[Pkg-fonts-devel] Bug#774274: fontforge: please use SOURCE_DATE_EPOCH for reproducible font modification time

[Vasudev Kamath]

Theppitak Karoonboonyanan <theppitak at gmail.com> writes:

> Package: fontforge
> Version: 1:20170731~dfsg-1
> Followup-For: Bug #774274
>
> Dear Maintainer,
>
> This bug still exists for Type 1 font generation, which causes my package
> fonts-sipa-arundina to be unreproducible.
>
> https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/fonts-sipa-arundina.html
>
> Creation date timestamps are still taken from build time without obeying
> SOURCE_DATE_EPOCH.
>
> There have been some upstream changes in Fontforge after the version in Sid,
> beginning at this one:
>
> https://github.com/fontforge/fontforge/commit/4e850c134200d5a62bdecdd68a4ee31ef7688360
>
> And the relevant calls to the new GetTime() function have been added here:
>
> https://github.com/fontforge/fontforge/commit/078a1738a86717b46e02276bd85bb76893688eea
>
> So, please update Fontforge in Debian to solve more build reproducibility
> problems.

I currently do not have enough time to figure out patches needed as
there is no official release by upstream. But any help is welcome. If
you know set of patches which is going to fix this issue feel free to
record the commit hashes and I will try to get those applied.

Cheers,