[Reproducible-builds] Bug#789648: Bug#789648: apt-dater: please make the build reproducible

[Thomas Liske]

tags 789648 fixed-upstream
thanks

Hi,

On 06/23/2015 11:06 AM, Ximin Luo wrote:
> On 23/06/15 03:42, Dhole wrote:
>>
>> While working on the “reproducible builds” effort [1], we have noticed
>> that apt-dater could not be built reproducibly.
>>
> 
> Hi,
> 
> Please see https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal
> 
> We decided to standardise SOURCE_DATE_EPOCH for this sort of thing. help2man(1) already supports it, see #787444. At some point we will get debhelper to set this automatically.
> 
> I haven't looked at the patch, but I imagine it should be straightforward to s/BUILD_DATE/SOURCE_DATE_EPOCH.

I've changed the sources to use SOURCE_DATE_EPOCH has reference. The
string embedded into the version info is build using the reference
timestamp in UTC. Maybe there should be a SOURCE_DATE_UTC build from
SOURCE_DATE_EPOCH using `date ... -u` since RFC2822 contains a timezone
making reproducible builds hard.

$ date -d "$(dpkg-parsechangelog --count 1 -SDate)"
Tue Jun 16 11:43:42 CEST 2015
$ export SOURCE_DATE_EPOCH=$(date -d "$(dpkg-parsechangelog --count 1
-SDate)" +%s)
$ date -d @$SOURCE_DATE_EPOCH -u
Tue Jun 16 09:43:42 UTC 2015
$ ./src/apt-dater -v
apt-dater 1.0.2 - Tue Jun 16 09:43:42 UTC 2015


The upstream part is fine but adding SOURCE_DATE_EPOCH in debian/rules
ist still missing.


HTH,
Thomas
(upstream)

-- 
support at ibh.de                              Tel. +49 351 477 77 30
www.ibh.de                                  Fax  +49 351 477 77 39

-----------------------------------------------------------------------
Dipl.-Ing. Thomas Liske
Netzwerk- und System-Design


IBH IT-Service GmbH                         Amtsgericht Dresden
Gostritzer Str. 67a                         HRB 13626
D-01217 Dresden                             GF: Prof. Dr. Thomas Horn
Germany                                     VAT DE182302907
-----------------------------------------------------------------------
Ihr Partner für: LAN, WAN IP-Quality, Security, VoIP, SAN, Backup, USV
-----------------------------------------------------------------------
       professioneller IT-Service - kompetent und zuverlässig
-----------------------------------------------------------------------

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 223 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/reproducible-builds/attachments/20150626/21096d58/attachment.sig>