From lamby at debian.org Wed Nov 22 09:39:51 2023 From: lamby at debian.org (Chris Lamb) Date: Wed, 22 Nov 2023 09:39:51 +0000 Subject: Bug#1056398: php-doc: please make the build reproducible Message-ID: <170064592343.102809.6395294403691773113@327dd37d7613> Source: php-doc Version: 20231115~git.99fbf5d+dfsg-1 Severity: wishlist Tags: patch User: reproducible-builds at lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that php-doc could not be built reproducibly. This is due to embedded timestamps. For example: ? ? ? ??? ./usr/share/doc/php-doc/html/index.html ? ? ? ? @@ -98,27 +98,27 @@ ? ? ? ? ? ? ? ? And several others ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? ? -
2023-11-21
? ? ? ? +
2024-12-23
Patch attached that seeds this date from SOURCE_DATE_EPOCH instead. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` lamby at debian.org / chris-lamb.co.uk `- -------------- next part -------------- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-build.patch 2023-11-22 09:35:13.092088512 +0000 @@ -0,0 +1,15 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2023-11-22 + +--- php-doc-20231115~git.99fbf5d+dfsg.orig/phd/phpdotnet/phd/PI/DBHTMLHandler.php ++++ php-doc-20231115~git.99fbf5d+dfsg/phd/phpdotnet/phd/PI/DBHTMLHandler.php +@@ -98,7 +98,7 @@ class PI_DBHTMLHandler extends PIHandler + } + $format = $this->getAttribute("format"); + if (!$format) { +- return $this->format->appendData(date('c')); ++ return $this->format->appendData(date('c', getenv('SOURCE_DATE_EPOCH') ?: time())); + } + $dateFormat = ""; + $len = strlen($format); --- a/debian/patches/series 2023-11-22 09:29:46.742984644 +0000 --- b/debian/patches/series 2023-11-22 09:35:11.644083656 +0000 @@ -1,2 +1,3 @@ remove-xkcd-mediaobjects.patch replace-non-free-stylesheets.patch +reproducible-build.patch From lamby at debian.org Thu Nov 23 10:34:50 2023 From: lamby at debian.org (Chris Lamb) Date: Thu, 23 Nov 2023 10:34:50 +0000 Subject: Bug#1056572: maildir-utils: please make the build reproducible Message-ID: <170073563759.8411.16224328422743670583@896b6e37e451> Source: maildir-utils Version: 1.10.8-1 Severity: wishlist Tags: patch User: reproducible-builds at lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that maildir-utils could not be built reproducibly: ??? ./usr/share/man/man1/mu-add.1.gz ? ??? mu-add.1 ? ? @@ -85,15 +85,15 @@ ? ? Dirk-Jan C. Binnema ? ? ? ? .SH "COPYRIGHT" ? ? .PP ? ? This manpage is part of \fBmu\fP 1.10.8. ? ? ? ? .PP ? ? -Copyright ? 2022-2024 Dirk-Jan C. Binnema. License GPLv3+: GNU GPL version 3 ? ? +Copyright ? 2022-2023 Dirk-Jan C. Binnema. License GPLv3+: GNU GPL version 3 ? ? or later \fIhttps://gnu.org/licenses/gpl.html\fP. This is free software: you are A patch is attached that seeds this value from the SOURCE_DATE_EPOCH environment variable. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` lamby at debian.org / chris-lamb.co.uk `- -------------- next part -------------- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-build.patch 2023-11-23 10:29:51.399821031 +0000 @@ -0,0 +1,21 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2023-11-23 + +--- maildir-utils-1.10.8.orig/man/meson.build ++++ maildir-utils-1.10.8/man/meson.build +@@ -66,7 +66,13 @@ man_orgs=[ + + env = environment() + env.set('LANG', 'C') +-yearmonth = run_command('date', '+%B %Y', check:true, capture:true, env: env) ++cmd = run_command('sh', '-c', 'echo $SOURCE_DATE_EPOCH') ++# https://reproducible-builds.org/docs/source-date-epoch/#meson ++source_date_epoch = cmd.stdout().strip() ++if source_date_epoch == '' ++ source_date_epoch = run_command('date', '+%s').stdout().strip() ++endif ++yearmonth = run_command('date', '-u', '-d', '@' + source_date_epoch, '+%B %Y', check:true, capture:true, env: env) + ym=yearmonth.stdout().strip() + + foreach src : man_orgs --- a/debian/patches/series 2023-11-23 10:05:00.063724061 +0000 --- b/debian/patches/series 2023-11-23 10:29:50.287802884 +0000 @@ -5,3 +5,4 @@ more-man-page-fixes.patch typo-fixes.patch remove-mu4e-builddir.patch +reproducible-build.patch From lamby at debian.org Thu Nov 23 10:33:45 2023 From: lamby at debian.org (Chris Lamb) Date: Thu, 23 Nov 2023 10:33:45 +0000 Subject: Bug#1056571: pelican: please make the build reproducible Message-ID: <170073552017.5188.5552552541753714222@91a60576edcd> Source: pelican Version: 4.9.1+dfsg-1 Severity: wishlist Tags: patch User: reproducible-builds at lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that pelican could not be built reproducibly: ??? ./usr/share/doc/pelican/html/content.html ? @@ -903,15 +903,15 @@ ? ? ? ? ?
?
?
? - Copyright © 2010?2023, Justin Mayer, Alexis Metaireau, and contributors ? + Copyright © 2010?2024, Justin Mayer, Alexis Metaireau, and contributors A patch is attached that seeds this date from the SOURCE_DATE_EPOCH environment variable. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` lamby at debian.org / chris-lamb.co.uk `- -------------- next part -------------- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-build.patch 2023-11-23 10:30:16.704226475 +0000 @@ -0,0 +1,22 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2023-11-23 + +--- pelican-4.9.1+dfsg.orig/docs/conf.py ++++ pelican-4.9.1+dfsg/docs/conf.py +@@ -1,5 +1,6 @@ + import datetime + import os ++import time + import sys + + if sys.version_info >= (3, 11): +@@ -28,7 +29,7 @@ extensions = [ + source_suffix = ".rst" + master_doc = "index" + project = project_data.get("name").upper() +-year = datetime.datetime.now().date().year ++year = datetime.datetime.utcfromtimestamp(int(os.environ.get('SOURCE_DATE_EPOCH', time.time()))).year + copyright = f"2010\u2013{year}" + exclude_patterns = ["_build"] + release = project_data.get("version") --- a/debian/patches/series 2023-11-23 10:05:08.543720337 +0000 --- b/debian/patches/series 2023-11-23 10:17:42.964110770 +0000 @@ -1,2 +1,3 @@ default_theme.patch drop-notmyidea-builtin-themes.patch +reproducible-build.patch From lamby at debian.org Thu Nov 23 10:40:38 2023 From: lamby at debian.org (Chris Lamb) Date: Thu, 23 Nov 2023 10:40:38 +0000 Subject: Bug#1056573: openmrac-data: please make the build reproducible Message-ID: <170073597659.2978.3301928700621503842@4f3995a50ee4> Source: openmrac-data Version: 1.1-2 Severity: wishlist Tags: patch User: reproducible-builds at lists.alioth.debian.org Usertags: umask X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that openmrac-data could not be built reproducibly due to the umask varying within the openmrac.dat tar archive: ??? ./usr/share/openmrac/openmrac.dat ? ??? file list ? ? @@ -1,256 +1,256 @@ ? ? --rw-r--r-- 0 root (0) root (0) 74614 1970-01-01 00:00:00.000000 asphalt.jpg ? ? --rw-r--r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 asphalt.jpg.3mt ? ? --rw-r--r-- 0 root (0) root (0) 789 1970-01-01 00:00:00.000000 barrier.3dm ? ? --rw-r--r-- 0 root (0) root (0) 5357 1970-01-01 00:00:00.000000 barrier.png ? ? --rw-r--r-- 0 root (0) root (0) 137 1970-01-01 00:00:00.000000 barrier.png.3mt ? ? --rw-r--r-- 0 root (0) root (0) 1365 1970-01-01 00:00:00.000000 barriera.png ? ? --rw-r--r-- 0 root (0) root (0) 127 1970-01-01 00:00:00.000000 barriera.png.3mt ? ? --rw-r--r-- 0 root (0) root (0) 26908 1970-01-01 00:00:00.000000 barrierd.png ? ? --rw-r--r-- 0 root (0) root (0) 20025 1970-01-01 00:00:00.000000 betonova_zed.jpg ? ? --rw-r--r-- 0 root (0) root (0) 142 1970-01-01 00:00:00.000000 betonova_zed.jpg.3mt ? ? --rw-r--r-- 0 root (0) root (0) 129 1970-01-01 00:00:00.000000 black.png.3mt ? ? --rw-r--r-- 0 root (0) root (0) 23570 1970-01-01 00:00:00.000000 bricks01.jpg ? ? --rw-r--r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 bricks01.jpg.3mt ? ? --rw-r--r-- 0 root (0) root (0) 163935 1970-01-01 00:00:00.000000 bulvar.3dm ? ? --rw-r--r-- 0 root (0) root (0) 396 1970-01-01 00:00:00.000000 cars.def ? ? --rw-r--r-- 0 root (0) root (0) 24999 1970-01-01 00:00:00.000000 chodnik.jpg ? ? --rw-r--r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 chodnik.jpg.3mt ? ? --rw-r--r-- 0 root (0) root (0) 41743 1970-01-01 00:00:00.000000 concrete.jpg ? ? --rw-r--r-- 0 root (0) root (0) 139 1970-01-01 00:00:00.000000 concrete.jpg.3mt ? ? --rw-r--r-- 0 root (0) root (0) 1915 1970-01-01 00:00:00.000000 cone.3dm ? ? --rw-r--r-- 0 root (0) root (0) 106 1970-01-01 00:00:00.000000 cone.png ? ? --rw-r--r-- 0 root (0) root (0) 91 1970-01-01 00:00:00.000000 cone.png.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 74614 1970-01-01 00:00:00.000000 asphalt.jpg ? ? +-rw-rw-r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 asphalt.jpg.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 789 1970-01-01 00:00:00.000000 barrier.3dm ? ? +-rw-rw-r-- 0 root (0) root (0) 5357 1970-01-01 00:00:00.000000 barrier.png ? ? +-rw-rw-r-- 0 root (0) root (0) 137 1970-01-01 00:00:00.000000 barrier.png.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 1365 1970-01-01 00:00:00.000000 barriera.png ? ? +-rw-rw-r-- 0 root (0) root (0) 127 1970-01-01 00:00:00.000000 barriera.png.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 26908 1970-01-01 00:00:00.000000 barrierd.png ? ? +-rw-rw-r-- 0 root (0) root (0) 20025 1970-01-01 00:00:00.000000 betonova_zed.jpg ? ? +-rw-rw-r-- 0 root (0) root (0) 142 1970-01-01 00:00:00.000000 betonova_zed.jpg.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 129 1970-01-01 00:00:00.000000 black.png.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 23570 1970-01-01 00:00:00.000000 bricks01.jpg ? ? +-rw-rw-r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 bricks01.jpg.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 163935 1970-01-01 00:00:00.000000 bulvar.3dm ? ? +-rw-rw-r-- 0 root (0) root (0) 396 1970-01-01 00:00:00.000000 cars.def ? ? +-rw-rw-r-- 0 root (0) root (0) 24999 1970-01-01 00:00:00.000000 chodnik.jpg ? ? +-rw-rw-r-- 0 root (0) root (0) 138 1970-01-01 00:00:00.000000 chodnik.jpg.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 41743 1970-01-01 00:00:00.000000 concrete.jpg ? ? +-rw-rw-r-- 0 root (0) root (0) 139 1970-01-01 00:00:00.000000 concrete.jpg.3mt ? ? +-rw-rw-r-- 0 root (0) root (0) 1915 1970-01-01 00:00:00.000000 cone.3dm ? ? +-rw-rw-r-- 0 root (0) root (0) 106 1970-01-01 00:00:00.000000 cone.png ? ? +-rw-rw-r-- 0 root (0) root (0) 91 1970-01-01 00:00:00.000000 cone.png.3mt Patch attached. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` lamby at debian.org / chris-lamb.co.uk `- -------------- next part -------------- --- a/debian/patches/reproducible-build.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-build.patch 2023-11-23 10:39:16.406417418 +0000 @@ -0,0 +1,15 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2023-11-23 + +--- openmrac-data-1.1.orig/Makefile ++++ openmrac-data-1.1/Makefile +@@ -10,7 +10,7 @@ $(TARGET): *.jpg *.png *.3dm *.3mt *.cmo + while read line; do rm -f $$line.raw; sox $$line.wav --bits 16 $$line.raw; done < wavlist.txt + ls *.jpg *.png *.3dm *.3mt *.cmo *.def *.raw > filelist.txt + rm -f $(TARGET) +- while read line; do tar --owner=root:0 --group=root:0 --mtime='UTC 1970-01-01 00:00:00' -rvf $(TARGET) $$line; done < filelist.txt ++ while read line; do tar --owner=root:0 --group=root:0 --mtime='UTC 1970-01-01 00:00:00' --mode=go=rX,u+rw,a-s -rvf $(TARGET) $$line; done < filelist.txt + sha1sum $(TARGET) > $(TARGET).sha1sum + + clean: --- a/debian/patches/series 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/series 2023-11-23 10:39:00.718283781 +0000 @@ -0,0 +1 @@ +reproducible-build.patch From lamby at debian.org Fri Nov 24 11:23:39 2023 From: lamby at debian.org (Chris Lamb) Date: Fri, 24 Nov 2023 11:23:39 +0000 Subject: Bug#1056649: vectorscan: please make the build reproducible Message-ID: <170082472093.46648.4103714150177071482@ad25a88a8f4e> Source: vectorscan Version: 5.4.11-1 Severity: wishlist Tags: patch User: reproducible-builds at lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org Hi, Whilst working on the Reproducible Builds effort [0], we noticed that vectorscan could not be built reproducibly. This is because it embeds a timezone-sensitive date via CMake's string(TIMESTAMP ?) functionality: string (TIMESTAMP BUILD_DATE "%Y-%m-%d") Since version 3.8.0, CMake has seeded the underlying value of these timestamps from SOURCE_DATE_EPOCH. However, the lack of the optional "UTC" argument means that this deterministic date will still be rendered nondeterministically under different timezones. For example: ??? ./usr/include/hs/hs_version.h ? @@ -28,15 +28,15 @@ ? ? #ifndef HS_VERSION_H_C6428FAF8E3713 ? #define HS_VERSION_H_C6428FAF8E3713 ? ? /** ? * A version string to identify this release of Hyperscan. ? */ ? -#define HS_VERSION_STRING "5.4.11 2023-11-20" ? +#define HS_VERSION_STRING "5.4.11 2023-11-21" This string is also included in various vectorscan binaries as well. A patch attached that simply adds "UTC" to the TIMESTAMP call. [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` lamby at debian.org / chris-lamb.co.uk `- -------------- next part -------------- --- a/debian/patches/reproducible-builds.patch 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/reproducible-builds.patch 2023-11-24 10:14:29.621651931 +0000 @@ -0,0 +1,15 @@ +Description: Make the build reproducible +Author: Chris Lamb +Last-Update: 2023-11-24 + +--- vectorscan-5.4.11.orig/CMakeLists.txt ++++ vectorscan-5.4.11/CMakeLists.txt +@@ -7,7 +7,7 @@ set (HS_MINOR_VERSION 4) + set (HS_PATCH_VERSION 11) + set (HS_VERSION ${HS_MAJOR_VERSION}.${HS_MINOR_VERSION}.${HS_PATCH_VERSION}) + +-string (TIMESTAMP BUILD_DATE "%Y-%m-%d") ++string (TIMESTAMP BUILD_DATE "%Y-%m-%d" UTC) + message(STATUS "Build date: ${BUILD_DATE}") + + # Dependencies check --- a/debian/patches/series 1970-01-01 01:00:00.000000000 +0100 --- b/debian/patches/series 2023-11-24 10:14:28.081648884 +0000 @@ -0,0 +1 @@ +reproducible-builds.patch