[Debian-med-packaging] Bug#788920: Bug#788920: orthanc: please make the build reproducible

[Sébastien Jodogne]

Dear Maria,

Thanks for your report! However, this issue is already fixed in the upstream code since February 16th, 2015 [1].

Unfortunately, I am still waiting for sponsor to review/upload the latest version of the Orthanc package [2]. I have therefore tagged your bug as closed in the d/changelog [3].

Regards,
Sébastien-


[1] https://code.google.com/p/orthanc/source/detail?spec=svn8e23f16a198d616e15ab3ad43c54891acdb67603&r=6ed49334d5c11d99072ea8a925fa2d6873c7ebd2
[2] https://lists.debian.org/debian-med/2015/06/msg00037.html
[3] http://anonscm.debian.org/viewvc/debian-med/trunk/packages/orthanc/trunk/debian/changelog?revision=19339&view=markup



----- Mail original -----
> De: "Maria Valentina Marin" <marivalenm at gmail.com>
> À: "Debian Bug Tracking System" <submit at bugs.debian.org>
> Envoyé: Mardi 16 Juin 2015 11:13:44
> Objet: [Debian-med-packaging] Bug#788920: orthanc: please make the build	reproducible
> 
> Source: orthanc
> Version: 0.8.4+dfsg-2
> Severity: wishlist
> Tags: patch
> User: reproducible-builds at lists.alioth.debian.org
> Usertags: timestamps
> 
> Hi,
> 
> While working on the “reproducible builds” effort [1], we have noticed
> that orthanc could not be built reproducibly.
> 
> The attached patch changes the value of HTML_TIMESTAMP in the file
> Orthanc.doxygen from YES to NO. Once applied orthanc can be built
> reproducibly in our current experimental framework.
> 
> Patching the doxyfile is necessary in this case because of the following
> reasons:
> 
> 1. Even though the doxygen upstream changed the default value of
> HTML_TIMESTAMP from YES to NO this does not affect this package because
> the value of HTML_TIMESTAMP is explicitly set to YES.
> 
> 2. Upstream's doxyfiles cannot reliably be modified to change the value
> of HTML_TIMESTAMP during the build process because dh_doxygen is only
> run after the build already completed and even adding a new dh command
> cannot solve the problem because there exists no sane and reliable
> solution to detect the file which will be used as the configuration file
> for doxygen (it is not always called doxyfile).
> 
> 3. In case of this source package a patch against upstream is necessary
> in contrast to a patch against Debian rules because this source package
> does not call doxygen in debian/rules.
> 
> Please also consider forwarding this patch upstream.
> 
> Cheers!
> akira
> 
>  [1]: https://wiki.debian.org/ReproducibleBuilds