[Python-modules-team] Bug#979024: lirc: reproducible builds: ships tarball of python sources

[Vagrant Cascadian]

On 2021-01-01, Vagrant Cascadian wrote:
> The lirc package ships a /usr/share/lirc/lirc-VERSION.tar.gz tarball.
>
> This tarball contains timestamps produced during the build, can be
> affected by the umask of the build environment.
>
>   https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/lirc.html
>
>   /usr/share/lirc/lirc-0.10.1.tar.gz
>
>   -rw-r--r--···0·root···(0)·root···(0)··1667·2017-09-10·08:52:19.000000·lirc-0.10.1/README.rst
>   vs.
>   -rw-rw-r--···0·root···(0)·root···(0)··1667·2017-09-10·08:52:19.000000·lirc-0.10.1/README.rst
>
>
> I do not know enough about lirc to know if this tarball needed to be
> shipped in the package, or could they be shipped as files in the
> filesystem instead?
>
>
> If it is ok to remove the tarball entirely, the attached patch fixes
> these issues by removing the tarball from debian/rules.

The attached patch instead normalizes the timestamps, umask and
user/group information rather than deleting the tarball.

I would like to upload an NMU to fix this in the near future, as well as
the proposed fixes for:

  #988907 lirc should build verbosely by default

  #979023 lirc: reproducible builds: File contents may vary depending on
   locale

  #979019 lirc: reproducible builds: Embeds timestamps and kernel
   version in various files

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-debian-rules-Normalize-shipped-tarball-of-python-sou.patch
Type: text/x-diff
Size: 1525 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/python-modules-team/attachments/20231130/b13d6441/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/python-modules-team/attachments/20231130/b13d6441/attachment.sig>