[Reproducible-builds] Bug#792599: openthesaurus: please make the build reproducible

Dhole dhole at openmailbox.org
Thu Jul 16 15:28:44 UTC 2015


Source: openthesaurus
Version: 20120516-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi,

While working on the "reproducible builds" effort [1], we have noticed
that openthesaurus could not be built reproducibly.

The attached patch removes timezone-varying timestamps from the
files extracted with unzip. Once applied, openthesaurus can be
built reproducibly in our reproducible toolchain.

 [1]: https://wiki.debian.org/ReproducibleBuilds


Regards,
-- 
Dhole
-------------- next part --------------
diff -Nru openthesaurus-20120516/debian/changelog openthesaurus-20120516/debian/changelog
--- openthesaurus-20120516/debian/changelog	2012-12-18 17:25:04.000000000 +0100
+++ openthesaurus-20120516/debian/changelog	2015-07-15 19:36:11.000000000 +0200
@@ -1,3 +1,11 @@
+openthesaurus (20120516-2.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * add TZ=UTC before unzip in debian/rules to make the files mtime 
+    invariant to timezone to make the package build reproducibly.
+
+ -- Dhole <dhole at openmailbox.org>  Wed, 15 Jul 2015 19:34:49 +0200
+
 openthesaurus (20120516-2) unstable; urgency=low
 
   * fix sed in debian/rules for utf8-encoded dicts so that ß is correctly
diff -Nru openthesaurus-20120516/debian/rules openthesaurus-20120516/debian/rules
--- openthesaurus-20120516/debian/rules	2012-12-18 17:22:00.000000000 +0100
+++ openthesaurus-20120516/debian/rules	2015-07-15 19:34:30.000000000 +0200
@@ -51,7 +51,7 @@
 
 	mkdir -p $(CURDIR)/debian/openthesaurus-de-text/usr/share/openthesaurus-de/
 	cd $(CURDIR)/debian/openthesaurus-de-text/usr/share/openthesaurus-de && \
-	unzip $(CURDIR)/text/OpenThesaurus-Textversion.zip openthesaurus.txt && \
+	TZ=UTC unzip $(CURDIR)/text/OpenThesaurus-Textversion.zip openthesaurus.txt && \
 		ln -sf openthesaurus.txt thesaurus.txt
 
 	install -D -m644 th_de_DE_v2.dat \
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150716/cd02a9d2/attachment.sig>


More information about the Reproducible-builds mailing list