[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#783210: glibc: please make the package build reproducibly



On 2015-04-23 23:30, Jérémy Bobbio wrote:
> Source: glibc
> Version: 2.19-18
> Severity: wishlist
> Tags: patch
> User: reproducible-builds@lists.alioth.debian.org
> Usertags: timestamps fileordering umask username uname
> 
> Hi!
> 
> While working on the “reproducible builds” effort [1], we have noticed
> that glibc could not be built reproducibly.
> 
> The attached patch addresses several issues:
> 
> 1. The source tarball will now stay identical despite variations of
>    the time of the build, user, group, umask and file ordering.
> 2. version-info.h currently captures the build time and the current
>    kernel version. In the context of Debian this is not really useful
>    and a new patch simply removes it. The behavior is now the same
>    if built under Linux or not.
> 3. nscd uses the date and time of the build as a version marker. So a
>    patch is added to allow the build date to be set externally. The date
>    of the latest debian/changelog entry will be used instead of the
>    current time for Debian.
> 
> Once applied, glibc can be built reproducibly in our current
> experimental framework.

I have just applied the part concerning point 1. For the 2 other points,
from what I have understood there are now patches for gcc to define
__DATE__ and __TIME__. So the question is should we still want to get
this changes in the glibc? In that case I would try to get these patches
upstream.

Aurelien

-- 
Aurelien Jarno                          GPG: 4096R/1DDD8C9B
aurelien@aurel32.net                 http://www.aurel32.net

Attachment: signature.asc
Description: Digital signature


Reply to: