[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1106526: marked as done (nmu: multiple binNMUs to fix build reproducibility)

Your message dated Sun, 1 Jun 2025 13:42:56 +0200
with message-id <aDw8wGmUThH_OJBS@ramacher.at>
and subject line Re: Bug#1106526: nmu: multiple binNMUs to fix build reproducibility
has caused the Debian Bug report #1106526,
regarding nmu: multiple binNMUs to fix build reproducibility
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1106526: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1106526
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: release.debian.org
Severity: normal
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
User: release.debian.org@packages.debian.org
Usertags: binnmu

Dear release team,

Reproducible builds are based on the assumption that the build date is
always newer than the latest changelog entry.

Unfortunately some source packages recently got uploaded from a computer
with the wrong time, causing the binary packages in the archive to not
be reproducible, as this can be checked on reproduce.debian.net. They
however appear as reproducible on tests.reproducible-builds.org as
instead of comparing a new build to the version in the archive, it does
two new builds and check they matches.

After doing a full check of the testing suite, I have found that this
problem actually existed for other packages. Here is a list of binNMUs
to fix many of them:

nmu baobab_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu clapper_0.8.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu deja-dup_45.2-3 . ANY . -m 'Rebuild to fix reproducibility'
nmu five-or-more_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-2048_3.38.2-5 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-boxes_48.0-3 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-builder_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-calculator_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-calendar_48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-clocks_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-commander_1.18.2-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-connections_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-console_48.0.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-contacts_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-disk-utility_46.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-font-viewer_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-klotski_1:3.38.2-4 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-mahjongg_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-mines_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-multi-writer_3.32.1-4 . ANY . -m 'Rebuild to fix reproducibility'
nmu gnome-power-manager_43.0-4 . ANY . -m 'Rebuild to fix reproducibility'
nmu tiptop_2.3.1-5 . amd64 armel armhf i386 mips64el ppc64el s390x m68k powerpc ppc64 sh4 sparc64 x32 . -m 'Rebuild to fix reproducibility'

Unfortunately some others will require a sourceful upload as they
include one or more arch:all packages.

Regards
Aurelien

--- End Message ---
--- Begin Message --- 
On 2025-05-25 16:12:51 +0200, Aurelien Jarno wrote:
> Package: release.debian.org
> Severity: normal
> X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
> User: release.debian.org@packages.debian.org
> Usertags: binnmu
> 
> Dear release team,
> 
> Reproducible builds are based on the assumption that the build date is
> always newer than the latest changelog entry.
> 
> Unfortunately some source packages recently got uploaded from a computer
> with the wrong time, causing the binary packages in the archive to not
> be reproducible, as this can be checked on reproduce.debian.net. They
> however appear as reproducible on tests.reproducible-builds.org as
> instead of comparing a new build to the version in the archive, it does
> two new builds and check they matches.

This sounds quite fragile. Why would that matter?

> After doing a full check of the testing suite, I have found that this
> problem actually existed for other packages. Here is a list of binNMUs
> to fix many of them:
> 
> nmu baobab_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu clapper_0.8.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu deja-dup_45.2-3 . ANY . -m 'Rebuild to fix reproducibility'
> nmu five-or-more_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-2048_3.38.2-5 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-boxes_48.0-3 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-builder_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-calculator_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-calendar_48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-clocks_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-commander_1.18.2-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-connections_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-console_48.0.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-contacts_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-disk-utility_46.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-font-viewer_48.0-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-klotski_1:3.38.2-4 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-mahjongg_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-mines_1:48.1-2 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-multi-writer_3.32.1-4 . ANY . -m 'Rebuild to fix reproducibility'
> nmu gnome-power-manager_43.0-4 . ANY . -m 'Rebuild to fix reproducibility'
> nmu tiptop_2.3.1-5 . amd64 armel armhf i386 mips64el ppc64el s390x m68k powerpc ppc64 sh4 sparc64 x32 . -m 'Rebuild to fix reproducibility'

Scheduled anyway.

Cheers
-- 
Sebastian Ramacher

--- End Message ---
Reply to: