Bug#1122824: golang-github-google-go-attestation: please make the build reproducible

Chris Lamb lamby at debian.org
Fri Dec 12 20:13:35 GMT 2025


Source: golang-github-google-go-attestation
Version: 0.5.1-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-google-go-attestation could not be built reproducibly.

This is because the call to remove some tests were essentially in the
wrong debian/rules target. Whilst it they were in execute_before_dh_auto_test,
this target is not called if the tests are skipped — meaning that if the tests
_aren't_ run, then the package contains those files.

Patch attached that moves these deletions to execute_after_dh_auto_build
which is always run.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
--- a/debian/rules	2025-12-12 11:51:34.578343520 -0800
--- b/debian/rules	2025-12-12 11:55:20.343494389 -0800
@@ -7,7 +7,7 @@
 %:
 	dh $@ --builddirectory=_build --buildsystem=golang
 
-execute_before_dh_auto_test:
+execute_after_dh_auto_build:
 # src/github.com/google/go-attestation/attest/attest_simulated_tpm20_test.go:29:2: cannot find package "github.com/google/go-tpm-tools/simulator" in any of:
 	rm -fv _build/src/github.com/google/go-attestation/attest/attest_simulated_tpm20_test.go
 # src/github.com/google/go-attestation/attest/application_key_test.go:38:14: undefined: setupSimulatedTPM


More information about the Reproducible-bugs mailing list