Empty build-id to make package reproducible

[Mattia Rizzolo]

On Fri, Aug 31, 2018 at 09:44:18AM +0300, Otto Kekäläinen wrote:
> pe 31. elok. 2018 klo 0.46 Daniel Kahn Gillmor (dkg at fifthhorseman.net)
> kirjoitti:
> ..
> > does this mean that galera-3 debugging symbols won't be easily findable?
> 
> Perhaps, but we decided that responsibility is important and the
> package should pass the new CI pipeline we set up at
> https://salsa.debian.org/mariadb-team/galera-3/pipelines/15700
> Note that this still just a commit on sitting on the master branch,
> and it hasn't yet been uploaded anywhere and this might not be the
> final solution.
> 
> Suggestions for better solutions are welcome.

The thing I can say is that that commit is not fixing *anything*.  The
pipeline failed before and after
https://salsa.debian.org/mariadb-team/galera-3/commit/1460cfa128fb457b5b5c60fcc5cac6faf5a216d5
(as can be seen in that page quite clearly).  Instead, what fixed the
pipeline was the next commit, which made DEB_BUILD_OPTIONS=nocheck
actually work.
Indeed, what was failing in the reprotest stage of the pipeline were the
tests of the package, so disabling that made the pipeline pass.

As a datapoint, the package is reproducible in our infra.

> > then again, the debugging symbols for galera-3 look like they're being
> > generated in a way that is pretty out-of-date, and hasn't been touched
> > in at least 3 years, so maybe the maintainers don't care about these
> > symbols very much:
> >
> >    https://salsa.debian.org/mariadb-team/galera-3/blame/master/debian/rules#L51
> 
> This package is actively maintained and everything should be up to
> date. If you are an expert on debug package rules stanzas, we are
> happy to take any suggestions (or merge requests on Salsa) to make
> that section not so "pretty out-of-date".

I see dkg submitted a change, https://salsa.debian.org/mariadb-team/galera-3/commit/853d8dc20dbf67e9d8ac76668098a6b3560ab786
however, I wonder if that actually works with --build-id=none, given
that the debug symbols are placed next to the build-id?  (not sure,
maybe there is a fallback, I haven't actually checked).

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20180901/62d2af72/attachment.sig>