Bug#1021522: crack: reproducible-builds: date in various binaries

[Vagrant Cascadian]

Source: crack
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The date is embedded in various binaries:

  https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/diffoscope-results/crack.html

  /usr/lib/Crack/stdlib-cracker

  Fri·Nov·10·06:59:40·-12·2023
  vs.
  Sun·Oct··9·02:42:03·+14·2022

There are two different patches to fix this issue, the first patches the
upstream src/util/Makefile to not embed a date at all, and is the
preferred approach from a reproducible builds perspective.

The second patch uses the SOURCE_DATE_EPOCH environment variable to
specify the date to use in the embedded files, if for some reason these
files require a date in order to function correctly.

According to my local tests, with this patch applied, and a soon-to-be
submitted patch to fix build paths, crack should build reproducibly on
tests.reproducible-builds.org!

Thanks for maintaining crack!

live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-src-util-Makefile-Remove-embedded-timestamps.patch
Type: text/x-diff
Size: 1656 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221009/f645c984/attachment-0002.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0004-src-util-Makefile-Use-SOURCE_DATE_EPOCH-to-set-date.patch
Type: text/x-diff
Size: 2032 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221009/f645c984/attachment-0003.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221009/f645c984/attachment-0001.sig>