[Reproducible-builds] getting dpkg ready for reproducible sid

[Holger Levsen]

Hi,

so dpkg 1.18.7 was uploaded to sid today and Mattia promply rebased
our patches on it and uploaded the following changes to our repo:

dpkg (1.18.7.0~reproducible0) UNRELEASED; urgency=low

  [ Jérémy Bobbio ]
  * Use a single timestamp for ar headers when building a .deb.
  * Use the common build timestamp for all files created at a later time if
    tar supports then --clamp-mtime option.
  * Allow to set the build timestamp using SOURCE_DATE_EPOCH.
  * Preset build timestamp to latest changelog entry. Closes: #759886, #759999
  * Normalize file permissions when creating control.tar. Closes: #787980
  * Add support for .buildinfo files. Closes: #138409

  [ Niko Tyni ]
  * Rebase on dpkg 1.18.6.
    + teach dpkg-genbuildinfo the new --build=[...] syntax
  * dpkg-genbuildinfo; Disable Environment information generation
    for now until diffoscope supports it.

 -- Mattia Rizzolo <mattia at debian.org>  Mon, 09 May 2016 08:57:56 +0000


Looking at this I notice we have some changes without bugs and some
changes involving several bugs, still I think it would be good to
discuss them as uploaded.

IOW: dear dpkg maintainers, what are your comments regarding getting the
following changes into sid:

a.) single timestamp for ar headers
b.) common build timestamp for all files created at a later time
c.) build timestamp using SOURCE_DATE_EPOCH
d.) preset build timestamp to latest changelog entry
e.) normalize file permissions when creating control.tar
f.) add support for .buildinfo files
g.) teach dpkg-genbuildinfo the new --build=[...] syntax

? 

And, do we need bugs for a+b+c+g ?

https://anonscm.debian.org/cgit/reproducible/dpkg.git/log/?h=pu/reproducible_builds
has 7 patches on top of 1.18.7:

$ git log --oneline 1.18.7..pu/reproducible_builds
62ccd2d document 1.18.7.0~reproducible0
caf8e48 dpkg-genbuildinfo; Disable Environment information for now
0774d02 Add support for .buildinfo files
c247140 dpkg-deb: Normalize file permissions when creating control.tar
ddce83d dpkg-buildpackage: Preset build timestamp to latest changelog entry
fc25ddf dpkg-deb: Allow to set the build timestamp using SOURCE_DATE_EPOCH
1c7e268 dpkg-deb: Use the common build timestamp for all files created at a later time
1dfc945 dpkg-deb: Use a single timestamp for ar headers when building a .deb

Are there any other changes needed in dpkg for Reproducible builds of Debian?

How can we (reproducible builds) folks help making these changes happen? :-)


-- 
thanks & cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20160509/bf5a54c5/attachment.sig>