[Pkg-haskell-maintainers] Bug#769893: ghc: Make compilation deterministic

Joachim Breitner nomeata at debian.org
Mon Nov 17 11:44:38 UTC 2014


Hi Tom,


Am Montag, den 17.11.2014, 11:17 +0000 schrieb Tom Fitzhenry:
> As part of the "reproducible builds" project[1], it was discovered that ghc's
> interface hashes include the timestamp of dependent files[2]. This makes the
> compilation of Haskell packages unreproducible. 
> 
> Fortunately, upstream have fixed this[3] and provided a backport for 7.6.3[4].
> 
> I tested this: I applied the patch locally, rebuilt ghc, and tested that it is able to
> deterministically compile haskell-lrucache. Indeed, it was!
> 
> It'd be much appreciated if this was applied to 7.6.3, which would affect > 300
> Haskell packages that are currently not reproducible.

glad to hear this!

But the commit message says
        
        This changes the interface file format.

so applying this patch to 7.6.3 would require rebuilding all Haskell
library packages using binNMUs. This is not a problem per se (we have
scripts to automate that), but at this point in the release cycle it
would be too disruptive: I doubt that the release team will let this
migrate (but you can ask, of course, and prove me wrong), so doing this
would bar us from doing updates to testing via unstable.

So either get a pre-approval from the release team, or ping us again
after the release.



Greetings,
Joachim

-- 
Joachim "nomeata" Breitner
Debian Developer
  nomeata at debian.org | ICQ# 74513189 | GPG-Keyid: F0FBF51F
  JID: nomeata at joachim-breitner.de | http://people.debian.org/~nomeata

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-haskell-maintainers/attachments/20141117/4f3345eb/attachment.sig>


More information about the Pkg-haskell-maintainers mailing list