847034">

Debian Bug report logs - #847034
twoftpd: please make the build reproducible (fileordering)

version graph

Package: twoftpd; Maintainer for twoftpd is Gerrit Pape <pape@smarden.org>; Source for twoftpd is src:twoftpd (PTS, buildd, popcon).

Reported by: Valerie R Young <spectranaut@riseup.net>

Date: Mon, 5 Dec 2016 01:24:05 UTC

Severity: wishlist

Tags: patch

Fixed in version twoftpd/1.42-1.1

Done: Mattia Rizzolo <mattia@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Gerrit Pape <pape@smarden.org>:
Bug#847034; Package twoftpd. (Mon, 05 Dec 2016 01:24:07 GMT) (full text, mbox, link).


Acknowledgement sent to Valerie R Young <spectranaut@riseup.net>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Gerrit Pape <pape@smarden.org>. (Mon, 05 Dec 2016 01:24:07 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, that twoftpd could not be built reproducibly. > Specifically the order of the sorted md5sums files varies. > > The attached patch fixes those issues. > > Please consider this other patch from the reproducible builds team: > https://bugs.debian.org/777369 > > Thanks! > Valerie > > [1]: https://wiki.debian.org/ReproducibleBuilds > > -- System Information: > Debian Release: stretch/sid > APT prefers testing > APT policy: (500, 'testing'), (500, 'stable') > Architecture: amd64 (x86_64) > > Kernel: Linux 4.4.0-rc8-touchpad (SMP w/4 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) &References=<5844C151.2070309@riseup.net>&subject=Re: twoftpd: please make the build reproducible (fileordering)&In-Reply-To=<5844C151.2070309@riseup.net>">reply):

From: Valerie R Young <spectranaut@riseup.net>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: twoftpd: please make the build reproducible (fileordering)
Date: Sun, 4 Dec 2016 20:22:25 -0500
[Message part 1 (text/plain, inline)]
Package: twoftpd
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org,
spectranaut@riseup.net

Dear Maintainer,

While working on the "reproducible builds" effort [1], we have noticed
that twoftpd  could not be built reproducibly.
Specifically the order of the sorted md5sums files varies.

The attached patch fixes those issues.

Please consider this other patch from the reproducible builds team:
https://bugs.debian.org/777369

Thanks!
Valerie

[1]: https://wiki.debian.org/ReproducibleBuilds

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.4.0-rc8-touchpad (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
[implicit.patch (text/x-patch, attachment)]

Added tag(s) pending. Request was from Mattia Rizzolo <mattia@debian.org> to 777369-submit@bugs.debian.org. (Wed, 08 Mar 2017 23:45:04 GMT) (full text, mbox, link).


Information forwarded to debian-bugs-dist@lists.debian.org, Gerrit Pape <pape@smarden.org>:
Bug#847034; Package twoftpd. (Wed, 08 Mar 2017 23:45:06 GMT) (full text, mbox, link).


Message #10 received at 847034@bugs.debian.org (full text, mbox, reply):

From: Mattia Rizzolo <mattia@debian.org>
To: 777369@bugs.debian.org, 847034@bugs.debian.org
Subject: twoftpd: diff for NMU version 1.42-1.1
Date: Thu, 9 Mar 2017 00:41:04 +0100
[Message part 1 (text/plain, inline)]
Control: tags 777369 + pending
Control: tags 847034 + pending

Dear maintainer,

I've prepared an NMU for twoftpd (versioned as 1.42-1.1) and
uploaded it to DELAYED/15. Please feel free to tell me if I
should delay it longer.

Regards.

-- 
regards,
                        Mattia Rizzolo

GPG Key: 66AE 2B4A FCCF 3F52 DA18  4D18 4B04 3FCD B944 4540      .''`.
more about me:  https://mapreri.org                             : :'  :
Launchpad user: https://launchpad.net/~mapreri                  `. `'`
Debian QA page: https://qa.debian.org/developer.php?login=mattia  `-
[twoftpd-1.42-1.1-nmu.diff (text/x-diff, attachment)]
[signature.asc (application/pgp-signature, inline)]

Reply sent to Mattia Rizzolo <mattia@debian.org>:
You have taken responsibility. (Fri, 24 Mar 2017 00:51:08 GMT) (full text, mbox, link).


Notification sent to Valerie R Young <spectranaut@riseup.net>:
Bug acknowledged by developer. (Fri, 24 Mar 2017 00:51:08 GMT) (full text, mbox, link).


Message #15 received at 847034-close@bugs.debian.org (full text, mbox, reply):

From: Mattia Rizzolo <mattia@debian.org>
To: 847034-close@bugs.debian.org
Subject: Bug#847034: fixed in twoftpd 1.42-1.1
Date: Fri, 24 Mar 2017 00:48:56 +0000
Source: twoftpd
Source-Version: 1.42-1.1

We believe that the bug you reported is fixed in the latest version of
twoftpd, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 847034@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Mattia Rizzolo <mattia@debian.org> (supplier of updated twoftpd package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 09 Mar 2017 00:34:09 +0100
Source: twoftpd
Binary: twoftpd twoftpd-run
Architecture: source
Version: 1.42-1.1
Distribution: unstable
Urgency: medium
Maintainer: Gerrit Pape <pape@smarden.org>
Changed-By: Mattia Rizzolo <mattia@debian.org>
Description:
 twoftpd    - a simple secure efficient FTP server (programs)
 twoftpd-run - a simple secure efficient FTP server
Closes: 777369 847034
Changes:
 twoftpd (1.42-1.1) unstable; urgency=medium
 .
   * Non-maintainer upload.
   * Make the build reproducible: pass -n to gzip.
     Thanks to Chris Lamb for the patch.  Closes: #777369
   * Make the build reproducible: sort the md5sums file.
     Thanks to Valerie R Young for the patch.  Closes: #847034
Checksums-Sha1:
 ef83041467b5fd5a7aa6305c916ac4fac53f1f7e 1881 twoftpd_1.42-1.1.dsc
 796e80b273d4227b134c7aa08030d35ef1bc4c46 9120 twoftpd_1.42-1.1.diff.gz
 49de59a0aa13a1ca52656436d8945fef4de7a709 5127 twoftpd_1.42-1.1_amd64.buildinfo
Checksums-Sha256:
 a8e96c7a4fbb4c5ccd53f39883b6753294ce89807b95092b87aa13443975b536 1881 twoftpd_1.42-1.1.dsc
 50e7fadd8dcbd539673bd49aad43f774e568908b500ebb60e412094cd805c945 9120 twoftpd_1.42-1.1.diff.gz
 340ec589c4d4943d913a700fd644a7f8c21b784b58af7aa845e542aa57b65a1f 5127 twoftpd_1.42-1.1_amd64.buildinfo
Files:
 40b3ec55bf23459282dd1a5a26888904 1881 net optional twoftpd_1.42-1.1.dsc
 45bffc401e8c61750d79d618f9ec8e57 9120 net optional twoftpd_1.42-1.1.diff.gz
 c60d58267280b1a459016180557821ec 5127 net optional twoftpd_1.42-1.1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQJGBAEBCgAwFiEEi3hoeGwz5cZMTQpICBa54Yx2K60FAljAlmUSHG1hdHRpYUBk
ZWJpYW4ub3JnAAoJEAgWueGMdiutrwIQALY5atADLvvN258HuhVJ+j58mAqb4Vta
xhCoBEWT4TrIgR8bQgU62vSsWRJo5Dg9YjkaP48xFNr/oHjy+aeuhAyaG6r1UI6n
pbwaYHRd4o/JCTWcsELLJcdcmYARtMxHlA0mhvbfVoxL8o6YiY0QDSw+PcUubZjv
1WAMg8HxCEuhIf1WnuDPGMGYdYvnaKPvKEcKKFiq4/ct44w65SRAvRUIPAlhF5MJ
mlj5VIPlvuYfU4EqGIi3/yMm6WF8tEEvTzYBPggAWijlpcrtchGUtfF7GZfxW8d9
S8AL6FosFAA/Xgo5/rrCK4PCFjDvOnULDWDSjXDgT6jcgvNgclU3y1dwnor1ebh7
+pGeYtujBVjySKdZRxyZ2VBysO8kku3wBzi+O5zPrQZUIirhyEI+BqPE2BhQQZI7
SMuTWguAEbkx/vBAXlJm0t4k68xO1q+QffmI6yTtiy2KhVHQS8QI92+wITRwcxUT
F0xfzMaV/AQbFmT+bIgxWx5BirdBJ5tapHIB2OYTWdXRWRilz4hkkGlQr5DDIGG1
GEV/zx7DIA+t8RApUKTF1IvXY9/yR50jQkpqeC0g0Z9URHsm2cOdZWKzysL6B3e6
y/3ehaD9tndNImQD3RSoV1CGpXMWFghMuVKV+nB2QaoZEsN0B6eAuCv2TNUllcJK
MSCO4z6EcXCx
=nzdb
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 22 Apr 2017 07:26:05 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 31 00:39:52 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.