Bug#1006252: cctbx: reproducible builds: Timestamps embedded in boost_python_meta_ext.so.0.0.1

[Vagrant Cascadian]

Source: cctbx
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build timestamp is embedded in the boost_python_meta_ext.so.0.0.1
library and the corresponding debug symbols:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/cctbx.html

  /usr/lib/x86_64-linux-gnu/boost_python_meta_ext.so.0.0.1

  __TIMESTAMP__·=·Thu·Mar·23·02:40:09·2023
vs.
  __TIMESTAMP__·=·Fri·Feb·18·22:37:54·2022

The attached patch fixes this by removing the timestamp.

With this patch applied, cctbx should build reproducibly on
tests.reproducible-builds.org!


An alternate approach would be to replace it with the timestamp
specified in SOURCE_DATE_EPOCH, if for some reason this binary
absolutely needs an embedded timestamp:

  https://reproducible-builds.org/docs/source-date-epoch/


Thanks for maintaining cctbx!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-boost_adaptbx-meta_ext.cpp-Remove-embedded-timestamp.patch
Type: text/x-diff
Size: 798 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-science-maintainers/attachments/20220221/ca1785b4/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-science-maintainers/attachments/20220221/ca1785b4/attachment.sig>