[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#995648: marked as done (cffi: reproducible builds: Embedded timestamps in .dvi and .ps files)

Your message dated Thu, 04 Nov 2021 14:49:31 +0000
with message-id <E1mie3X-0002Hq-45@fasolo.debian.org>
and subject line Bug#995648: fixed in cffi 1:0.24.1-1
has caused the Debian Bug report #995648,
regarding cffi: reproducible builds: Embedded timestamps in .dvi and .ps files
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
995648: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995648
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: cffi
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build timestamp is embedded in various .dvi and .ps files:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/cffi.html

  /usr/share/doc/cl-cffi/cffi-manual.ps.gz

  %DVIPSSource:··TeX·output·2021.09.26:1909	16
vs.
  %DVIPSSource:··TeX·output·2022.10.31:0334

The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

  https://reproducible-builds.org/docs/source-date-epoch/

With this patch applied, cffi should build reproducibly on
tests.reproducible-builds.org

Thanks for maintaining cffi!

live well,
  vagrant

From 7e977d37e721efc87831804dde4ce030cddb308c Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Sun, 3 Oct 2021 16:42:20 +0000
Subject: [PATCH] debian/rules: Export FORCE_SOURCE_DATE=1 in order for texlive
 to respect SOURCE_DATE_EPOCH when generating .dvi and .ps files.

https://reproducible-builds.org/docs/source-date-epoch/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 71e6d87..110daa8 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,8 @@
 #!/usr/bin/make -f
 
+# Ensure texlive respects SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE=1
+
 %:
 	dh $@
 
-- 
2.33.0

Attachment: signature.asc
Description: PGP signature


--- End Message ---
--- Begin Message --- 
Source: cffi
Source-Version: 1:0.24.1-1
Done: Sébastien Villemot <sebastien@debian.org>

We believe that the bug you reported is fixed in the latest version of
cffi, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 995648@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sébastien Villemot <sebastien@debian.org> (supplier of updated cffi package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 04 Nov 2021 15:24:44 +0100
Source: cffi
Architecture: source
Version: 1:0.24.1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Common Lisp Team <debian-common-lisp@lists.debian.org>
Changed-By: Sébastien Villemot <sebastien@debian.org>
Closes: 995648
Changes:
 cffi (1:0.24.1-1) unstable; urgency=medium
 .
   * New upstream release
   * Update standards version to 4.6.0, no changes needed.
   * debian/rules: Export FORCE_SOURCE_DATE=1 in order for texlive to
     respect SOURCE_DATE_EPOCH when generating .dvi and .ps files. Thanks
     to Vagrant Cascadian. (Closes: #995648)
   * libffi8.patch: new patch, adds support for libffi8
Checksums-Sha1:
 34119b4e5735209d9623f6214d2609b4f8631dc1 2351 cffi_0.24.1-1.dsc
 46a4669338dc60980e9d77ded9d6ea2f4c594edc 262118 cffi_0.24.1.orig.tar.gz
 15ec1571dcfc00cd8106ea02371216fdf9f17206 488 cffi_0.24.1.orig.tar.gz.asc
 ed59ac71fdf7b2da7d2da07d3aefa078dac3036d 544640 cffi_0.24.1-1.debian.tar.xz
 6031bf668a70ce54b921ae44f59f4c335f287f22 8410 cffi_0.24.1-1_amd64.buildinfo
Checksums-Sha256:
 9a01da783c106665ba292ce0646f0cad493d0c46983b74c32b5c9504b0cacc94 2351 cffi_0.24.1-1.dsc
 1023dc97baa0f4c8648c3039f6d147978b37a13310869d914b92469b335128c7 262118 cffi_0.24.1.orig.tar.gz
 47cf5cc176fd4f84f7d8fe143d9a567cf11d037a8fc9ebe413b1166cc0145879 488 cffi_0.24.1.orig.tar.gz.asc
 6fce59355b005c9d1d55843253930fb2fab1a59064cb6aaebe6995b524ce8404 544640 cffi_0.24.1-1.debian.tar.xz
 82dc6f618e28461706a68e0dc2eb40c395a0f5ffe673ef2b8c7503f2cd5765cb 8410 cffi_0.24.1-1_amd64.buildinfo
Files:
 c30f457a11ae39fc716b2d6ce94a41dc 2351 lisp optional cffi_0.24.1-1.dsc
 c3df5c460e00e5af8b8bd2cd03a4b5cc 262118 lisp optional cffi_0.24.1.orig.tar.gz
 3d8c27a859ccdcc31c6fed203e769a10 488 lisp optional cffi_0.24.1.orig.tar.gz.asc
 3e62bfcb3d21166e03ebf1791eb6d959 544640 lisp optional cffi_0.24.1-1.debian.tar.xz
 c50756912a91c89a3d8a58cd004425ce 8410 lisp optional cffi_0.24.1-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=7/vc
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: