[Reproducible-builds] Bug#794239: zipios++: please make the build reproducible (timestamps)

[Maria Valentina Marin]

Source: zipios++
Version: 0.1.5.9+cvs.2007.04.28-5.1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that zipios++ could not be built reproducibly since it suffers from
timestamps in manpages generated by doxygen [2].

The reproducible builds team is building packages using a version of
doxygen which has been patched to honour the environment variable
$SOURCE_DATE_EPOCH [3]. This results in doxygen using the last date in
debian/changelog as the timestamp for its man page output which causes
packages to become reproducible [4].

During our tests $SOURCE_DATE_EPOCH is exported by the debhelper from
our experimental git repository which we have patched such that packages
using dh (debhelper >= 9) in debian/rules become automatically reproducible.

This unfortunately does not make the package zipios++ reproducible
because it does not use dh in debian/rules but instead classic
debhelper.

There are two solutions for zipios++ :

1. To rewrite debian/rules to use dh
2. To implement the attached patch which exports $SOURCE_DATE_EPOCH in
debian/rules.


Kind Regards,
akira


[1] https://wiki.debian.org/ReproducibleBuilds/About
[2]https://reproducible.debian.net/issues/unstable/timestamps_in_manpages_generated_by_doxygen_issue.html
[3] https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal
[4] https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain#doxygen
-------------- next part --------------
diff -u zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog
--- zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog
+++ zipios++-0.1.5.9+cvs.2007.04.28/debian/changelog
@@ -1,3 +1,11 @@
+zipios++ (0.1.5.9+cvs.2007.04.28-5.2) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * Export environment variable $SOURCE_DATE_EPOCH to produce reproducible
+    timestamps in manpage output
+
+ -- akira <marivalenm at gmail.com>  Fri, 31 Jul 2015 14:14:33 +0200
+
 zipios++ (0.1.5.9+cvs.2007.04.28-5.1) unstable; urgency=low
 
   * Non-maintainer upload.
diff -u zipios++-0.1.5.9+cvs.2007.04.28/debian/rules zipios++-0.1.5.9+cvs.2007.04.28/debian/rules
--- zipios++-0.1.5.9+cvs.2007.04.28/debian/rules
+++ zipios++-0.1.5.9+cvs.2007.04.28/debian/rules
@@ -10,6 +10,8 @@
 DEB_HOST_GNU_TYPE   ?= $(shell dpkg-architecture -qDEB_HOST_GNU_TYPE)
 DEB_BUILD_GNU_TYPE  ?= $(shell dpkg-architecture -qDEB_BUILD_GNU_TYPE)
 
+export SOURCE_DATE_EPOCH = $(shell date -d "$$(dpkg-parsechangelog --count 1 -SDate)" +%s)
+
 # Include dpatch stuff.
 include /usr/share/dpatch/dpatch.make
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150731/26f78f27/attachment.sig>