[pkg-gnupg-maint] Bug#806494: gnupg: please make the build reproducible

intrigeri intrigeri at debian.org
Sat Jun 4 12:25:52 UTC 2016


Hi,

Petter Reinholdtsen wrote (17 Feb 2016 14:47:35 GMT) :
> [Werner Koch 2015-11-30]
>> will be in 2.1.10 hopefully this week.

> I guess something is still missing, as gnupg is still not reproducable
> according to the tests.  The only difference reported by the test
> framework is a date in gpgv.1.gz.  Was this file forgotten when the
> package was fixed?

Upstream 2.1.10 added a new --date option to yat2m, but GnuPG 1.4.20
did not get it yet. I guess that's why gpgv.1 still has a timestamp
that depends on the build time.

Werner, could this change be backported to GnuPG 1.x? (I do realize
that it's not merely about ya2tm.c, since e.g. doc/Makefile.am is
also affected.)

Cheers,
--
intrigeri



More information about the pkg-gnupg-maint mailing list