Bug#879913: sdlgfx: please make the build reproducible

Chris Lamb lamby at debian.org
Fri Oct 27 08:38:55 UTC 2017


Source: sdlgfx
Version: 2.0.25-8
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: fileordering
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed
that sdlgfx could not be built reproducibly.

This is because the tar call iterates over the filesystem in a
non-deterministic order to generate the examples archive.

Patch attached that uses --sort=name from GNU tar 1.28, but you could
alternatively `find | LC_ALL=C sort` etc.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org / chris-lamb.co.uk
       `-
-------------- next part --------------
diff --git a/debian/control b/debian/control
index 3b43b0c..001dd18 100644
--- a/debian/control
+++ b/debian/control
@@ -7,7 +7,8 @@ Standards-Version: 4.0.0
 Build-Depends: debhelper (>= 10~),
                libsdl1.2-dev,
                dh-linktree,
-               libjs-jquery
+               libjs-jquery,
+	       tar (>= 1.28),
 Vcs-Browser: https://anonscm.debian.org/git/pkg-sdl/packages/sdlgfx.git
 Vcs-Git: https://anonscm.debian.org/git/pkg-sdl/packages/sdlgfx.git
 Homepage: http://www.ferzkopp.net/Software/SDL_gfx-2.0/
diff --git a/debian/rules b/debian/rules
index 79d5c0a..05b32ba 100755
--- a/debian/rules
+++ b/debian/rules
@@ -25,7 +25,7 @@ override_dh_auto_configure:
 
 override_dh_auto_build:
 	dh_auto_build
-	GZIP=-n tar -cvz --transform='s,^Test,examples,' --owner=0 --group=0 --mode=go=rX,u+rw,a-s --mtime="$(SOURCE_DATE)" -f debian/examples.tar.gz Test
+	GZIP=-n tar -cvz --transform='s,^Test,examples,' --owner=0 --group=0 --mode=go=rX,u+rw,a-s --mtime="$(SOURCE_DATE)" --sort=name -f debian/examples.tar.gz Test
 
 override_dh_auto_clean:
 	dh_auto_clean


More information about the Pkg-sdl-maintainers mailing list