Bug#979024: lirc: reproducible builds: ships tarball of python sources

[Vagrant Cascadian]

Source: lirc
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: umask timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The lirc package ships a /usr/share/lirc/lirc-VERSION.tar.gz tarball.

This tarball contains timestamps produced during the build, can be
affected by the umask of the build environment.

  https://tests.reproducible-builds.org/debian/rb-pkg/bullseye/amd64/diffoscope-results/lirc.html

  /usr/share/lirc/lirc-0.10.1.tar.gz

  -rw-r--r--···0·root···(0)·root···(0)··1667·2017-09-10·08:52:19.000000·lirc-0.10.1/README.rst
  vs.
  -rw-rw-r--···0·root···(0)·root···(0)··1667·2017-09-10·08:52:19.000000·lirc-0.10.1/README.rst


I do not know enough about lirc to know if this tarball needed to be
shipped in the package, or could they be shipped as files in the
filesystem instead?


If it is ok to remove the tarball entirely, the attached patch fixes
these issues by removing the tarball from debian/rules.


If that is not an appropriate way forward, I can look into how to
generate the tarball deterministically. It appears to use setup.py to
generate the tarball:

  Makefile.am-    cd $(abs_builddir)/python-pkg; CFLAGS=-I$(abs_top_srcdir)/lib \
  Makefile.am-        LDFLAGS=-L$(abs_builddir)/lib/.libs $(PYTHON) setup.py -q sdist


Thanks for maintaining lirc!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0005-debian-rules-Delete-shipped-tarball-of-python-source.patch
Type: text/x-diff
Size: 1038 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20210101/192e2b3d/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20210101/192e2b3d/attachment.sig>