1020809">

Debian Bug report logs - #1020809
aespipe: reproducible-builds: build path embedded in /usr/bin/aespipe

version graph

Package: src:aespipe; Maintainer for src:aespipe is Max Vozeler <xam@debian.org>;

Reported by: Vagrant Cascadian <vagrant@reproducible-builds.org>

Date: Tue, 27 Sep 2022 00:39:01 UTC

Severity: normal

Tags: patch

Fixed in version aespipe/2.4d-1.1

Done: Chris Lamb <lamby@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Max Vozeler <xam@debian.org>:
Bug#1020809; Package src:aespipe. (Tue, 27 Sep 2022 00:39:04 GMT) (full text, mbox, link).


Acknowledgement sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Max Vozeler <xam@debian.org>. (Tue, 27 Sep 2022 00:39:04 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Vagrant Cascadian <vagrant@reproducible-builds.org>
To: submit@bugs.debian.org
Subject: aespipe: reproducible-builds: build path embedded in /usr/bin/aespipe
Date: Mon, 26 Sep 2022 17:33:59 -0700
[Message part 1 (text/plain, inline)]
Source: aespipe
Severity: normal
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

The build path is embedded in /usr/bin/pbyacc:

  https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/aespipe.html

  /build/1st/aespipe-20050907/aespipe.c:181
  vs.
  /build/2/aespipe-20050907/2nd/aespipe.c:181

The attached patch to debian/rules fixes this by adding
-ffile-prefix-map and --debug-prefix-map to CFLAGS.

According to my local tests, with this patch applied aespipe should
build reproducibly on tests.reproducible-builds.org!

Thanks for maintaining aespipe!

live well,
  vagrant
[0001-debian-rules-Pass-ffile-prefix-map-and-debug-prefix-.patch (text/x-diff, inline)]
From 631531afe7d566abdf80b2a9fbcf31686ee46ca1 Mon Sep 17 00:00:00 2001
From: Vagrant Cascadian <vagrant@reproducible-builds.org>
Date: Tue, 27 Sep 2022 00:30:50 +0000
Subject: [PATCH] debian/rules: Pass -ffile-prefix-map and --debug-prefix-map
 via CFLAGS to avoid embedding the build path.

https://reproducible-builds.org/docs/build-path/
---
 debian/rules | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/debian/rules b/debian/rules
index 36b04ad..94a4765 100755
--- a/debian/rules
+++ b/debian/rules
@@ -28,6 +28,9 @@ endif
 CFLAGS += -no-pie
 LDFLAGS += -no-pie
 
+# Avoid ebmedding build path in the binaries for reproducible builds
+CFLAGS += -ffile-prefix-map=$(CURDIR)=. --debug-prefix-map=$(CURDIR)=.
+
 config.status: configure
 	dh_testdir
 
-- 
2.37.2

[signature.asc (application/pgp-signature, inline)]

Information forwarded to debian-bugs-dist@lists.debian.org, Max Vozeler <xam@debian.org>:
Bug#1020809; Package src:aespipe. (Thu, 08 Dec 2022 17:33:04 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Max Vozeler <xam@debian.org>. (Thu, 08 Dec 2022 17:33:04 GMT) (full text, mbox, link).


Message #10 received at 1020809@bugs.debian.org (full text, mbox, wrote: > tags 661079 + pending patch > tags 1020809 + pending patch > thanks > > I've just uploaded aespipe 2.4d-1.1 to DELAYED/10: > > aespipe (2.4d-1.1) unstable; urgency=medium > . > * Non-maintainer upload. > * Move to dpkg-buildflags(1) in debian/rules: > - Ensure that the stack is not executable. (Closes: #661079) > - Make the build reproducible by setting -fdebug-prefix-map. > (Closes: #1020809) > > The full debdiff is attached. > > > Regards, > > -- > ,''`. > : :' : Chris Lamb > `. `'` lamby@debian.org / chris-lamb.co.uk > `- &References=<167052051650.1188580.10886684068101422273@copycat>&subject=Re: aespipe: reproducible-builds: build path embedded in /usr/bin/aespipe">reply):

From: "Chris Lamb" <lamby@debian.org>
To: 661079@bugs.debian.org, 661079-submitter@bugs.debian.org, 1020809@bugs.debian.org, 1020809-submitter@bugs.debian.org
Subject: Re: aespipe: reproducible-builds: build path embedded in /usr/bin/aespipe
Date: Thu, 08 Dec 2022 17:29:23 +0000
[Message part 1 (text/plain, inline)]
tags 661079 + pending patch
tags 1020809 + pending patch
thanks

I've just uploaded aespipe 2.4d-1.1 to DELAYED/10:
  
  aespipe (2.4d-1.1) unstable; urgency=medium
  .
    * Non-maintainer upload.
    * Move to dpkg-buildflags(1) in debian/rules:
      - Ensure that the stack is not executable. (Closes: #661079)
      - Make the build reproducible by setting -fdebug-prefix-map.
        (Closes: #1020809)

The full debdiff is attached.


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[aespipe_2.4d-1.1_amd64.debdiff.txt (text/plain, attachment)]

Added tag(s) pending. Request was from "Chris Lamb" <lamby@debian.org> to control@bugs.debian.org. (Thu, 08 Dec 2022 17:33:09 GMT) (full text, mbox, link).


Message sent on to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug#1020809. (Thu, 08 Dec 2022 17:33:19 GMT) (full text, mbox, link).


Reply sent to Chris Lamb <lamby@debian.org>:
You have taken responsibility. (Mon, 19 Dec 2022 20:39:05 GMT) (full text, mbox, link).


Notification sent to Vagrant Cascadian <vagrant@reproducible-builds.org>:
Bug acknowledged by developer. (Mon, 19 Dec 2022 20:39:05 GMT) (full text, mbox, link).


Message #20 received at 1020809-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1020809-close@bugs.debian.org
Subject: Bug#1020809: fixed in aespipe 2.4d-1.1
Date: Mon, 19 Dec 2022 20:36:21 +0000
Source: aespipe
Source-Version: 2.4d-1.1
Done: Chris Lamb <lamby@debian.org>

We believe that the bug you reported is fixed in the latest version of
aespipe, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1020809@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated aespipe package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Thu, 08 Dec 2022 17:14:21 +0000
Source: aespipe
Binary: aespipe aespipe-dbgsym
Architecture: source amd64
Version: 2.4d-1.1
Distribution: unstable
Urgency: medium
Maintainer: Max Vozeler <xam@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
 aespipe    - AES-encryption tool with loop-AES support
Closes: 661079 1020809
Changes:
 aespipe (2.4d-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Move to dpkg-buildflags(1) in debian/rules:
     - Ensure that the stack is not executable. (Closes: #661079)
     - Make the build reproducible by setting -fdebug-prefix-map.
       (Closes: #1020809)
Checksums-Sha1:
 414c90d964f0641c0a4bcaa812274bbfd83c70ff 1674 aespipe_2.4d-1.1.dsc
 f16b7e70c9d98c97563a11bbfdb7f70dba752934 106703 aespipe_2.4d.orig.tar.bz2
 8207be2035b295033b5b8d3fadb6fc6a4683d79d 3836 aespipe_2.4d-1.1.debian.tar.xz
 fa99e12d5ea7f9e7469404eb576dc91021799f5f 40180 aespipe-dbgsym_2.4d-1.1_amd64.deb
 ef43a1a6f3479f7dba76315bf57507e7998d0252 6865 aespipe_2.4d-1.1_amd64.buildinfo
 be0983a0ac676a7ae59dc014d5c742fe10f112b9 37944 aespipe_2.4d-1.1_amd64.deb
Checksums-Sha256:
 6efa52fef38c43c16c31bd2900b5f87f49714fbeec180beb36da0a3b62bb9db8 1674 aespipe_2.4d-1.1.dsc
 c5ce656e0ade49b93e1163ec7b35450721d5743d8d804ad3a9e39add0389e50f 106703 aespipe_2.4d.orig.tar.bz2
 6e16c2a3761193ad4969a4ab55ec7daaa4f71a790edc240cbf46c89f8d112819 3836 aespipe_2.4d-1.1.debian.tar.xz
 969be8e91697210390f687d22a3a6638198a2b9ca4f22189d801cd56656a1023 40180 aespipe-dbgsym_2.4d-1.1_amd64.deb
 f2b47986a360b70f49f8dcd77161991d7640efaa48255788cf7c5e0c2e44f49c 6865 aespipe_2.4d-1.1_amd64.buildinfo
 630e269ad601c2cfa76665425a6e356a249476e55a41eeffd78e51961c2fbfe4 37944 aespipe_2.4d-1.1_amd64.deb
Files:
 a524114c7472fbe11c7b1667f28c67bf 1674 utils optional aespipe_2.4d-1.1.dsc
 bcf49066053aabf9e291a00b20bc5f00 106703 utils optional aespipe_2.4d.orig.tar.bz2
 3733b9830cea52e24232b36864de8e24 3836 utils optional aespipe_2.4d-1.1.debian.tar.xz
 d82f3d89bae489595e3e2b9b9742957b 40180 debug optional aespipe-dbgsym_2.4d-1.1_amd64.deb
 bc9a481bb16f153a622aed2c91bf5ef9 6865 utils optional aespipe_2.4d-1.1_amd64.buildinfo
 44ce4b6eb6d0c83480b0fc065612c4c5 37944 utils optional aespipe_2.4d-1.1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=SSzU
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sun, 22 Jan 2023 07:25:13 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 31 00:48:02 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.