Acknowledgement sent
to Jo Shields <directhex@apebox.org>:
New Bug report received and forwarded. Copy sent to Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>.
(Mon, 09 Nov 2015 20:51:05 GMT) (full text, mbox, link).
Package: dh-strip-nondeterminism
Version: 0.013-1
Severity: important
Dear Maintainer,
dh_strip_nondeterminism is now called by default in "dh $@" style debhelper
packages.
Unfortunately, the default behaviour will strip crypto signing from libraries,
which is required for them to be installed in a systemwide location - as such,
this breaks installation of any library packages rebuilt since
dh_strip_nondeterminism became a default command.
I appreciate the intention of the tool, but it would be extremely useful if it
could skip files of type "PE32 executable (console) Intel 80386 Mono/.Net
assembly, for MS Windows", certainly if they contain a StrongName signature.
The issue with determinism is a short-term issue anyway - libraries built with
Mono 4.0+ (as found in Experimental) are deterministic, but this issue has set
back my efforts on that transition considerably. I now need to do fifty
sourceful uploads with "override_dh_strip_nondeterminism" stanzas added.
------------
root@marceline:/tmp# sn -k hellokey.snk
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
A new 1024 bits strong name keypair has been generated in file 'hellokey.snk'.
root@marceline:/tmp# cat hello.cs
public class Hello1
{
public static void Main()
{
System.Console.WriteLine("Hello, World!");
}
}
root@marceline:/tmp# mcs -keyfile:hellokey.snk hello.cs
root@marceline:/tmp# sn -v hello.exe
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
Assembly hello.exe is strongnamed.
root@marceline:/tmp# strip-nondeterminism hello.exe
root@marceline:/tmp# sn -v hello.exe
Mono StrongName - version 3.2.8.0
StrongName utility for signing assemblies
Copyright 2002, 2003 Motus Technologies. Copyright 2004-2008 Novell. BSD
licensed.
Assembly hello.exe is delay-signed but not strongnamed
-- System Information:
Debian Release: jessie/sid
APT prefers wily-updates
APT policy: (500, 'wily-updates'), (500, 'wily-security'), (500, 'wily'), (100, 'wily-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.2.0-16-generic (SMP w/4 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Information forwarded
to debian-bugs-dist@lists.debian.org, Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>: Bug#804600; Package dh-strip-nondeterminism.
(Tue, 10 Nov 2015 00:03:07 GMT) (full text, mbox, link).
Acknowledgement sent
to Chris Lamb <chris@chris-lamb.co.uk>:
Extra info received and forwarded to list. Copy sent to Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>.
(Tue, 10 Nov 2015 00:03:07 GMT) (full text, mbox, link).
tags 804600 + pending
thanks
Hi,
> I now need to do fifty sourceful uploads with "override_dh_strip_nondeterminism" stanzas added.
That seems excessive. I'll just upload a fix instead..
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby@debian.org / chris-lamb.co.uk
`-
Added tag(s) pending.
Request was from Chris Lamb <chris@chris-lamb.co.uk>
to control@bugs.debian.org.
(Tue, 10 Nov 2015 00:03:12 GMT) (full text, mbox, link).
Message sent on
to Jo Shields <directhex@apebox.org>:
Bug#804600.
(Tue, 10 Nov 2015 00:03:15 GMT) (full text, mbox, link).
Reply sent
to Chris Lamb <lamby@debian.org>:
You have taken responsibility.
(Tue, 10 Nov 2015 00:21:10 GMT) (full text, mbox, link).
Notification sent
to Jo Shields <directhex@apebox.org>:
Bug acknowledged by developer.
(Tue, 10 Nov 2015 00:21:10 GMT) (full text, mbox, link).
Subject: Bug#804600: fixed in strip-nondeterminism 0.014-1
Date: Tue, 10 Nov 2015 00:19:03 +0000
Source: strip-nondeterminism
Source-Version: 0.014-1
We believe that the bug you reported is fixed in the latest version of
strip-nondeterminism, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 804600@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated strip-nondeterminism package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 10 Nov 2015 00:08:28 +0000
Source: strip-nondeterminism
Binary: libfile-stripnondeterminism-perl strip-nondeterminism dh-strip-nondeterminism
Architecture: source all
Version: 0.014-1
Distribution: unstable
Urgency: medium
Maintainer: Reproducible builds folks <reproducible-builds@lists.alioth.debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
dh-strip-nondeterminism - debhelper add-on to strip non-determinism from files
libfile-stripnondeterminism-perl - Perl module for stripping non-determinism from files
strip-nondeterminism - tool for stripping non-determinism from files
Closes: 804600
Changes:
strip-nondeterminism (0.014-1) unstable; urgency=medium
.
* New upstream release:
- Disable stripping Mono binaries as it is too aggressive re. StrongName,
preventing package installs in a systemwide location (Closes: #804600)
* Add myself to Uploaders.
Checksums-Sha1:
4762e9b9e51a92bcc5be60e7005592e785e1906c 2282 strip-nondeterminism_0.014-1.dsc
b163d7819ccbf645ab61e8657a379da0a6c45110 24623 strip-nondeterminism_0.014.orig.tar.gz
2df8ef99eb6b720b3d43c6ff6c7367620a796ed1 3752 strip-nondeterminism_0.014-1.debian.tar.xz
d856d1f53136aa5b6b7ff06792edc56d452cc085 7472 dh-strip-nondeterminism_0.014-1_all.deb
b770131197afa6efbae053967302e7c3a102edae 10638 libfile-stripnondeterminism-perl_0.014-1_all.deb
7cca6c43668989c37b86ddb8cc19b68563602ca1 7440 strip-nondeterminism_0.014-1_all.deb
Checksums-Sha256:
b867546ea70de9036ae3bdd4a28c5e1018d68e3b9952ce170e91defec25f8c42 2282 strip-nondeterminism_0.014-1.dsc
2f98f114a419b2d4f4a8c8eb464bac3f0c53982bd4645d85d23e1e94536c2d7a 24623 strip-nondeterminism_0.014.orig.tar.gz
50911cbb2f59395e4c9a78019a09df4464f1a58ffa69395813cac6b6e1ea17b3 3752 strip-nondeterminism_0.014-1.debian.tar.xz
70bb16c15512accf69811cd6a19c5f441a928565587dd75c5ebc07e81cdad9f9 7472 dh-strip-nondeterminism_0.014-1_all.deb
6feb7bf0da4cf3c5779dbd2e5fc0eca2730d1573ed87750b07ba3757f08d9dbd 10638 libfile-stripnondeterminism-perl_0.014-1_all.deb
13e268421d6bd92849a9522569d733ba2c35c36bf7527a402158530a7279be85 7440 strip-nondeterminism_0.014-1_all.deb
Files:
9d327313952cebea3609e80a18cfc2a8 2282 perl optional strip-nondeterminism_0.014-1.dsc
0d1979f383111ce32f0183af1b12c6fd 24623 perl optional strip-nondeterminism_0.014.orig.tar.gz
08bf67e312431c0cf978affa956fa3d6 3752 perl optional strip-nondeterminism_0.014-1.debian.tar.xz
607d66ec8682a8b11e98d07a14b45404 7472 perl optional dh-strip-nondeterminism_0.014-1_all.deb
9cce5b2ab775e58bbc48e33722d18b6b 10638 perl optional libfile-stripnondeterminism-perl_0.014-1_all.deb
644e29bfb80505600301444c44d7d424 7440 perl optional strip-nondeterminism_0.014-1_all.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=/rqA
-----END PGP SIGNATURE-----
Bug archived.
Request was from Debbugs Internal Request <owner@bugs.debian.org>
to internal_control@bugs.debian.org.
(Sun, 13 Dec 2015 07:25:02 GMT) (full text, mbox, link).
Debbugs is free software and licensed under the terms of the GNU General
Public License version 2. The current version can be obtained
from https://bugs.debian.org/debbugs-source/.