[Reproducible-builds] Bug#794781: xul-ext-monkeysphere: please make the build reproducible

[Dhole]

Source: xul-ext-monkeysphere
Version: 0.8-1
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi,

While working on the "reproducible builds" effort [1], we have noticed
that xul-ext-monkeysphere could not be built reproducibly.

The attached patch removes timezone-varying timestamps from the
files compressed with zip. Once applied, xul-ext-monkeysphere can be
built reproducibly in our current experimental framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds


Regards,
-- 
Dhole
-------------- next part --------------
diff -Nru xul-ext-monkeysphere-0.8/debian/changelog xul-ext-monkeysphere-0.8/debian/changelog
--- xul-ext-monkeysphere-0.8/debian/changelog	2013-09-20 07:34:11.000000000 +0200
+++ xul-ext-monkeysphere-0.8/debian/changelog	2015-08-05 19:22:42.000000000 +0200
@@ -1,3 +1,11 @@
+xul-ext-monkeysphere (0.8-1.1) UNRELEASED; urgency=medium
+
+  * Non-maintainer upload.
+  * add TZ=UTC before zip in Makefile to make the files mtime 
+    invariant to timezone to make the package build reproducibly.
+
+ -- Eduard Sanou <dhole at openmailbox.org>  Wed, 05 Aug 2015 19:21:53 +0200
+
 xul-ext-monkeysphere (0.8-1) unstable; urgency=low
 
   * New Upstream Release (Closes: #720600) thanks Kristian Fiskerstrand!
diff -Nru xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch
--- xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch	1970-01-01 01:00:00.000000000 +0100
+++ xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch	2015-08-05 19:23:23.000000000 +0200
@@ -0,0 +1,22 @@
+Description: Fix timezone in zip
+ .
+ xul-ext-monkeysphere (0.8-1.1) UNRELEASED; urgency=medium
+ .
+   * Non-maintainer upload.
+   * add TZ=UTC before zip in Makefile to make the files mtime
+     invariant to timezone to make the package build reproducibly.
+Author: Eduard Sanou <dhole at openmailbox.org>
+
+---
+
+--- xul-ext-monkeysphere-0.8.orig/Makefile
++++ xul-ext-monkeysphere-0.8/Makefile
+@@ -12,7 +12,7 @@ ICONS = $(addprefix chrome/content/, bro
+ VERSION = $(shell head -n1 Changelog | sed -e 's/^.*(//' -e 's/).*$$//')
+ 
+ monkeysphere.xpi: $(XPI_CONTENTS) $(ICONS)
+-	zip $@ $(XPI_CONTENTS) $(ICONS)
++	TZ=UTC zip $@ $(XPI_CONTENTS) $(ICONS)
+ 
+ install.rdf: install.rdf.template Changelog
+ 	sed 's/__VERSION__/$(VERSION)/' < $< > $@
diff -Nru xul-ext-monkeysphere-0.8/debian/patches/series xul-ext-monkeysphere-0.8/debian/patches/series
--- xul-ext-monkeysphere-0.8/debian/patches/series	1970-01-01 01:00:00.000000000 +0100
+++ xul-ext-monkeysphere-0.8/debian/patches/series	2015-08-05 19:22:56.000000000 +0200
@@ -0,0 +1 @@
+fix_timezone.patch
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150806/d44d254e/attachment.sig>