Hi,
so dpkg 1.18.7 was uploaded to sid today and Mattia promply rebased
our patches on it and uploaded the following changes to our repo:
dpkg (1.18.7.0~reproducible0) UNRELEASED; urgency=low
[ Jérémy Bobbio ]
* Use a single timestamp for ar headers when building a .deb.
* Use the common build timestamp for all files created at a later time if
tar supports then --clamp-mtime option.
* Allow to set the build timestamp using SOURCE_DATE_EPOCH.
* Preset build timestamp to latest changelog entry. Closes: #759886, #759999
* Normalize file permissions when creating control.tar. Closes: #787980
* Add support for .buildinfo files. Closes: #138409
[ Niko Tyni ]
* Rebase on dpkg 1.18.6.
+ teach dpkg-genbuildinfo the new --build=[...] syntax
* dpkg-genbuildinfo; Disable Environment information generation
for now until diffoscope supports it.
-- Mattia Rizzolo <mattia@debian.org> Mon, 09 May 2016 08:57:56 +0000
Looking at this I notice we have some changes without bugs and some
changes involving several bugs, still I think it would be good to
discuss them as uploaded.
IOW: dear dpkg maintainers, what are your comments regarding getting the
following changes into sid:
a.) single timestamp for ar headers
b.) common build timestamp for all files created at a later time
c.) build timestamp using SOURCE_DATE_EPOCH
d.) preset build timestamp to latest changelog entry
e.) normalize file permissions when creating control.tar
f.) add support for .buildinfo files
g.) teach dpkg-genbuildinfo the new --build=[...] syntax
?
And, do we need bugs for a+b+c+g ?
https://anonscm.debian.org/cgit/reproducible/dpkg.git/log/?h=pu/reproducible_builds
has 7 patches on top of 1.18.7:
$ git log --oneline 1.18.7..pu/reproducible_builds
62ccd2d document 1.18.7.0~reproducible0
caf8e48 dpkg-genbuildinfo; Disable Environment information for now
0774d02 Add support for .buildinfo files
c247140 dpkg-deb: Normalize file permissions when creating control.tar
ddce83d dpkg-buildpackage: Preset build timestamp to latest changelog entry
fc25ddf dpkg-deb: Allow to set the build timestamp using SOURCE_DATE_EPOCH
1c7e268 dpkg-deb: Use the common build timestamp for all files created at a later time
1dfc945 dpkg-deb: Use a single timestamp for ar headers when building a .deb
Are there any other changes needed in dpkg for Reproducible builds of Debian?
How can we (reproducible builds) folks help making these changes happen? :-)
--
thanks & cheers,
Holger
Attachment:
signature.asc
Description: Digital signature