[From nobody Sun Oct 18 00:21:07 2026
Received: (at submit) by bugs.debian.org; 25 Nov 2025 22:16:27 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-10.2 required=4.0 tests=BAYES_00,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MD5_SHA1_SUM,PGPSIGNATURE,
 SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 7; hammy, 150; neutral, 76; spammy, 0.
 spammytokens: hammytokens:0.000-+--XDebbugsCc,
 0.000-+--X-Debbugs-Cc, 
 0.000-+--cmake, 0.000-+--H*ct:application, 0.000-+--H*ct:protocol
Return-path: &lt;vagrant@reproducible-builds.org&gt;
Received: from cascadia.aikidev.net ([2600:3c01:e000:267:0:a171:de7:c]:37668)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from &lt;vagrant@reproducible-builds.org&gt;)
 id 1vO1Kk-00CgFP-1O for submit@bugs.debian.org;
 Tue, 25 Nov 2025 22:16:27 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
 d=reproducible-builds.org; s=1.vagrant; t=1764108983;
 bh=lLKCms0i+jqe/ECULJhat3DblaLuZzdqVj8PlrwUQc0=;
 h=From:To:Subject:Date:From;
 b=gZLjDGE8y7TEp8+vxXQlDI5nIxeETsqSlP6fb/OaremEXvA3z53SwxK9EUEROSEdb
 CCoo3nHhc0gwhMmwQi+ZlZczVvVL4muKiGx05C4dKIfh/3BRi4JIl11THTv7NexJzJ
 I/jxIpP+pYRTt3XqU98FeTTf33qlbRzc7NrcxZnOvqhX/Z5fmpUQHBbSHrEAr1rw6q
 UvOmCk2UBCDKDMel/7RmD+6616zKCdhSUceiGIwL8CTGVNhe6fiheC8B0xFtNPtzrw
 nRE1JrQE/g/FuyvOHEM+CnVe+BkUYlPkzORs2uTQYGp3Qaio/uTqr5OYlsGU7Ke7R0
 Ythb7ULF5iqKA==
Received: from localhost (unknown [IPv6:2600:3c01:e000:21:7:77:0:50])
 by cascadia.aikidev.net (Postfix) with ESMTPSA id 891EA7A6
 for &lt;submit@bugs.debian.org&gt;; Tue, 25 Nov 2025 14:16:23 -0800 (PST)
From: Vagrant Cascadian &lt;vagrant@reproducible-builds.org&gt;
To: submit@bugs.debian.org
Subject: clhep: reproducible-builds: build date in PDF file
Date: Tue, 25 Nov 2025 14:16:18 -0800
Message-ID: &lt;87o6op7o7h.fsf@wireframe&gt;
MIME-Version: 1.0
Content-Type: multipart/signed; boundary=&quot;==-=-=&quot;;
 micalg=pgp-sha512; protocol=&quot;application/pgp-signature&quot;
X-Greylist: delayed 3741 seconds by postgrey-1.37 at buxtehude;
 Tue, 25 Nov 2025 22:16:26 UTC
Delivered-To: submit@bugs.debian.org

--==-=-=
Content-Type: multipart/mixed; boundary=&quot;=-=-=&quot;

--=-=-=
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Source: clhep
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The date is embedded in a shipped PDF file:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffos=
cope-results/clhep.html

  ./usr/share/doc/clhep/GenericFunctions/genericFunctions.pdf.gz

  November=C2=B724,=C2=B72025
  vs.
  December=C2=B727,=C2=B72026

The attached patch sets FORCE_SOURCE_DATE in debian/rules to ensure that
texlive respects SOURCE_DATE_EPOCH for a reproducible date.

According to my local tests, with this patch applied clhep should
build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining clhep!

live well,
  vagrant

--=-=-=
Content-Type: text/x-diff
Content-Disposition: inline;
 filename=0001-debian-rules-Set-FORCE_SOURCE_DATE-1-for-reproducibl.patch
Content-Transfer-Encoding: quoted-printable

From=20f16dc481429b4d13f7434bea32174df6555984c7 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian &lt;vagrant@reproducible-builds.org&gt;
Date: Tue, 25 Nov 2025 13:07:14 -0800
Subject: [PATCH] debian/rules: Set FORCE_SOURCE_DATE=3D1 for reproducible P=
DF
 generation.

=2D--
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index ead6449..5c516e0 100755
=2D-- a/debian/rules
+++ b/debian/rules
@@ -2,6 +2,9 @@
=20
 export DEB_BUILD_MAINT_OPTIONS =3D hardening=3D+all
=20
+# Ensure pdflatex respects SOURCE_DATE_EPOCH when generating PDFs
+export FORCE_SOURCE_DATE =3D 1
+
 %:
 	dh $@  --sourcedirectory=3DCLHEP --buildsystem=3Dcmake+ninja
=20
=2D-=20
2.39.5


--=-=-=--

--==-=-=
Content-Type: application/pgp-signature; name=&quot;signature.asc&quot;

-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRlgHNhO/zFx+LkXUXcUY/If5cWqgUCaSYqsgAKCRDcUY/If5cW
qlBdAPsEvAvuI6rTr1/DWVvoGM8EJt0h+3sGVriz0NPowTGCzQEAyZuUEbaQcOSM
gftqDGvaBnSiC00kofkQwc4Z9mJ2XgQ=
=6b1R
-----END PGP SIGNATURE-----
--==-=-=--
]