From lamby at debian.org  Mon Mar 18 13:02:20 2024
From: lamby at debian.org (Chris Lamb)
Date: Mon, 18 Mar 2024 13:02:20 +0000
Subject: Bug#1067098: mpl-sphinx-theme: please make the build reproducible
Message-ID: <171076690531.5511.9380057575908944049@c890b50cd7ef>

Source: mpl-sphinx-theme
Version: 3.5.0-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
mpl-sphinx-theme could not be built reproducibly.

This is because it embedded the build date in the documentation:

? ? ? ??? ./usr/share/doc/python-mpl-sphinx-theme-doc/html/genindex.html
? ? ? ? @@ -184,15 +184,15 @@
? ? ? ?    
? ? ? ?    <script src="_static/js/index.be7d3bbb2ef33a8344ce.js"></script>
? ? ? ?  <footer class="footer mt-5 mt-md-0">
? ? ? ?    <div class="container">
? ? ? ?      
? ? ? ?      <div class="footer-item">
? ? ? ?        <p class="copyright">
? ? ? ? -    &copy; Copyright 2024 - 2024 The Matplotlib development team.<br>
? ? ? ? +    &copy; Copyright 2024 - 2025 The Matplotlib development team.<br>
? ? ? ?  </p>

(Etc.)

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/patches/reproducible-build.patch	1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/reproducible-build.patch	2024-03-18 12:59:19.650123651 +0000
@@ -0,0 +1,28 @@
+Description: Make the build reproducible
+Author: Chris Lamb <lamby at debian.org>
+Last-Update: 2024-03-18
+
+--- mpl-sphinx-theme-3.5.0.orig/docs/conf.py
++++ mpl-sphinx-theme-3.5.0/docs/conf.py
+@@ -1,5 +1,12 @@
++import os
++import time
+ import datetime
+ 
++build_date = datetime.datetime.fromtimestamp(
++    int(os.environ.get('SOURCE_DATE_EPOCH', time.time())),
++    tz=datetime.timezone.utc,
++)
++
+ # Configuration file for the Sphinx documentation builder for
+ # matplotlib projects.
+ 
+@@ -10,7 +17,7 @@ is_release_build = tags.has('release')
+ 
+ project = "Matplotlib Sphinx Theme"
+ copyright = (
+-    f"2012 - {datetime.datetime.now().year} The Matplotlib development team"
++    f"2012 - {build_date.year} The Matplotlib development team"
+ )
+ author = "Matplotlib Developers"
+ 
--- a/debian/patches/series	1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/series	2024-03-18 12:59:16.218124536 +0000
@@ -0,0 +1 @@
+reproducible-build.patch

From lamby at debian.org  Mon Mar 18 13:14:29 2024
From: lamby at debian.org (Chris Lamb)
Date: Mon, 18 Mar 2024 13:14:29 +0000
Subject: Bug#1067099: woof-doom: please make the build reproducible
Message-ID: <171076754173.10946.16133674613654278022@424ad6026c7f>

Source: woof-doom
Version: 14.3.0+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
woof-doom could not be built reproducibly:

? ? ? ? ??? /usr/share/metainfo/io.github.fabiangreffrath.woof.metainfo.xml
? ? ? ? ? @@ -35,10 +35,10 @@
? ? ? ? ?    </content_rating>
? ? ? ? ?    <releases>
? ? ? ? ? -    <release version="14.3.0" date="2024-03-14"/>
? ? ? ? ? +    <release version="14.3.0" date="2024-03-15"/>
? ? ? ? ?    </releases>

A patch is attached that uses CMake's "UTC" argument to make sure that
this value does not vary due to the build system's timezone. (CMake is
already magically making the date inherit from SOURCE_DATE_EPOCH.)

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/patches/reproducible-build.patch	1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/reproducible-build.patch	2024-03-18 13:03:40.906056433 +0000
@@ -0,0 +1,12 @@
+Description: Make the build reproducible
+Author: Chris Lamb <lamby at debian.org>
+Last-Update: 2024-03-18
+
+--- woof-doom-14.3.0+dfsg.orig/data/CMakeLists.txt
++++ woof-doom-14.3.0+dfsg/data/CMakeLists.txt
+@@ -1,4 +1,4 @@
+-string(TIMESTAMP PROJECT_DATE "%Y-%m-%d")
++string(TIMESTAMP PROJECT_DATE "%Y-%m-%d" UTC)
+ 
+ configure_file(io.github.fabiangreffrath.woof.metainfo.in
+                io.github.fabiangreffrath.woof.metainfo.xml
--- a/debian/patches/series	1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/series	2024-03-18 13:03:39.342056834 +0000
@@ -0,0 +1 @@
+reproducible-build.patch

From lamby at debian.org  Mon Mar 18 13:17:56 2024
From: lamby at debian.org (Chris Lamb)
Date: Mon, 18 Mar 2024 13:17:56 +0000
Subject: Bug#1067100: bochs: please make the build reproducible
Message-ID: <171076781366.107754.3869204965539770092@0a4cc61a99a6>

Source: bochs
Version: 2.8+dfsg-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
bochs could not be built reproducibly:

? ? ? ??? /usr/share/bochs/BIOS-bochs-latest
? ? ? ? @@ -7548,16 +7548,16 @@
[]
? ? ? ?  0001d810: 5333 2072 6573 756d 6520 6361 6c6c 6564  S3 resume called
? ? ? ? -0001d820: 2025 7820 3078 256c 780a 0030 332f 3137   %x 0x%lx..03/17
? ? ? ? -0001d830: 2f32 3400 4249 4f53 2042 5549 4c44 2044  /24.BIOS BUILD D
? ? ? ? +0001d820: 2025 7820 3078 256c 780a 0030 342f 3139   %x 0x%lx..04/19
? ? ? ? +0001d830: 2f32 3500 4249 4f53 2042 5549 4c44 2044  /25.BIOS BUILD D
? ? ? ?  0001d840: 4154 453a 2025 730a 0049 4e54 3138 3a20  ATE: %s..INT18:

A patch is attached that seeds this date from SOURCE_DATE_EPOCH if
available.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/patches/reproducible-build.patch	1970-01-01 01:00:00.000000000 +0100
--- b/debian/patches/reproducible-build.patch	2024-03-18 12:53:29.510214179 +0000
@@ -0,0 +1,20 @@
+Description: Make the build reproducible
+Author: Chris Lamb <lamby at debian.org>
+Last-Update: 2024-03-18
+
+--- bochs-2.8+dfsg.orig/bios/Makefile.in
++++ bochs-2.8+dfsg/bios/Makefile.in
+@@ -47,7 +47,12 @@ LOCAL_CXXFLAGS =
+ 
+ # UPSTREAM_RELEASE_DATE = $(shell grep "Updated:" ../README | sed 's/Updated://')
+ # BUILDDATE = `date -u -d '$(UPSTREAM_RELEASE_DATE)' '+%m/%d/%y'`
+-BUILDDATE = `date -u '+%m/%d/%y'`
++DATE_FMT = +%m/%d/%y
++ifdef SOURCE_DATE_EPOCH
++BUILDDATE ?= $(shell date -u -d "@$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u -r "$(SOURCE_DATE_EPOCH)" "$(DATE_FMT)" 2>/dev/null || date -u "$(DATE_FMT)")
++else
++BUILDDATE ?= $(shell date "$(DATE_FMT)")
++endif
+ BIOS_BUILD_DATE = "-DBIOS_BUILD_DATE=\"$(BUILDDATE)\""
+ #
+ # -------- end configurable options --------------------------
--- a/debian/patches/series	2024-03-18 12:08:12.631304482 +0000
--- b/debian/patches/series	2024-03-18 12:53:28.550214427 +0000
@@ -7,3 +7,4 @@
 cross-build-1.patch
 narrowing-conversions.patch
 instrument-stub-class.patch
+reproducible-build.patch

From lamby at debian.org  Mon Mar 18 13:21:53 2024
From: lamby at debian.org (Chris Lamb)
Date: Mon, 18 Mar 2024 13:21:53 +0000
Subject: Bug#1067101: storm-lang: please make the build reproducible
Message-ID: <171076806642.403390.4875203121396738832@copycat>

Source: storm-lang
Version: 0.6.20-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
storm-lang could not be built reproducibly:

??? ??? ??? ????????? ./usr/share/doc/storm-lang/html/05-Downloads/index.html
??? ??? ??? ??? @@ -322,15 +322,15 @@
[???]
??? ??? ??? ???  </p>
??? ??? ??? ??? -<h2>Binary releases for 0.6.20-1+debian (2024-02-21)</h2>
??? ??? ??? ??? +<h2>Binary releases for 0.6.20-1+debian (2024-02-23)</h2>
??? ??? ??? ???  <ul>

A patch is attached that modifies an *existing* patch to ensure that
this date does not vary depending on the build machine's timezone.

  [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
diff --git a/debian/patches/build-files b/debian/patches/build-files
index ec9c5ba..b33396c 100644
--- a/debian/patches/build-files
+++ b/debian/patches/build-files
@@ -145,5 +145,5 @@ Author: Filip Str?mb?ck <filip at fprg.se>
 +#!/bin/bash
 +
 +date=$(sed -En 's/--.*<.*>  ([^ ].*)/\1/p' debian/changelog | head -n 1)
-+date=$(date --date="$date" "+%Y-%m-%d")
++date=$(date --utc --date="$date" "+%Y-%m-%d")
 +release/Storm_mps -r root -f markdown.doc.generate --  --clear --date=$date Storm storm doc "$1"

From lamby at debian.org  Mon Mar 18 13:25:20 2024
From: lamby at debian.org (Chris Lamb)
Date: Mon, 18 Mar 2024 13:25:20 +0000
Subject: Bug#1067102: librsvg: please make the build reproducible
Message-ID: <171076819574.101925.12866885987958059937@2b3327915945>

Source: librsvg
Version: 2.57.92+dfsg-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: umask
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
librsvg could not be built reproducibly due to a typo in debian/rules:

        # debhelper >= 13.4 makes all of /usr/libexec executable, which is not
        # quite right for installed-tests
        override_dh_fixperms:
                dh_fixperms -Xusr/libexec/rsvg/tests
        ifneq ($(filter %-tests,$(binaries)),)
                chmod --recursive --changes a+rX,u+w,og-w debian/*-tests/usr/libexec/rsvg/tests
        endif

This should refer to "$(built_binaries)", not "$(binaries)"? and so
the line is not run... resulting in the build varying depending on the
build system's umask. :)

A patch that corrects this typo is attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-


-------------- next part --------------
--- a/debian/rules	2024-03-18 12:02:58.659721987 +0000
--- b/debian/rules	2024-03-18 12:57:15.974155554 +0000
@@ -52,7 +52,7 @@
 # quite right for installed-tests
 override_dh_fixperms:
 	dh_fixperms -Xusr/libexec/rsvg/tests
-ifneq ($(filter %-tests,$(binaries)),)
+ifneq ($(filter %-tests,$(built_binaries)),)
 	chmod --recursive --changes a+rX,u+w,og-w debian/*-tests/usr/libexec/rsvg/tests
 endif
 

From lamby at debian.org  Wed Mar 20 11:05:14 2024
From: lamby at debian.org (Chris Lamb)
Date: Wed, 20 Mar 2024 11:05:14 +0000
Subject: Bug#1067218: gretl: please make the build reproducible
Message-ID: <171093266848.126430.5882170214972149750@744b2cb86266>

Source: gretl
Version: 2023c-2.1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
gretl could not be built reproducibly.

This is because the PDF documentation embeds the current date via TeX's
\today (etc.). A patch is attached that uses FORCE_SOURCE_DATE to request
that TeX sources the current date from SOURCE_DATE_EPOCH instead of the
system clock.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2024-03-20 10:22:09.435742379 +0000
--- b/debian/rules	2024-03-20 10:41:22.804750818 +0000
@@ -24,6 +24,9 @@
 cflags	= -O0 -g0 -Wall
 endif
 
+# Request that TeX seed the \today (etc.) from SOURCE_DATE_EPOCH
+export FORCE_SOURCE_DATE = 1
+
 #export DH_VERBOSE=1
 
 upstream: get-orig-source

From lamby at debian.org  Fri Mar 22 09:40:21 2024
From: lamby at debian.org (Chris Lamb)
Date: Fri, 22 Mar 2024 09:40:21 +0000
Subject: Bug#1067483: postfix: please make the build reproducible
Message-ID: <171110029847.16942.3869827234203308628@3714e7c16869>

Source: postfix
Version: 3.9.0-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
postfix could not be built reproducibly:

 /usr/share/doc/postfix/examples/makedefs.out
  # AUXLIBS=-lssl -lcrypto -lsasl2 -lpthread
 -# AUXLIBS_CDB=-lcdb
 +# AUXLIBS_PCRE=-lpcre2-8
 +# AUXLIBS_PGSQL=-lpq
 +# AUXLIBS_MYSQL=-lmysqlclient
 +# AUXLIBS_SQLITE=-lsqlite3
  # AUXLIBS_MONGODB=-lmongoc-1.0 -lbson-1.0

This is caused by printing the output of "env" without piping it
through sort(1) ? see the attached patch. We don't need to specify
LC_ALL=C as this is already done on line 189.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-


From lamby at debian.org  Fri Mar 22 09:53:33 2024
From: lamby at debian.org (Chris Lamb)
Date: Fri, 22 Mar 2024 09:53:33 +0000
Subject: Bug#1067484: node-function-bind: please make the build reproducible
Message-ID: <171110113107.6021.11086342441788274590@a7fa8e53ff22>

Source: node-function-bind
Version: 1.1.2+~cs2.1.14-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
node-function-bind could not be built reproducibly.

This is because it ships test coverage information generated using the
run of the testsuite. These files in turn contain nondeterministic dates:

? ? ? ??? ./usr/share/nodejs/has/coverage/index.html
? ? ? ?                  Code coverage generated by
? ? ? ?                  <a href="https://istanbul.js.org/" target="_blank" rel="noopener noreferrer">istanbul</a>
? ? ? ? -                at Thu Apr 24 2025 09:17:32 GMT+0000 (GMT)
? ? ? ? +                at Fri Mar 22 2024 02:58:54 GMT+0000 (GMT)

Patch attached that simply removes these files from the binary package.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2024-03-22 09:42:48.097059681 +0000
--- b/debian/rules	2024-03-22 09:51:56.744545540 +0000
@@ -9,6 +9,9 @@
 %:
 	dh $@ --with nodejs
 
+execute_after_dh_auto_test:
+	rm -rf has/coverage
+
 override_dh_installdocs:
 ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS) $(DEB_BUILD_PROFILES)))
 	dh_installdocs

From lamby at debian.org  Fri Mar 22 10:18:03 2024
From: lamby at debian.org (Chris Lamb)
Date: Fri, 22 Mar 2024 10:18:03 +0000
Subject: Bug#1067485: python-pysaml2: please make the build reproducible
Message-ID: <171110255220.17816.5545590086929577471@e09f9b158f0a>

Source: python-pysaml2
Version: 7.4.2-3
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
python-pysaml2 could not be built reproducibly.

This is because the tests generate a (nondeterministic) file called
eptid.db that is then shipped in the binary package. Incidentally, the
file is installed directly to the global
/usr/lib/python3/dist-packages directory, which is a likely a bug in
itself. (Hm, isn't there a Lintian warning for this?)

Anyway, patch attached that removes this file after running the tests.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2024-03-22 09:31:42.477985685 +0000
--- b/debian/rules	2024-03-22 09:59:35.122321091 +0000
@@ -21,6 +21,9 @@
 	for i in $$(find . -type d -iname __pycache__) ; do rm -rf $$i ; done
 	dh_auto_clean
 
+execute_after_dh_auto_test:
+	find .pybuild -type f -name eptid.db -delete
+
 #override_dh_install:
 #	dh_install
 #	set -e ; set -x ; for i in `ls $(CURDIR)/debian/python3-pysaml2/usr/bin/*.py` ; do \

From e-bicyclejr at htdq168.com  Fri Mar 22 12:03:59 2024
From: e-bicyclejr at htdq168.com (E-bicycle Expert)
Date: Fri, 22 Mar 2024 13:03:59 +0100
Subject: two cutting-edge new e-bicycle models available now in warehouse
Message-ID: <3e12664fdc1f9efb0546d35e9685dc5f@htdq168.com>

An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20240322/d54bb667/attachment.htm>