961009">

Debian Bug report logs - #961009
nulib2: please make the build reproducible

version graph

Package: src:nulib2; Maintainer for src:nulib2 is Stephen Kitt <skitt@debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Tue, 19 May 2020 10:12:01 UTC

Severity: wishlist

Tags: patch

Found in version nulib2/3.1.0-2

Fixed in version nulib2/3.1.0-3

Done: Stephen Kitt <skitt@debian.org>

Bug is archived. No further changes may be made.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org, Stephen Kitt <skitt@debian.org>:
Bug#961009; Package src:nulib2. (Tue, 19 May 2020 10:12:03 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, Stephen Kitt <skitt@debian.org>. (Tue, 19 May 2020 10:12:03 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, wrote: > Source: nulib2 > Version: 3.1.0-2 > Severity: wishlist > Tags: patch > User: reproducible-builds@lists.alioth.debian.org > Usertags: buildpath > X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org > > Hi, > > Whilst working on the Reproducible Builds effort [0] we noticed that > nulib2 could not be built reproducibly. > > This is because it embedded the build flags into the generated binary > which then included the absolute build path via the -ffile-prefix-map > GCC argument. > > Patch attached that overwrites this from debian/rules via the > DEB_CPPFLAGS_MAINT_APPEND mechanism and sets it to an empty string but > it may be nicer to replace this with something like "Debian" or > something. > > [0] https://reproducible-builds.org/ > > > Regards, > > -- > ,''`. > : :' : Chris Lamb > `. `'` lamby@debian.org / chris-lamb.co.uk > `- &subject=Re: nulib2: please make the build reproducible&In-Reply-To=<76b5a87a-dc0c-4cf8-aa76-ce9835f52996@sloti26t01>">reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: nulib2: please make the build reproducible
Date: Tue, 19 May 2020 11:08:09 +0100
[Message part 1 (text/plain, inline)]
Source: nulib2
Version: 3.1.0-2
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: buildpath
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0] we noticed that
nulib2 could not be built reproducibly.

This is because it embedded the build flags into the generated binary
which then included the absolute build path via the -ffile-prefix-map
GCC argument.

Patch attached that overwrites this from debian/rules via the
DEB_CPPFLAGS_MAINT_APPEND mechanism and sets it to an empty string but
it may be nicer to replace this with something like "Debian" or
something.

 [0] https://reproducible-builds.org/


Regards,

--
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `- 
[nulib2.diff.txt (text/plain, attachment)]

Reply sent to Stephen Kitt <skitt@debian.org>:
You have taken responsibility. (Tue, 19 May 2020 13:36:04 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Tue, 19 May 2020 13:36:04 GMT) (full text, mbox, link).


Message #10 received at 961009-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 961009-close@bugs.debian.org
Subject: Bug#961009: fixed in nulib2 3.1.0-3
Date: Tue, 19 May 2020 13:34:16 +0000
Source: nulib2
Source-Version: 3.1.0-3
Done: Stephen Kitt <skitt@debian.org>

We believe that the bug you reported is fixed in the latest version of
nulib2, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 961009@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Stephen Kitt <skitt@debian.org> (supplier of updated nulib2 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 19 May 2020 15:14:20 +0200
Source: nulib2
Architecture: source
Version: 3.1.0-3
Distribution: unstable
Urgency: medium
Maintainer: Stephen Kitt <skitt@debian.org>
Changed-By: Stephen Kitt <skitt@debian.org>
Closes: 961009
Changes:
 nulib2 (3.1.0-3) unstable; urgency=medium
 .
   * Override the stored build flags to avoid storing the build path;
     this helps make the build reproducible. Based on a patch by Chris
     Lamb. Closes: #961009.
   * Standards-Version 4.5.0, no change required.
   * Run the upstream tests during the build.
Checksums-Sha1:
 ee14b56d760711db69d045bd75b358124090ed2e 1808 nulib2_3.1.0-3.dsc
 9b1bae8b19caeca9bcc9b53cd8e5881f8d60b73b 4860 nulib2_3.1.0-3.debian.tar.xz
 b05b24ba225812757f5d332b62eb4170a201ce2d 6028 nulib2_3.1.0-3_source.buildinfo
Checksums-Sha256:
 275c74dcac19a82f38a1ea8909c7b70b012a54833087b3d224ca1e1cb0368f06 1808 nulib2_3.1.0-3.dsc
 0c613bf312f810f4ec7745251b43e89d61a7d2708d1120913b16686811301502 4860 nulib2_3.1.0-3.debian.tar.xz
 891a93005ab1fed420974fac22f1c3f6aa4a9c1f069e509842493552c7eeaa26 6028 nulib2_3.1.0-3_source.buildinfo
Files:
 ba471d3dcc047b1f1bd0449534c4b8f0 1808 otherosfs optional nulib2_3.1.0-3.dsc
 33d0fa31544a5ec6305c50cea7dacd96 4860 otherosfs optional nulib2_3.1.0-3.debian.tar.xz
 dd33c5c92bd8904257e4964d1ea817e6 6028 otherosfs optional nulib2_3.1.0-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=th0q
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Tue, 23 Jun 2020 07:25:35 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Mon Feb 3 06:22:55 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.