[Qa-jenkins-scm] [Git][qa/jenkins.debian.net][master] reproducible Debian rebuilder 'thing': show reproducible and unreproducible packages in result

Holger Levsen gitlab at salsa.debian.org
Thu Apr 2 16:15:38 BST 2020



Holger Levsen pushed to branch master at Debian QA / jenkins.debian.net


Commits:
010c12ee by Holger Levsen at 2020-04-02T17:15:20+02:00
reproducible Debian rebuilder 'thing': show reproducible and unreproducible packages in result

Signed-off-by: Holger Levsen <holger at layer-acht.org>

- - - - -


1 changed file:

- bin/reproducible_debian_rebuilder_prototype.sh


Changes:

=====================================
bin/reproducible_debian_rebuilder_prototype.sh
=====================================
@@ -104,13 +104,24 @@ output_echo "File artifacts:"
 ls -lart
 output_echo "Diff between .buildinfo files:"
 diff $FILE.orig $FILE || true
-output_echo "Comparing sha256sums of the rebuild .deb files with the ones in the two .buildinfo files:"
+output_echo "The following binary packages could be rebuilt bit-by-bit identical to the ones distributed from ftp.debian.org:"
+BADDEBS=""
 for DEB in $(dcmd ls *.changes) ; do
 	SHASUM=$(sha256sum $DEB | awk '{ print $1 }')
-	echo $SHASUM $DEB
-	grep $SHASUM $FILE.orig || echo $SHASUM not found in $FILE.orig
-	grep $SHASUM $FILE      || echo $SHASUM not found in $FILE
+	if $(grep $SHASUM $FILE.orig) ; then
+		# reproducible, yay!
+		:
+	else
+		BADDEBS="$BADDEBS $DEB"
+	fi
 done
+if [-n "$BADDEBS" ] ; then
+	output_echo "Unreproducible binary packages found:"
+	for DEB in $BADDEBS ; do
+		echo "$(egrep '^[a-z0-9]{63} ' $FILE.orig|grep $DEB) from ftp.debian.org"
+		echo "$(sha256sum $DEB) from the current rebuild"
+	done
+fi
 
 # the end
 rm -f $FILE $DEBREBUILD



View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/010c12eed189b687ae732db26483e2b1e98abf9f

-- 
View it on GitLab: https://salsa.debian.org/qa/jenkins.debian.net/-/commit/010c12eed189b687ae732db26483e2b1e98abf9f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/qa-jenkins-scm/attachments/20200402/befaa031/attachment-0001.html>


More information about the Qa-jenkins-scm mailing list