[Reproducible-builds] Bug#792602: fonts-stix: please make the build reproducible

[Dhole]

Source: fonts-stix
Version: 1.1.1-3
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi,

While working on the "reproducible builds" effort [1], we have noticed
that fonts-stix could not be built reproducibly.

The attached patch removes timezone-varying timestamps from the
files extracted with unzip. Once applied, fonts-stix can be
built reproducibly in our reproducible toolchain.

 [1]: https://wiki.debian.org/ReproducibleBuilds


Regards,
-- 
Dhole
-------------- next part --------------
diff -Nru fonts-stix-1.1.1/debian/changelog fonts-stix-1.1.1/debian/changelog
--- fonts-stix-1.1.1/debian/changelog	2015-04-15 22:47:43.000000000 +0200
+++ fonts-stix-1.1.1/debian/changelog	2015-07-16 17:31:31.000000000 +0200
@@ -1,3 +1,11 @@
+fonts-stix (1.1.1-3.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * add TZ=UTC before unzip in debian/rules to make the files mtime 
+    invariant to timezone to make the package build reproducibly.
+
+ -- Dhole <dhole at openmailbox.org>  Thu, 16 Jul 2015 17:31:17 +0200
+
 fonts-stix (1.1.1-3) unstable; urgency=low
 
   * Upload to unstable.
diff -Nru fonts-stix-1.1.1/debian/rules fonts-stix-1.1.1/debian/rules
--- fonts-stix-1.1.1/debian/rules	2015-02-12 12:05:56.000000000 +0100
+++ fonts-stix-1.1.1/debian/rules	2015-07-16 17:31:06.000000000 +0200
@@ -8,6 +8,6 @@
 
 override_dh_auto_configure:
 	mkdir build
-	unzip $(CURDIR)/STIXv$(ver_base).zip -d build/ && rm -rf 'debian/Fonts/STIX-Word License/STIX Font License 2010.pdf'
-	unzip -uo $(CURDIR)/STIXv$(ver_word)-word.zip -d build/
+	TZ=UTC unzip $(CURDIR)/STIXv$(ver_base).zip -d build/ && rm -rf 'debian/Fonts/STIX-Word License/STIX Font License 2010.pdf'
+	TZ=UTC unzip -uo $(CURDIR)/STIXv$(ver_word)-word.zip -d build/
 	dh_auto_configure
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150716/1362a6bd/attachment.sig>