--- Begin Message ---
- To: submit@bugs.debian.org
- Subject: xfce4-session: reproducible build (usrmerge): embeds path of rm found via PATH
- From: Ansgar Burchardt <ansgar@debian.org>
- Date: Mon, 03 Dec 2018 20:02:50 +0100
- Message-id: <72281f0a75cd75afdfcf52eab79584909112ba48.camel@43-1.org>
Source: xfce4-session
Version: 4.12.1-6
Severity: normal
Tags: patch
User: md@linux.it
Usertags: usrmerge
Control: user reproducible-builds@lists.alioth.debian.org
Control: usertag -1 + environment
Dear Maintainer,
According to reproducible build tests xfce4-session gets built
differently on a merged-usr system vs a non-merged system.
The package embeds the full path of rm. Since PATH defaults to
/usr/bin before /bin, the first will be used on a usrmerged system
where they're both essentially the same thing, but /usr/bin/rm does
not exist on non-merged systems.
The attached patch passes `RM=/bin/rm` to explicitly set the path.
Regards,
Ansgar
diff -Nru xfce4-session-4.13.1/debian/changelog xfce4-session-4.13.1/debian/changelog
--- xfce4-session-4.13.1/debian/changelog 2018-08-22 14:26:25.000000000 +0200
+++ xfce4-session-4.13.1/debian/changelog 2018-12-03 19:46:56.000000000 +0100
@@ -1,3 +1,10 @@
+xfce4-session (4.13.1-1.1) UNRELEASED; urgency=medium
+
+ * Explicit pass `RM=/bin/rm` to configure to make build reproducible
+ between merged-usr and non-merged-usr systems.
+
+ -- Ansgar Burchardt <ansgar@debian.org> Mon, 03 Dec 2018 19:46:56 +0100
+
xfce4-session (4.13.1-1) experimental; urgency=medium
* New upstream version 4.13.1
diff -Nru xfce4-session-4.13.1/debian/rules xfce4-session-4.13.1/debian/rules
--- xfce4-session-4.13.1/debian/rules 2018-08-22 14:26:25.000000000 +0200
+++ xfce4-session-4.13.1/debian/rules 2018-12-03 19:46:43.000000000 +0100
@@ -21,7 +21,7 @@
endif
override_dh_auto_configure:
- dh_auto_configure -- --disable-legacy-sm --with-backend=$(BACKEND)
+ dh_auto_configure -- RM=/bin/rm --disable-legacy-sm --with-backend=$(BACKEND)
%:
dh $@
--- End Message ---
--- Begin Message ---
Source: xfce4-session
Source-Version: 4.13.1-2
We believe that the bug you reported is fixed in the latest version of
xfce4-session, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 915423@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Yves-Alexis Perez <corsac@debian.org> (supplier of updated xfce4-session package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 21 Feb 2019 13:53:57 +0100
Source: xfce4-session
Binary: xfce4-session
Architecture: source
Version: 4.13.1-2
Distribution: experimental
Urgency: medium
Maintainer: Debian Xfce Maintainers <debian-xfce@lists.debian.org>
Changed-By: Yves-Alexis Perez <corsac@debian.org>
Description:
xfce4-session - Xfce4 Session Manager
Closes: 915423 922718
Changes:
xfce4-session (4.13.1-2) experimental; urgency=medium
.
* d/patches: hardcode RM_CMD to fix reproducibility issues (Closes: #915423)
* d/control: drop Lionel from uploaders, thanks!
* select debhelper compat mode through debhelper-compat b-d
* d/control: remove versions in b-deps satisfied in stable
* d/control: update standards version to 4.3.0
* use HTTPS protocol where needed
* d/control: drop duplicate Section field
* update lintian overrides
* d/patches: add xfce4-screensaver to locker list (Closes: #922718)
Checksums-Sha1:
4f5d7b842ae48fd2ccbc3c0a90ff19cb820c1a3e 1894 xfce4-session_4.13.1-2.dsc
dda3e297148bf87dd58f5a95efe71d7b241ccbd6 14492 xfce4-session_4.13.1-2.debian.tar.xz
f53c4aed52613a20f6ada4706a9924ebdd78f34b 15631 xfce4-session_4.13.1-2_amd64.buildinfo
Checksums-Sha256:
305415696656b6b380082d5d9da2d4440200ef215acaec89cda8f3499b8235c7 1894 xfce4-session_4.13.1-2.dsc
6f996bb422c82dc1a57adb6ac58fff7152eb1683e877a68d9781d4a3c716340a 14492 xfce4-session_4.13.1-2.debian.tar.xz
04ea32c930f832df3e53bb86a7c85e370701a78c289392a51b010841ca3466fd 15631 xfce4-session_4.13.1-2_amd64.buildinfo
Files:
7e06ec033e7f90a7c3a9b4242777bf9a 1894 xfce optional xfce4-session_4.13.1-2.dsc
8c8548964159d0309baca5c5d3764995 14492 xfce optional xfce4-session_4.13.1-2.debian.tar.xz
1b4799ddabd6ed0260aae723f4bb03c2 15631 xfce optional xfce4-session_4.13.1-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQEzBAEBCgAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAlxwGOkACgkQ3rYcyPpX
RFtWmQgA0x0V0FfPXk2qIDWrQM+wHA+Sn9b3hMKhBtzbF6faPQqzjENMmLFZ90j4
vZmDsl3FK7/DW485zeWFl5gNy3awdERUpFlsmF2j+idMVzvB0Y9n7mhSonah/LYt
bhvxMkH51vlqcQs4BpG77S4mCZAf1FLwS6Vf3xXTzp9lgGg+h0YNd5FXHiT/G29W
qucs0BPo8IcsB12GQYtVFhXg5iG0X5AKjggvI5DZ14fhKGvF9Yt2yjE8jODpGQmp
oKEgvknBPNgk00yD6Kpm3oWgkadW3r0zW3O5HWLY3IYhN1rvtFD1hRzpYjJC6jBh
MpWFCWqVBdB9s0cgiiAYLAoFMLlzgA==
=uTkG
-----END PGP SIGNATURE-----
--- End Message ---