Bug#812428: libgcrypt20: please make the build reproducible (timestamps)

[Andreas Metzler]

On 2016-01-24 Daniel Kahn Gillmor <dkg at fifthhorseman.net> wrote:
> On Sat 2016-01-23 16:52:09 -0500, Jérémy Bobbio wrote:
>> While working on the “reproducible builds” effort [1], we have noticed
>> that libgcrypt20 could not be built reproducibly.

>> The attached patch adds support for SOURCE_DATE_EPOCH to set the value
>> of BUILD_TIMESTAMP defined in the configure script. Once applied,
>> libgcrypt20 is nearly reproducible in our current experimental
>> framework—their might be remaining timestamps in the PDF documentation.

> Thanks for fixing this, Lunar.

> fwiw, libgcrypt upstream is the same folks as libgpg-error upstream.  In
> response to concerns about reproducible builds, libgpg-error 1.20
> switched to not embedding the build timestamp at all upstream by
> default.

> Perhaps they'd be open to the same approach for libgcrypt if it were
> proposed.
[...]

Hello,

FYI this had already happened on libgcrypt master branch when this bug
was submitted, Werner has already done this.
http://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git;a=commit;h=a785cc3db0c4e8eb8ebbf784b833a40d2c42ec3e

cu Andreas
-- 
`What a good friend you are to him, Dr. Maturin. His other friends are
so grateful to you.'
`I sew his ears on from time to time, sure'