Bug#963537: golang-v2ray-core: please make the build reproducible

[Chris Lamb]

Source: golang-v2ray-core
Version: 4.23.4+ds-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
golang-v2ray-core could not be built reproducibly.

This is because during the test part of the build process the package
generates test certificates that end up in the final binary .deb.

This is a problem in two ways: these files are not deterministic
(DSA-1571 was a long time ago) and the contents of the package will
depend on whether you run the testsuite or not (ie. with "nocheck"
etc.)

Patch attached that never installs these files.

 [0] https://reproducible-builds.org/


Regards,

--
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: golang-v2ray-core.diff.txt
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200623/505ecfeb/attachment.txt>