Bug#991104: antlr: reproducible-builds: Example Makefiles embed build paths and binary paths

Vagrant Cascadian vagrant at reproducible-builds.org
Wed Jul 14 15:37:58 BST 2021


Source: antlr
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: buildpath usrmerge
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The build path and several binary paths are embedded in example Makefiles
shipped in the package:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/antlr.html

  ./usr/share/doc/antlr/examples/Makefile

  MKDIR···········=·/bin/mkdir
  vs.
  MKDIR···········=·/usr/bin/mkdir

  ANTLR_JAR······=·/build/1st/antlr-2.7.7+dfsg/antlr/antlr.jar
  vs.
  ANTLR_JAR······=·/build/2/antlr-2.7.7+dfsg/2nd/antlr/antlr.jar

Since these values may differ with the installed system, in order to use
the example Makefile, a person would have to regenerate it from
Makefile.in, which is also provided in the package.

The attached patch modifies debian/rules to remove the exmaple
Makefiles.


With this patch applied (and some timestamp related patches i will
submit shortly...) antlr should become reproducible on
tests.reproducible-builds.org.


If removing the Makefiles is somehow not an option, an alternate option
would be to sanitize the Makefiles stripping the build path, and
possibly passing various variables to configure (e.g. GREP=/bin/grep,
SHELL=/bin/sh, ...).


Thanks for maintaining antlr!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Do-not-install-example-Makefiles.patch
Type: text/x-diff
Size: 1116 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210714/c5c71351/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20210714/c5c71351/attachment.sig>


More information about the pkg-java-maintainers mailing list