Bug#955307: debrebuild: should avoid downgrades

Holger Levsen holger at debian.org
Sun Mar 29 18:42:00 BST 2020


Package: devscripts
Version: 2.20.2
Severity: normal

Dear Maintainer,

this bug report is a bit premature, as currently debrebuild does not setup
the chroot debrebuild (or rather the sbuild command generated by debrebuild),
but anyway, let's file a bug to track this problem and improve upon:

I just tried to rebuild bash 5.0.6 for amd64, which was built on February 25th
2020, using a sid schroot created today. This resulted in many downgrades by
sbuild (as invoked by debrebuild) which in this case (by luck) worked nicely,
but downgrading packages is neither supported by design nor testing, thus
should be avoided.

Thus it would be fantastic if debrebuild would start with a buster schroot
and upgrade that to the packages needed to build bash 5.0.6 for amd64. (With
the logic being: this is a rebuild for a package from unstable built in 
February 2020, thus the build base should be the stable release at that time.)

Currently this is nothing debrebuild can do, but for a future standalone
rebuilder tool this will be a very nice feature.

-- 
cheers,
	Holger

-------------------------------------------------------------------------------
               holger@(debian|reproducible-builds|layer-acht).org
       PGP fingerprint: B8BF 5413 7B09 D35C F026 FE9D 091A B856 069A AA1C

Our civilization is being sacrificed for the opportunity of a very small number
of people to continue making enormous amounts of money...  It is the sufferings
of the many  which pay  for the luxuries  of the few...  You say  you love your
children  above all else,  and yet  you are stealing  their future  in front of 
their very eyes...
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/reproducible-builds/attachments/20200329/6b16d634/attachment.sig>


More information about the Reproducible-builds mailing list