--- Begin Message ---
Source: nis
Version: 3.17-34
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
Hi!
While working on the “reproducible builds” effort [1], we have noticed
that nis could not be built reproducibly.
The attached patch removes extra timestamps from the gzipped docs and
fixes the files mtime before building the binary packages. Once applied,
nis can be built reproducibly in our current experimental framework.
[1]: https://wiki.debian.org/ReproducibleBuilds
--
Dhole
diff --git a/nis-3.17/debian/rules b/nis-3.17/debian/rules
index fd15d77..11b3fa2 100755
--- a/nis-3.17/debian/rules
+++ b/nis-3.17/debian/rules
@@ -15,6 +15,7 @@ YPBIND=ypbind-mt-1.20.1
SHELL=/bin/bash
DEB_BUILD_GNU_TYPE := $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
DEB_HOST_GNU_TYPE := $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
+BUILD_DATE=$(shell dpkg-parsechangelog --show-field Date)
ifeq (,$(findstring noopt,$(DEB_BUILD_OPTIONS)))
CFLAGS = "-O2 -Wall -g"
@@ -132,13 +133,13 @@ binary-arch: build checkroot
install -g root -m 755 debian/reportbug-script $(DEBDIR)/usr/share/bug/nis/script
# Documentation.
- gzip -9f $(DEBDIR)/usr/share/man/man*/*
+ gzip -9fn $(DEBDIR)/usr/share/man/man*/*
install -g root -m 644 debian/nis.debian.howto $(DEBDIR)/usr/share/doc/nis
install -g root -m 644 debian/changelog \
$(DEBDIR)/usr/share/doc/nis/changelog.Debian
install -g root -m 644 $(YPSERV)/ChangeLog \
$(DEBDIR)/usr/share/doc/nis/changelog
- gzip -9f $(DEBDIR)/usr/share/doc/nis/* || true
+ gzip -9fn $(DEBDIR)/usr/share/doc/nis/* || true
install -g root -m 644 debian/COPYRIGHT \
$(DEBDIR)/usr/share/doc/$(p)/copyright
install -g root -m 644 debian/nis.default \
@@ -157,6 +158,8 @@ binary-arch: build checkroot
# Use some binaries to generate the dependencies.
dpkg-shlibdeps `find $(DEBDIR) -type f -exec file '{}' ';' | grep ELF | awk -F: '{print $$1}'`
dpkg-gencontrol -isp
+ find $(DEBDIR) -depth -newermt '$(BUILD_DATE)' -print0 | \
+ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
dpkg --build $(DEBDIR) ..
rm -rf $(DEBDIR)
--- End Message ---
--- Begin Message ---
Source: nis
Source-Version: 3.17.1-6
Done: Vagrant Cascadian <vagrant@reproducible-builds.org>
We believe that the bug you reported is fixed in the latest version of
nis, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 787126@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Vagrant Cascadian <vagrant@reproducible-builds.org> (supplier of updated nis package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 19 Dec 2020 21:12:31 -0800
Source: nis
Architecture: source
Version: 3.17.1-6
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group <packages@qa.debian.org>
Changed-By: Vagrant Cascadian <vagrant@reproducible-builds.org>
Closes: 787126 977747
Changes:
nis (3.17.1-6) unstable; urgency=medium
.
* QA upload.
* debian/rules: Remove extra timestamps from the gzipped documentation
and fix file mtimes before building the binary packages.
(Closes: #787126). Thanks to Dhole <dhole@openmailbox.org>.
* debian/rules: Pass BASH=/bin/bash to the ypserv configure
script. (Closes: #977747)
* debian/changelog: Clean up trailing whitespace.
* debian/rules: Delete trailing whitespace.
* Remove obsolete lintian overrides for non-etc-file-marked-as-conffile.
* debian/rules: Replace calls to dpkg-architecture by using dpkg
Checksums-Sha1:
77cb250f2d30c9870fbef4c0843d52a1fa706577 1287 nis_3.17.1-6.dsc
450af7e8b75f2863425a3d1404caa25bb8138db4 40100 nis_3.17.1-6.debian.tar.xz
Checksums-Sha256:
0d63df995efe1ec2b1db883409814cbc05b61550aa7b73eff2a11998e8d67dff 1287 nis_3.17.1-6.dsc
c5cbe0fa3f1457b18331be1b7bf2c18ae709fe9ae6adfeaf17167765ed57db59 40100 nis_3.17.1-6.debian.tar.xz
Files:
bd7a7757617be2d1257312cad3c6c422 1287 net optional nis_3.17.1-6.dsc
8e4f30e3abcb49c715064dd7d9ef2933 40100 net optional nis_3.17.1-6.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iJYEARYKAD4WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCX97esiAcdmFncmFudEBy
ZXByb2R1Y2libGUtYnVpbGRzLm9yZwAKCRDcUY/If5cWqvKyAQD5CzQHuO3FPdLr
9gg287iNs2O5GWyJKrai99qR3iitUAD/WSJi6F7T1u+Yixot56vh01+gqVA4Ps7h
wCm3DGi3AQM=
=LcDH
-----END PGP SIGNATURE-----
--- End Message ---