[Pkg-gnupg-maint] Bug#762397: [Reproducible-builds] Bug#762397: libgpg-error: please do not capture the current time during the build process

[Jérémy Bobbio]

Jeroen Dekkers:
> Jérémy actually already wrote a patch for dpkg-buildpackage to export
> DEB_BUILD_TIMESTAMP:
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=759999
> 
> But if we want to push these things upstream, wouldn't it be better to
> remove the DEB_ prefix from the name of the environment variable?

This is unrelated. DEB_BUILD_TIMESTAMP is meant to be consumed by dpkg.
If libgpg-error build system needs to be fed with a timestamp, it would
need to be through another environment variable. In that case,
debian/rules should probably take care of feeding the right value.

But, sincerely, I believe the right move for upstream would be to get
rid of the embedded timestamp entirely. Embedding a Git commit id would
make much more sense (and mabye its date) than embedding the time of the
build.

PS: Please call me Lunar.

PPS: If we start bikeshedding on every patch, there's not even the
slightest chance we will get to the point where build reproducibility is
actually a Debian feature. We need to trust maintainers to do the right
things.

-- 
Lunar                                .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20140922/4f530a07/attachment.sig>