Bug#1121859: golang-github-google-go-tpm: please make the build reproducible

Chris Lamb lamby at debian.org
Wed Dec 3 19:50:31 GMT 2025


Source: golang-github-google-go-tpm
Version: 0.9.5-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-google-go-tpm could not be built reproducibly.

This is because the call to remove crypto_test.go was in the wrong
debian/rules target. Whilst it was in override_dh_auto_test, this target
is not called if the tests are skipped... meaning that if the tests
are *not* run, then the package contains this file.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2025-12-03 11:42:50.628562482 -0800
--- b/debian/rules	2025-12-03 11:49:18.766726671 -0800
@@ -13,7 +13,7 @@
 %:
 	dh $@ --builddirectory=_build --buildsystem=golang
 
-execute_before_dh_auto_test:
+execute_after_dh_auto_build:
 # src/github.com/google/go-tpm/tpm2/transport/simulator/simulator.go:7:2: cannot find package "github.com/google/go-tpm-tools/simulator" in any of:
 	rm -fv _build/src/github.com/google/go-tpm/tpm2/crypto_test.go
 


More information about the Reproducible-bugs mailing list