Bug#971400: vboot-utils: Add patch to avoid embedding the username and time of the build.

Vagrant Cascadian vagrant at reproducible-builds.org
Tue Sep 29 23:07:30 BST 2020


Source: vboot-utils
Severity: normal
Version: 0~R81-12871.B-1
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps username
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The "/usr/bin/futility" embeds differing information in the binary,
depending on when and what user built the package:

  unknown 2020-09-17 07:53:52 pbuilder1 vs. unknown 2021-10-21 16:19:17 pbuilder2

This obviously breaks reproducible builds:

  https://reproducible-builds.org

The attached patch removes the user and time information from the
getversion.sh script used during build.


Thanks for maintaining vboot-utils!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Add-patch-to-avoid-embedding-the-username-and-time-o.patch
Type: text/x-diff
Size: 2043 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200929/299d5d78/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200929/299d5d78/attachment.sig>


More information about the Reproducible-bugs mailing list