894215">

Debian Bug report logs - #894215
python-setuptools: please make the PKG-INFO output reproducible

version graph

Package: src:python-setuptools; Maintainer for src:python-setuptools is Matthias Klose <doko@debian.org>;

Reported by: Chris Lamb <lamby@debian.org>

Date: Tue, 27 Mar 2018 12:57:02 UTC

Severity: wishlist

Tags: patch

Found in version python-setuptools/39.0.1-1

Fixed in version python-setuptools/39.0.1-2

Done: Matthias Klose <doko@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Matthias Klose <doko@debian.org>:
Bug#894215; Package src:python-setuptools. (Tue, 27 Mar 2018 12:57:05 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Matthias Klose <doko@debian.org>. (Tue, 27 Mar 2018 12:57:05 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: submit@bugs.debian.org
Subject: python-setuptools: please make the PKG-INFO output reproducible
Date: Tue, 27 Mar 2018 13:53:19 +0100
[Message part 1 (text/plain, inline)]
Source: python-setuptools
Version: 39.0.1-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: toolchain randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that python-setuptools generates output that is not reproducible:

│ │ │ ├── ./usr/lib/python3/dist-packages/social_auth_core-1.7.0.egg-info/PKG-INFO
│ │ │ │ @@ -56,11 +56,11 @@
│ │ │ │  Classifier: Programming Language :: Python :: 2.7
│ │ │ │  Classifier: Programming Language :: Python :: 3
│ │ │ │ -Provides-Extra: openidconnect
│ │ │ │  Provides-Extra: all
│ │ │ │  Provides-Extra: azuread
│ │ │ │ +Provides-Extra: openidconnect
│ │ │ │  Provides-Extra: saml

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[python-setuptools.diff.txt (text/plain, attachment)]

Information forwarded to debian-bugs-dist@lists.debian.org, Matthias Klose <doko@debian.org>:
Bug#894215; Package src:python-setuptools. (Sat, 31 Mar 2018 09:33:03 GMT) (full text, mbox, link).


Acknowledgement sent to Chris Lamb <lamby@debian.org>:
Extra info received and forwarded to list. Copy sent to Matthias Klose <doko@debian.org>. (Sat, 31 Mar 2018 09:33:03 GMT) (full text, mbox, link).


Message #10 received at 894215@bugs.debian.org (full text, mbox, reply):

From: Chris Lamb <lamby@debian.org>
To: 894215@bugs.debian.org
Subject: Re: python-setuptools: please make the PKG-INFO output reproducible
Date: Sat, 31 Mar 2018 10:30:54 +0100
Chris Lamb wrote:

> Patch attached.

This issue is causing a significant dip in our reproducibility stats
as setuptools is used a fair amount (!).  Could you perhaps prioritise
an upload? :-)


Best wishes,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-



Reply sent to Matthias Klose <doko@debian.org>:
You have taken responsibility. (Mon, 02 Apr 2018 10:24:04 GMT) (full text, mbox, link).


Notification sent to Chris Lamb <lamby@debian.org>:
Bug acknowledged by developer. (Mon, 02 Apr 2018 10:24:04 GMT) (full text, mbox, link).


Message #15 received at 894215-close@bugs.debian.org (full text, mbox, reply):

From: Matthias Klose <doko@debian.org>
To: 894215-close@bugs.debian.org
Subject: Bug#894215: fixed in python-setuptools 39.0.1-2
Date: Mon, 02 Apr 2018 10:20:23 +0000
Source: python-setuptools
Source-Version: 39.0.1-2

We believe that the bug you reported is fixed in the latest version of
python-setuptools, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 894215@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <doko@debian.org> (supplier of updated python-setuptools package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Mon, 02 Apr 2018 11:46:01 +0200
Source: python-setuptools
Binary: python-pkg-resources python-setuptools python-setuptools-doc python3-pkg-resources python3-setuptools pypy-pkg-resources pypy-setuptools
Architecture: source
Version: 39.0.1-2
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <doko@debian.org>
Changed-By: Matthias Klose <doko@debian.org>
Description:
 pypy-pkg-resources - Package Discovery and Resource Access using pkg_resources
 pypy-setuptools - PyPy Distutils Enhancements
 python-pkg-resources - Package Discovery and Resource Access using pkg_resources
 python-setuptools - Python Distutils Enhancements
 python-setuptools-doc - Python Distutils Enhancements (documentation)
 python3-pkg-resources - Package Discovery and Resource Access using pkg_resources
 python3-setuptools - Python3 Distutils Enhancements
Closes: 894215
Changes:
 python-setuptools (39.0.1-2) unstable; urgency=medium
 .
   * Make the PKG-INFO output reproducible (Chris Lamb). Closes: #894215.
   * Stop shipping the easy_install scripts.
Checksums-Sha1:
 3b36d1032309546a6e66b694727b79841e9f38f9 2394 python-setuptools_39.0.1-2.dsc
 2b440b1bd09d163c4b47c20806341fa95f45d18e 15040 python-setuptools_39.0.1-2.debian.tar.xz
 23de69767ef049728ed547f4e9cf3b9c9a36260e 7340 python-setuptools_39.0.1-2_source.buildinfo
Checksums-Sha256:
 ff5d172461544d2d847e6d3ecef3356141a4487dcc3047a88db61744986cf999 2394 python-setuptools_39.0.1-2.dsc
 2e997b64dd6b9ff88672eb965c23ab505558ca45b34d47c87a18e90751fe189a 15040 python-setuptools_39.0.1-2.debian.tar.xz
 59f5590c73a8ffb46f16a1f26fbae4ea4645557b75aa3561a064b16e6d6d3ec6 7340 python-setuptools_39.0.1-2_source.buildinfo
Files:
 2c79e8d04a214175d149b938c26bd877 2394 python optional python-setuptools_39.0.1-2.dsc
 632bb970a683c0a01aeba565507989c0 15040 python optional python-setuptools_39.0.1-2.debian.tar.xz
 02b84abceacf0bbb9f686e4b290393a6 7340 python optional python-setuptools_39.0.1-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=ctrh
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 05 May 2018 07:26:32 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Feb 3 06:13:29 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.