Bug#1039623: shotcut: reproducible-builds: build paths trigger differences, embedded date-based version

[Vagrant Cascadian]

Source: shotcut
Version: 23.06.14+git20230616+ds-4
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps timezone buildpath
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The RPATH contains a hash of the build path resulting in different
buildid and the SHOTCUT_VERSION is set based on a timezone-dependent
timestamp:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/shotcut.html

  /usr/share/metainfo/org.shotcut.Shotcut.metainfo.xml

  <release·version="23.06.20"·date="2023-06-20"/>
  vs.
  <release·version="23.06.21"·date="2023-06-21"/>

The attached patches modify debian/rules to pass
-DCMAKE_BUILD_RPATH_USE_ORIGIN=ON to dh_auto_configure to use a relative
path for rpath, and modify CmakeLists.txt to set SHOTCUT_VERSION using
UTC for the timezone.

With both these patches applied, based on my local tests, shotcut should
build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining shotcut!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-CmakeLists.txt-Use-UTC-for-timestamp-for-reproducibl.patch
Type: text/x-diff
Size: 842 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230627/87386cdd/attachment-0002.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-debian-rules-Pass-DCMAKE_BUILD_RPATH_USE_ORIGIN-ON-v.patch
Type: text/x-diff
Size: 855 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230627/87386cdd/attachment-0003.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20230627/87386cdd/attachment-0001.sig>