Bug#1138608: grub2: reproducible builds: non-deterministic ordering in lintian overrides

[Vagrant Cascadian]

Source: grub2
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Both grub-xen-dbg and grub-xen-bin generate their lintian overrides from
debian/rules using find, which may return results in a non-deterministic order:

  https://reproduce.debian.net/amd64/api/v1/builds/153376/artifacts/383903/diffoscope
  https://reproduce.debian.net/amd64/api/v1/builds/153376/artifacts/383902/diffoscope

The attached patch sorts each of the find calls used to generate the
lintian overrides, which should result in a deterministic ordering... at
least if the locale is consistent (which it should be with
buildd.debian.org vs. reproduce.debian.net)... the proposed fix for
https://bugs.debian.org/991928 might also help with varying locales.

This does not resolve all reproducibility issues in grub2 (there are a
few other bugs with patches filed that will partly help), but it should
at least fix those two packages!

live well,
  vagrant

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Sort-calls-to-find-when-generating-lint.patch
Type: text/x-diff
Size: 4033 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-grub-devel/attachments/20260531/cc065612/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-grub-devel/attachments/20260531/cc065612/attachment.sig>