Bug#763677: libgnome2-vfs-perl: non-reproducible build due to hash ordering

[Niko Tyni]

reassign 763677 libextutils-depends-perl 0.401-1
tag 763677 upstream patch
user reproducible-builds at lists.alioth.debian.org
usertags + toolchain
thanks

On Wed, Oct 01, 2014 at 10:19:33PM +0300, Niko Tyni wrote:
> Package: libgnome2-vfs-perl
> Version: 1.082-1
> Severity: wishlist
> User: reproducible-builds at lists.alioth.debian.org
> Usertags: randomness
> 
> This package cannot be built reproducibly because
> Gnome2::VFS::Install::Files content varies per build.  The $self hash
> order is non-deterministic. It would be nice to have a sort() call
> somewhere there; I'm not quite certain yet if that somewhere is actually
> in ExtUtils::Depends (in which case this bug should probably acquire a
> 'toolchain' usertag too.)

It's indeed ExtUtils::Depends. That makes it a toolchain issue: there
are 43 source packages in sid build-depending on libextutils-depends-perl
and 29 binary packages containing Install/Files.pm. Presumably all
those 29 would benefit from fixing this.

Patch attached. It's trivial and should be taken upstream next.  I've
tested it as far as building libgnome2-vfs-perl thrice and observing no
change to Files.pm between those. I think that should do.
-- 
Niko Tyni   ntyni at debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-Sort-hash-keys-in-saved-configuration-for-reproducib.patch
Type: text/x-diff
Size: 819 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-perl-maintainers/attachments/20141001/a23154ad/attachment.patch>