Bug#1034200: lomiri: reproducible builds: results.txt contains arbitrary data

[Vagrant Cascadian]

Source: lomiri
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The data in the shipped results.txt file contains arbitrary data:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/lomiri.html

  /usr/share/doc/lomiri/html/results.txt.gz
  
  DUPTYPE_FIRST_OCCURRENCE·516·0·32·33·982296778·3·./classlomiri_1...
  vs.
  DUPTYPE_FIRST_OCCURRENCE·516·0·32·34·1071371337·3·./classlomiri_1...

The attached patch to debian/rules fixes this by removing the
results.txt from a dh_installdocs override.

The results.txt file appears to be an artifact from generating the
documentation and does not appear to be referenced from the produced
documentation, though someone familiar with using the documentation
should verify this before applying the patch!


According to my local tests, applying this patch (and another soon to be
submitted) should make lomiri build reproducibly on
tests.reproducible-builds.org once lomiri lands in debian testing!
(tests for debian unstable/experimental also test build path variations,
which introduce additional issues)


Thanks for maintaining lomiri!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Add-dh_installdocs-override-to-remove-r.patch
Type: text/x-diff
Size: 1006 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230410/641a9bb7/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230410/641a9bb7/attachment.sig>