Bug#1072205: prevent re-using package versions for NMUs

[Holger Levsen]

Hi,

very "nice" find, josch!

On Thu, May 30, 2024 at 11:16:48AM +0200, Johannes Schauer Marin Rodrigues wrote:
> This example with bash is especially problematic since bash is Essential:yes so
> there will now be a large portion of buildinfo files where it is not possible
> to figure out with which of the two differing bash packages the sources were
> compiled.

I've checked all .buildinfo files to see how big the impact of this problem
is:

holger at ionos7-amd64:/var/ … tent/reproducible/debian/ftp-master.debian.org/buildinfo $ for i in amd64 arm64 armel armhf i386 mips64el ppc64el riscv64 s390x ; do echo -n "$i: " ; grep -c "$i.buildinfo: bash" ~/dak-bug-1072205 ; done
holger at ionos7-amd64:/var/ … tent/reproducible/debian/ftp-master.debian.org/buildinfo $ for i in amd64 arm64 armel armhf i386 mips64el ppc64el riscv64 s390x ; do echo -n "$i: " ; grep -c "$i.buildinfo: bash" ~/dak-bug-1072205 ; done
amd64: 1322
arm64: 22
armel: 0
armhf: 0
i386: 10
mips64el: 0
ppc64el: 1
riscv64: 92
s390x: 0
holger at ionos7-amd64:/var/ … tent/reproducible/debian/ftp-master.debian.org/buildinfo 1 $

So, not too bad. And luckily all of these can be fixed with binNMUs.


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The people who refer to the pandemic in the past tense and climate change in
the future tense are the reason everything is going to shit.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20240530/5ec06075/attachment.sig>