Bug#1121406: clhep: reproducible-builds: build date in PDF file

Vagrant Cascadian vagrant at reproducible-builds.org
Wed Oct 14 19:09:58 BST 2026


On 2026-09-22, Vagrant Cascadian wrote:
> On 2025-11-25, Vagrant Cascadian wrote:
>> The date is embedded in a shipped PDF file:
>>
>>   https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/clhep.html
>>
>>   ./usr/share/doc/clhep/GenericFunctions/genericFunctions.pdf.gz
>>
>>   November·24,·2025
>>   vs.
>>   December·27,·2026
>>
>> The attached patch sets FORCE_SOURCE_DATE in debian/rules to ensure that
>> texlive respects SOURCE_DATE_EPOCH for a reproducible date.
>>
>> According to my local tests, with this patch applied clhep should
>> build reproducibly on tests.reproducible-builds.org!
>
> I can confirm that this is still an issue, and the patch still fixes it.
>
> I would like to perform a Non-Maintainer Upload (NMU) in the coming
> weeks applying the patch. Please let me know if there are outstanding
> concerns!

I have uploaded an NMU to DELAYED/10, debdiff attached, and also
proposed a merge request:

https://salsa.debian.org/science-team/clhep/-/merge_requests/1

live well,
  vagrant
-------------- next part --------------
diff -Nru clhep-2.4.7.1/debian/changelog clhep-2.4.7.1/debian/changelog
--- clhep-2.4.7.1/debian/changelog	2025-11-23 01:32:03.000000000 -0800
+++ clhep-2.4.7.1/debian/changelog	2026-10-14 10:51:00.000000000 -0700
@@ -1,3 +1,11 @@
+clhep (2.4.7.1-2.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * debian/rules: Set FORCE_SOURCE_DATE=1 for reproducible PDF generation.
+    (Closes: #1121406)
+
+ -- Vagrant Cascadian <vagrant at reproducible-builds.org>  Wed, 14 Oct 2026 10:51:00 -0700
+
 clhep (2.4.7.1-2) unstable; urgency=medium
 
   * Team upload.
diff -Nru clhep-2.4.7.1/debian/rules clhep-2.4.7.1/debian/rules
--- clhep-2.4.7.1/debian/rules	2025-11-23 01:32:03.000000000 -0800
+++ clhep-2.4.7.1/debian/rules	2026-10-14 10:43:18.000000000 -0700
@@ -2,6 +2,9 @@
 
 export DEB_BUILD_MAINT_OPTIONS = hardening=+all
 
+# Ensure pdflatex respects SOURCE_DATE_EPOCH when generating PDFs
+export FORCE_SOURCE_DATE = 1
+
 %:
 	dh $@  --sourcedirectory=CLHEP --buildsystem=cmake+ninja
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/debian-science-maintainers/attachments/20261014/70483254/attachment.sig>


More information about the debian-science-maintainers mailing list