[Reproducible-builds] Bug#774069: debootstrap: please use a deterministic mtime for devices.tar members

[Jérémy Bobbio]

Source: debootstrap
Version: 1.0.66
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that debootstrap could not be built reproducibly.

The current build process captures the build time when devices.tar.gz is
created. The attached patch will use the time of the latest
debian/changelog entry as the mtime for devices.tar members, and remove
the timestamp from the gzip header of devices.tar.gz.

debootstrap can then be built reproducibly within our current
framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds

-- 
Lunar                                .''`. 
lunar at debian.org                    : :Ⓐ  :  # apt-get install anarchism
                                    `. `'` 
                                      `-   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Use-debian-changelog-timestmap-as-mtime-for-devices..patch
Type: text/x-diff
Size: 1107 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20141228/3c548628/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20141228/3c548628/attachment.sig>