[Reproducible-builds] Bug#762397: libgpg-error: please do not capture the current time during the build process

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Sep 22 19:15:50 UTC 2014


On 09/21/2014 04:58 PM, Dominic Hargreaves wrote:
> On Sun, Sep 21, 2014 at 10:45:14PM +0200, Jérémy Bobbio wrote:
>> As part of the “reproducible builds” effort [1], it was detected that
>> libgpg-error could not be built reproducibly.
>>
>> The build process capture the time of the build. This piece of
>> information is not really helpful to anyone and prevents the build
>> process from being deterministic.
>>
>> The attached patch will instead use the time of the latest
>> debian/changelog entry. Once applied, libgpg-error can be built
>> reproducibly! :)
> 
> Wouldn't it be better to patch configure.ac in a way useful to upstream;
> for example by having it use the time from an exported environment
> variable? Otherwise the package is going to have to carry around a
> Debian-specific patch forever.

I like Dominic's suggestion (we'd need to pass the env var from
debian/rules), and i'll see what i can suggest upstream.

Thanks for these hints!

	--dkg

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20140922/36793392/attachment.sig>


More information about the Reproducible-builds mailing list