[Git][debian-gis-team/nco][master] Add patch by Zackary Loevseth for reproducible builds. (closes: #1152419)

[Bas Couwenberg (@sebastic)]

Bas Couwenberg pushed to branch master at Debian GIS Project / nco


Commits:
42302b1d by Bas Couwenberg at 2026-10-29T05:23:04+01:00
Add patch by Zackary Loevseth for reproducible builds. (closes: #1152419)

- - - - -


3 changed files:

- debian/changelog
- + debian/patches/0001-configure-do-not-record-build-user-and-host-when-SOURCE_DATE_EPOCH-is-set.patch
- + debian/patches/series


Changes:

=====================================
debian/changelog
=====================================
@@ -1,3 +1,10 @@
+nco (5.4.1-2) UNRELEASED; urgency=medium
+
+  * Add patch by Zackary Loevseth for reproducible builds.
+    (closes: #1152419)
+
+ -- Bas Couwenberg <sebastic at debian.org>  Thu, 29 Oct 2026 05:22:33 +0100
+
 nco (5.4.1-1) unstable; urgency=medium
 
   * New upstream release.


=====================================
debian/patches/0001-configure-do-not-record-build-user-and-host-when-SOURCE_DATE_EPOCH-is-set.patch
=====================================
@@ -0,0 +1,36 @@
+Description: configure: do not record build user and host when SOURCE_DATE_EPOCH is set
+ configure.ac records $USER (else $LOGNAME) and $HOSTNAME (else $HOST) of
+ the build machine in config.h, and libnco embeds them in the version
+ banner and in the created_by attribute. When SOURCE_DATE_EPOCH is set and
+ non-empty, as in every Debian package build, record "nobody" and "nowhere"
+ instead, so the library does not depend on who built it or where. Builds
+ without SOURCE_DATE_EPOCH are unchanged.
+Author: Zackary Loevseth <zloevseth at gmail.com>
+Forwarded: https://github.com/nco/nco/pull/324
+
+--- a/configure.ac
++++ b/configure.ac
+@@ -90,7 +90,11 @@ AC_DEFINE(NCO_BUILDENGINE,Autoconf,Syste
+ AC_PROG_EGREP
+ 
+ # Get hostname and user
+-if test "${USER}"; then
++# Reproducible builds: with SOURCE_DATE_EPOCH set, record "nobody" and
++# "nowhere" instead of the build user and host
++if test -n "${SOURCE_DATE_EPOCH}"; then
++    nco_user="nobody";
++elif test "${USER}"; then
+     nco_user=${USER};
+ elif test "${LOGNAME}"; then
+     nco_user="${LOGNAME}";
+@@ -98,7 +102,9 @@ else
+     nco_user="nobody";
+ fi
+ AC_DEFINE_UNQUOTED(USER,${nco_user},User)
+-if test "${HOSTNAME}"; then
++if test -n "${SOURCE_DATE_EPOCH}"; then
++    nco_hostname="nowhere";
++elif test "${HOSTNAME}"; then
+     nco_hostname="${HOSTNAME}"
+ # following line $HOST will not be set (from AC_CANONICAL_HOST - will set $host
+ elif test "${HOST}"; then


=====================================
debian/patches/series
=====================================
@@ -0,0 +1 @@
+0001-configure-do-not-record-build-user-and-host-when-SOURCE_DATE_EPOCH-is-set.patch



View it on GitLab: https://salsa.debian.org/debian-gis-team/nco/-/commit/42302b1d47ff7664d4ecf1baa992c858ce236de2

-- 
View it on GitLab: https://salsa.debian.org/debian-gis-team/nco/-/commit/42302b1d47ff7664d4ecf1baa992c858ce236de2
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-grass-devel/attachments/20261029/79e81c8c/attachment-0001.htm>