Bug#1141236: --source-only-changes includes a (source + binary) $ARCH.buildinfo file

[Stefano Rivera]

Package: sbuild
Version: 0.91.9
Severity: normal
User: debusine-team at freexian.com
Usertags: wishlist
X-Debbugs-CC: reproducible-builds at alioth-lists.debian.net

When people generate source-only uploads with "sbuild 
--source-only-changes", the _source.changes file includes an 
_amd64.buildinfo file (for example). This would then fail to merge with 
an _amd64.buildinfo file from the amd64 binary build, that would include 
an identically named buildinfo file with likely different contents.

See: https://salsa.debian.org/freexian-team/debusine/-/work_items/1488

The Debian archive doesn't seem to care about this, at present. But it 
also doesn't actually do anything with .buildinfo files itself, it 
pushes them all off to buildinfos.debian.net. I don't see any special 
handling in there, so I don't know if these are handled or thrown away. 
Reproducible Builds people CCed.

Debusine took the stance of dissallowing .buildinfo files that are not 
named _source.buildinfo, in source-only uploads. I stand by that choice, 
but obviously it has some impact for users who were using toolchains 
that produced such things.

I would suggest that when called with --source-only-changes, sbuild copy 
the .buildinfo file to _source.buildinfo and include *that* in the 
_source.changes instead.

pbuilder has the same issue, I'll file a similar bug there.

Stefano

-- System Information:
Debian Release: forky/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 7.0.10+deb14-amd64 (SMP w/16 CPU threads; PREEMPT)
Kernel taint flags: TAINT_WARN
Locale: LANG=en_ZA.UTF-8, LC_CTYPE=en_ZA.UTF-8 (charmap=UTF-8), LANGUAGE=en_ZA:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages sbuild depends on:
ii  iproute2        7.1.0-1
ii  libsbuild-perl  0.91.9
ii  mount           2.42.2-1
ii  passwd          1:4.19.3-2
ii  perl            5.40.1-8
ii  sbuild-schroot  0.91.9
ii  uidmap          1:4.19.3-2

Versions of packages sbuild recommends:
ii  apt-utils       3.3.1
ii  dpkg-dev        1.23.7
ii  mmdebstrap      1.5.7-3
ii  sbuild-schroot  0.91.9

Versions of packages sbuild suggests:
ii  autopkgtest  5.55
pn  piuparts     <none>

-- no debconf information