On Fri, Dec 22, 2017 at 04:32:50PM +0000, Holger Levsen wrote:
> no. the creation of Debian source packages is not reproducible at the
> moment. I don't recall whether we found a fundamental problem with it or
> if simply we had other fishes to fry.
Actually, Guillem went ahead and did this himself. He also thought it
would be hard, but after trying only few changes to dpkg were needed.
Look:
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % mkdir ../a ../b
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dpkg-source -b .
dpkg-source: info: using options from diffoscope/debian/source/options: --tar-ignore=.*.sw? --tar-ignore=*/*~ --tar-ignore=,,* --tar-ignore=.[#~]* --tar-ignore=.deps --tar-ignore=.git --tar-ignore=.gitattributes --tar-ignore=.gitignore --tar-ignore=.gitmodules
dpkg-source: info: using source format '3.0 (native)'
dpkg-source: info: building diffoscope in diffoscope_89.tar.xz
dpkg-source: info: building diffoscope in diffoscope_89.dsc
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dcmd mv ../diffoscope_89.dsc ../a
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dpkg-source -b .
dpkg-source: info: using options from diffoscope/debian/source/options: --tar-ignore=.*.sw? --tar-ignore=*/*~ --tar-ignore=,,* --tar-ignore=.[#~]* --tar-ignore=.deps --tar-ignore=.git --tar-ignore=.gitattributes --tar-ignore=.gitignore --tar-ignore=.gitmodules
dpkg-source: info: using source format '3.0 (native)'
dpkg-source: info: building diffoscope in diffoscope_89.tar.xz
dpkg-source: info: building diffoscope in diffoscope_89.dsc
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dcmd mv ../diffoscope_89.dsc ../b
mattia@warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % cd ..
mattia@warren ~/devel/reproducible/diffoscope % diffoscope a/diffoscope_89.dsc b/diffoscope_89.dsc
|##################################################################################################################################| 100% Time: 0:00:00
mattia@warren ~/devel/reproducible/diffoscope %
So, yes, source packages can be built reproducibly!
:D
--
regards,
Mattia Rizzolo
GPG Key: 66AE 2B4A FCCF 3F52 DA18 4D18 4B04 3FCD B944 4540 .''`.
more about me: https://mapreri.org : :' :
Launchpad user: https://launchpad.net/~mapreri `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia `-
Attachment:
signature.asc
Description: PGP signature