Bug#1122219: golang-github-theupdateframework-go-tuf: please make the build reproducible

Chris Lamb lamby at debian.org
Mon Dec 8 22:18:13 GMT 2025


Source: golang-github-theupdateframework-go-tuf
Version: 2.0.2+0.7.0-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-theupdateframework-go-tuf could not be built reproducibly.

This is because the call to remove some tests were in the wrong
debian/rules target. Whilst it was in override_dh_auto_test, this target
is not called if the tests are skipped — meaning that if the tests
are *not* run, then the package contains those files.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2025-12-08 14:04:32.861883410 -0800
--- b/debian/rules	2025-12-08 14:16:00.920482259 -0800
@@ -15,7 +15,7 @@
 override_dh_auto_install:
 	dh_auto_install -- --no-binaries
 
-execute_before_dh_auto_test:
+execute_after_dh_auto_build:
 #--- FAIL: TestDownLoadFile (0.00s)
 #    --- FAIL: TestDownLoadFile/success (0.00s)
 #    --- PASS: TestDownLoadFile/invalid_url (0.00s)


More information about the Reproducible-bugs mailing list