[Reproducible-builds] Bug#818111: debian-keyring: please make the build reproducible (locale, fileordering)

[Satyam Zode]

Source:  debian-keyring
Version: 2016.01.20
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi!

While working on the “reproducible builds” effort [1], we have noticed
that debian-keyring could not be built reproducibly.

The attached patch fix the order of files in md5sums.
Once applied, debian-keyring can be built reproducibly in our current
experimental framework.

 [1]: https://wiki.debian.org/ReproducibleBuilds

Thank you!
Satyam Zode
PICT, Pune
-------------- next part --------------
diff -Nru debian-keyring-2015.04.10/debian/changelog debian-keyring-2015.04.10.0~reproducible1/debian/changelog
--- debian-keyring-2015.04.10/debian/changelog	2015-04-10 14:53:32.000000000 +0530
+++ debian-keyring-2015.04.10.0~reproducible1/debian/changelog	2016-03-13 23:59:02.000000000 +0530
@@ -1,3 +1,9 @@
+debian-keyring (2015.04.10.0~reproducible1) UNRELEASED; urgency=medium
+
+  *  Made debian-keyring reproducible
+
+ -- Satyam Zode <satyamzode at gmail.com>  Sun, 13 Mar 2016 23:57:03 +0530
+
 debian-keyring (2015.04.10) unstable; urgency=medium
 
   [ Gunnar Wolf ]
diff -Nru debian-keyring-2015.04.10/debian/rules debian-keyring-2015.04.10.0~reproducible1/debian/rules
--- debian-keyring-2015.04.10/debian/rules	2015-03-31 04:23:17.000000000 +0530
+++ debian-keyring-2015.04.10.0~reproducible1/debian/rules	2016-03-14 00:01:43.000000000 +0530
@@ -53,7 +53,8 @@
 	chown -R root.root debian/tmp
 	chmod -R go=rX debian/tmp
 
-	cd debian/tmp && find . -type f ! -regex '.*DEBIAN/.*' -printf '%P\0' | xargs -r0 md5sum > DEBIAN/md5sums 
+	cd debian/tmp && find . -type f ! -regex '.*DEBIAN/.*' -printf '%P\0' | \
+		LC_ALL=C sort -z | xargs -r0 md5sum > DEBIAN/md5sums
 
 	find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \
 		xargs -0r touch --no-dereference --date='$(BUILD_DATE)'