Bug#963537: golang-v2ray-core: please make the build reproducible
Chris Lamb
lamby at debian.org
Tue Jun 23 10:39:53 BST 2020
Source: golang-v2ray-core
Version: 4.23.4+ds-2
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-bugs at lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0] we noticed that
golang-v2ray-core could not be built reproducibly.
This is because during the test part of the build process the package
generates test certificates that end up in the final binary .deb.
This is a problem in two ways: these files are not deterministic
(DSA-1571 was a long time ago) and the contents of the package will
depend on whether you run the testsuite or not (ie. with "nocheck"
etc.)
Patch attached that never installs these files.
[0] https://reproducible-builds.org/
Regards,
--
,''`.
: :' : Chris Lamb
`. `'` lamby at debian.org / chris-lamb.co.uk
`-
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: golang-v2ray-core.diff.txt
URL: <http://alioth-lists.debian.net/pipermail/reproducible-bugs/attachments/20200623/505ecfeb/attachment.txt>
More information about the Reproducible-bugs
mailing list