1a81d+dfsg-1_source.buildinfo
Files:
 b2c8cea693b95f28014a018ffecbb8d7 2149 libs optional liboqs_0.7.0.32.g8df1a81d+dfsg-1.dsc
 bdf59953e0f07d0bcc2b85307678ed69 3655388 libs optional liboqs_0.7.0.32.g8df1a81d+dfsg.orig.tar.xz
 b91dcb127f12b18d6b3c89e49100b409 6424 libs optional liboqs_0.7.0.32.g8df1a81d+dfsg-1.debian.tar.xz
 d4cec94016ff4cfc21dc4a0bbfdbd93c 8142 libs optional liboqs_0.7.0.32.g8df1a81d+dfsg-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=O5FZ
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.