Bug#877470: bsh; please make the build reproducible (timestamps)

[jathan]

On Wed, 04 Oct 2017 07:27:08 +0100 Chris Lamb <lamby at debian.org> wrote:
> Hi,
> 
> > bsh; please make the build reproducible (timestamps)
> 
> +SOURCE_DATE_EPOCH       ?= $(shell dpkg-parsechangelog -STimestamp)
> 
> I'd actually use /usr/share/dpkg/pkg-info.mk for this :)
> 
> +	  --clamp-mtime --mtime="$(SOURCE_DATE_EPOCH)"
> 
> Shouldn't this be --mtime="@$(SOURCE_DATE_EPOCH)" (nb. with the @?)
> 
> 
> Regards,
> 
> -- 
>       ,''`.
>      : :'  :     Chris Lamb
>      `. `'`      lamby at debian.org / chris-lamb.co.uk
>        `-
> 
> Hi,

I have rewrited the bsh patch based on the observations and suggestions
of Lamby, sending a new bsh_2.0b4-18_2.0b4-18.1.debdiff file. The
attached patch clamps the timestamps to the changelog timestamp when
creating the source archive using SOURCE_DATE_EPOCH variable. Once
applied, bsh can be built reproducibly in our current experimental
framework. Cheers.

Jathan

-- 
Por favor evita enviarme adjuntos en formato de word o powerpoint, si
quieres saber porque lee esto:
http://www.gnu.org/philosophy/no-word-attachments.es.html
¡Cámbiate a GNU/Linux! http://getgnulinux.org/es
-------------- next part --------------
diff -Nru bsh-2.0b4/debian/changelog bsh-2.0b4/debian/changelog
--- bsh-2.0b4/debian/changelog	2016-05-30 12:14:02.000000000 -0500
+++ bsh-2.0b4/debian/changelog	2017-10-24 23:46:23.000000000 -0500
@@ -1,3 +1,10 @@
+bsh (2.0b4-18.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Fix timestamps_in_tarball reproducible build issue. 
+
+ -- Jonathan Bustillos <jathanblackred at openmailbox.org>  Tue, 24 Oct 2017 23:46:23 -0500
+
 bsh (2.0b4-18) unstable; urgency=medium
 
   * Team upload.
diff -Nru bsh-2.0b4/debian/rules bsh-2.0b4/debian/rules
--- bsh-2.0b4/debian/rules	2016-05-30 12:06:22.000000000 -0500
+++ bsh-2.0b4/debian/rules	2017-10-24 23:44:07.000000000 -0500
@@ -1,6 +1,7 @@
 #!/usr/bin/make -f
 # debian/rules file for bsh (uses cdbs)
 
+include /usr/share/dpkg/pkg-info.mk
 include /usr/share/cdbs/1/rules/debhelper.mk
 include /usr/share/cdbs/1/class/ant.mk
 
@@ -29,6 +30,7 @@
 install/bsh-src:: binary-install/bsh-doc
 	mkdir -p debian/bsh-src/usr/src/bsh-src
 	tar --exclude debian --exclude classes --exclude dist --exclude api \
+	    --clamp-mtime --mtime="@$(SOURCE_DATE_EPOCH)" \	
 		-zcf debian/bsh-src/usr/src/bsh-src/bsh.tar.gz *
 
 binary-fixup/bsh-doc::
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 878 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-java-maintainers/attachments/20171025/372ddc09/attachment-0001.sig>