[Reproducible-builds] Bug#779474: debbindiff: hide temporary paths in html and text output when comparing tarballs

Nikolaus Rath Nikolaus at rath.org
Tue Mar 3 19:20:23 UTC 2015

On Mar 02 2015, Jérémy Bobbio <lunar-8fiUuRrzOP0dnm+yROfE0A at public.gmane.org> wrote:
> Paul Wise:
>> The output when directly comparing two tarballs contains the temporary
>> paths used. This leaks the debbindiff user's TMP variable into the
>> report and is also ugly. I suggest changing to just showing filenames.
>> Current:
>> /tmp/user/1000/tmpFsxqeVdebbindiff/flasm_1.62-6.debian.tar vs.
>> /tmp/user/1000/tmpEVZZmydebbindiff/flasm_1.62-7.debian.tar
>> Desired:
>> flasm_1.62-6.debian.tar vs.
>> flasm_1.62-7.debian.tar
> I am not sure what the use case is here.
> Without full path for the filenames at the top-level, there is no way to
> differentiate a report for two builds of the same source. As this is
> debbindiff primary purpose, I must admit I am a bit at loss.

As you say, the primary purpose of debbindiff is to compare two builds
of the same source. So why does the path matter at all? I think all that
matters is the difference - it's not as if there's a "newer" and "older"
version or something like that.

In the case where debbindiff is used to compare different sources (as
apparently done above), the filename alone contains the necessary


GPG encrypted emails preferred. Key id: 0xD113FCAC3C4E599F
Fingerprint: ED31 791B 2C5C 1613 AF38 8B8A D113 FCAC 3C4E 599F

             »Time flies like an arrow, fruit flies like a Banana.«
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 997 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150303/66fbd535/attachment.sig>

More information about the Reproducible-builds mailing list