Bug#1024125: ucspi-proxy: reproducible-builds: build path, timestamps and umask issues

[Vagrant Cascadian]

Source: ucspi-proxy
Severity: normal
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: buildpath timestamps umask
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

The buildids of various binaries differred when built in different build
paths, timestamps were embedded in manpages, and the mode of several
directories was dependent on the umask of the build environment:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/ucspi-proxy.html

  /usr/share/man/man1/ucspi-proxy-http-xlate.1.gz

  gzip·compressed·data,·was·"ucspi-proxy-http-xlate.1",·last·modified:·Sun·Nov·13·05:42:22·2022,·max·compression,·from·Unix
  vs.
  gzip·compressed·data,·was·"ucspi-proxy-http-xlate.1",·last·modified:·Sat·Dec·16·12:06:16·2023,·max·compression,·from·Unix

  drwxr-xr-x···0·root·········(0)·root·········(0)········0·2022-11-12·10:57:15.000000·./usr/bin/
  vs.
  drwxrwxr-x···0·root·········(0)·root·········(0)········0·2022-11-12·10:57:15.000000·./usr/bin/

The attached patches to debian/rules fix this by adding the
-ffile-prefix-map argument to CFLAGS which avoids embedding build paths,
passing -n to gzip to avoid embedding timestamps in the gzip headers of
created manpages, and setting a consistent mode on several directories
created by "make install".

Preferably, many of these issues would likely be fixed by converting to
dh and a recent debhelper-compat version...

According to my local tests, with these patches applied ucspi-proxy
should build reproducibly on tests.reproducible-builds.org!


Thanks for maintaining ucspi-proxy!


live well,
  vagrant
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-debian-rules-Add-ffile-prefix-map-to-CFLAGS-to-avoid.patch
Type: text/x-diff
Size: 700 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221114/f8112afa/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0002-debian-rules-Pass-n-argument-to-gzip-to-avoid-embedd.patch
Type: text/x-diff
Size: 895 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221114/f8112afa/attachment-0001.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0003-debian-rules-Set-permissions-on-several-directories-.patch
Type: text/x-diff
Size: 964 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221114/f8112afa/attachment-0002.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20221114/f8112afa/attachment.sig>