[Reproducible-builds] Bug#824951: libtomcrypt: please make the build reproducible

[Reiner Herrmann]

Source: libtomcrypt
Version: 1.17-7
Severity: wishlist
Tags: patch
User: reproducible-builds at lists.alioth.debian.org
Usertags: timestamps
X-Debbugs-Cc: reproducible-builds at lists.alioth.debian.org

Hi!

While working on the "reproducible builds" effort [1], we have noticed
that libtomcrypt could not be built reproducibly.
Because of #734109, a patch has been added to fix the reproducibility
of crypt.pdf. It enforces timestamps based on the modification date of
crypt.tex. But because of a newer patch from 2015 (fix-latex-here.patch),
the modification time is changed on each build process, so the pdf file
became unreproducible.

There are now two possible solutions:
- drop the original patch (deterministic-latex.patch), as texlive
  supports SOURCE_DATE_EPOCH since last week, so the pdf would be
  reproducible without the patch.
  Though I saw that the patch has already been applied upstream,
  so alternatively:
- amend the patch to favor SOURCE_DATE_EPOCH over stat, if it is set.
  This is done by the attached patch.

Regards,
 Reiner

[1]: https://wiki.debian.org/ReproducibleBuilds
-------------- next part --------------
A non-text attachment was scrubbed...
Name: libtomcrypt.patch
Type: text/x-diff
Size: 886 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20160521/5fd20f32/attachment.patch>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20160521/5fd20f32/attachment.sig>