packages that FTBFS twice in a row ...

[Mattia Rizzolo]

On Fri, Dec 22, 2017 at 04:32:50PM +0000, Holger Levsen wrote:
> no. the creation of Debian source packages is not reproducible at the
> moment. I don't recall whether we found a fundamental problem with it or
> if simply we had other fishes to fry.

Actually, Guillem went ahead and did this himself.  He also thought it
would be hard, but after trying only few changes to dpkg were needed.
Look:

mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % mkdir ../a ../b
mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dpkg-source -b .
dpkg-source: info: using options from diffoscope/debian/source/options: --tar-ignore=.*.sw? --tar-ignore=*/*~ --tar-ignore=,,* --tar-ignore=.[#~]* --tar-ignore=.deps --tar-ignore=.git --tar-ignore=.gitattributes --tar-ignore=.gitignore --tar-ignore=.gitmodules
dpkg-source: info: using source format '3.0 (native)'
dpkg-source: info: building diffoscope in diffoscope_89.tar.xz
dpkg-source: info: building diffoscope in diffoscope_89.dsc
mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dcmd mv ../diffoscope_89.dsc ../a
mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dpkg-source -b .
dpkg-source: info: using options from diffoscope/debian/source/options: --tar-ignore=.*.sw? --tar-ignore=*/*~ --tar-ignore=,,* --tar-ignore=.[#~]* --tar-ignore=.deps --tar-ignore=.git --tar-ignore=.gitattributes --tar-ignore=.gitignore --tar-ignore=.gitmodules
dpkg-source: info: using source format '3.0 (native)'
dpkg-source: info: building diffoscope in diffoscope_89.tar.xz
dpkg-source: info: building diffoscope in diffoscope_89.dsc
mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % dcmd mv ../diffoscope_89.dsc ../b
mattia at warren ..vel/reproducible/diffoscope/diffoscope (git)-[master] % cd ..
mattia at warren ~/devel/reproducible/diffoscope % diffoscope a/diffoscope_89.dsc b/diffoscope_89.dsc
 |##################################################################################################################################|  100%                             Time: 0:00:00
mattia at warren ~/devel/reproducible/diffoscope %


So, yes, source packages can be built reproducibly!
:D

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20171222/358173ba/attachment.sig>