[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#793708: marked as done (nitpic: please make the mtimes reproducible)

Your message dated Mon, 10 Aug 2015 13:50:19 +0000
with message-id <E1ZOnT1-0002vP-G1@franck.debian.org>
and subject line Bug#793708: fixed in nitpic 0.1-16
has caused the Debian Bug report #793708,
regarding nitpic: please make the mtimes reproducible
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
793708: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=793708
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Source: nitpic
Version: 0.1-15
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that nitpic could not be built reproducibly.

The attached patch sets the mtimes of all files which are modified
during the built to the date of the last changelog entry in order to
produce files with reproducible metadata. Please also consider this
other bug from the reproducible builds team:
https://bugs.debian.org/777492

Cheers,
akira

[1]: https://wiki.debian.org/ReproducibleBuilds


diff -u nitpic-0.1/debian/changelog nitpic-0.1/debian/changelog
--- nitpic-0.1/debian/changelog
+++ nitpic-0.1/debian/changelog
@@ -1,3 +1,10 @@
+nitpic (0.1-16) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix mtimes before building binary packages to produce reproducible output
+
+ -- akira <marivalenm@gmail.com>  Fri, 24 Jul 2015 15:12:07 +0200
+
 nitpic (0.1-15) unstable; urgency=medium
 
   * QA upload.
diff -u nitpic-0.1/debian/rules nitpic-0.1/debian/rules
--- nitpic-0.1/debian/rules
+++ nitpic-0.1/debian/rules
@@ -9,6 +9,8 @@
 Makefile: Imakefile
 	xmkmf
 
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 -SDate)" +%s)
+
 build: build-arch
 build-indep:
 build-arch: checkdir Makefile
@@ -61,6 +63,8 @@
 endif
 	dpkg-shlibdeps $(d)/usr/bin/*
 	dpkg-gencontrol -isp -p$(package) -P$(d)
+	find $(d) -newermt "@$$SOURCE_DATE_EPOCH" -print0 | \
+		xargs -0r touch --no-dereference --date="@$$SOURCE_DATE_EPOCH"
 	dpkg --build $(d) ..
 
 binary:	binary-indep binary-arch

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message --- 
Source: nitpic
Source-Version: 0.1-16

We believe that the bug you reported is fixed in the latest version of
nitpic, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 793708@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ralf Treinen <treinen@debian.org> (supplier of updated nitpic package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 10 Aug 2015 15:33:36 +0200
Source: nitpic
Binary: nitpic
Architecture: source amd64
Version: 0.1-16
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Ralf Treinen <treinen@debian.org>
Description:
 nitpic     - simulator for the Microchip PIC16C84 microcontroller
Closes: 777492 793708
Changes:
 nitpic (0.1-16) unstable; urgency=medium
 .
   * QA upload
   * debian/rules:
     - add flag -n to invocations of gzip in order to avoid timestamps.
       Thanks to Chris Lamb for the patch! (closes: #777492)
     - Fix mtimes before building binary packages to produce reproducible
       output. Thanks to Maria Valentina Marin for the patch! (closes: #793708)
Checksums-Sha1:
 8c844ed4982225549626fc6f34dc03e29e778537 1675 nitpic_0.1-16.dsc
 2e2e22ba16758c44225f7d715f30bbbd59425c06 11139 nitpic_0.1-16.diff.gz
 672780bf7caf6b8c23dda0d56aa6c8adbf2b813f 369236 nitpic_0.1-16_amd64.deb
Checksums-Sha256:
 dfaed182bde02e9db96046494784cff831dd6b6c3fe1737a73a724bdbaa51549 1675 nitpic_0.1-16.dsc
 a711caa46fa148d7102a0b77ddcb25407dbd328b5dea1dc1916592ba8c6d266e 11139 nitpic_0.1-16.diff.gz
 1106b65795ea8d9129b67270733d8900262031edc391029cdfdcb3a74358cf5a 369236 nitpic_0.1-16_amd64.deb
Files:
 007768d6cd4bd134e1c74421b92c3c89 1675 electronics extra nitpic_0.1-16.dsc
 85fd4b892f22a9eb4d30f78250797c06 11139 electronics extra nitpic_0.1-16.diff.gz
 00d8c4ff72eb336b35a692a8ab09c1f8 369236 electronics extra nitpic_0.1-16_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=r9+i
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: