Your message dated Wed, 09 Jul 2025 16:34:37 +0000
with message-id <e1uzxkj-00d5lc...@fasolo.debian.org>
and subject line Bug#1105119: fixed in python3.14 3.14.0~b4-1
has caused the Debian Bug report #1105119,
regarding python3.13: please enable deterministic LTO output
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1105119: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1105119
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: python3.13
Severity: wishlist
X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org
User: reproducible-bui...@lists.alioth.debian.org
Usertags: randomness
Dear Maintainer,
I'm an occasional volunteer contributor to the Reproducible Builds[1] project,
and noticed recently that python3.13 fails to build reproducibly according to
automated reproducibility testing[2] on Debian.
If I understand correctly, the packaging for src:python3.13 enables link-time
optimization (LTO) with fat link-time objects enabled (the -ffat-lto-objects
flag to GCC).
According to GCC bugreport[3] 66305, enabling this flag causes nondeterministic
output; and the bugthread also provides a potential workaround/resolution for
that, namely to enable the -frandom-seed GCC option[4].
Another detail from the thread is that GCC8 introduced a bug that meant that
the random seed value of zero caused the option to be ignored.
I would like to request that we enable the random-seed GCC option of one (1),
in order to enable deterministic (reproducible) link-time optimized object
files during the build of python3.13-related packages.
I _think_ the relevant line of code to adjust in the buildscript is found at:
https://salsa.debian.org/cpython-team/python3/-/blob/f04d169fe2dc39d34b7f983b17ae6a5190714cb6/debian/rules#L235
...however I also note that a subsequent line in the script may also require an
update, to consistently filter out LTO-related flags:
https://salsa.debian.org/cpython-team/python3/-/blob/f04d169fe2dc39d34b7f983b17ae6a5190714cb6/debian/rules#L244
I hope (but cannot guarantee) to find time to test this theory using a
triplicate set of builds; once without the adjustment applied (producing what I
expect to be a somewhat-random build output), then with two subsequent builds
with the random-seed enabled (to confirm whether those two additional builds
emit identical binary packages).
Regards,
James
[1] - https://reproducible-builds.org/
[2] -
https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/python3.13.html
[3] - https://gcc.gnu.org/bugzilla/show_bug.cgi?id=66305
[4] -
https://gcc.gnu.org/onlinedocs/gcc/Developer-Options.html#index-frandom-seed
--- End Message ---
--- Begin Message ---
Source: python3.14
Source-Version: 3.14.0~b4-1
Done: Stefano Rivera <stefa...@debian.org>
We believe that the bug you reported is fixed in the latest version of
python3.14, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1105...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stefano Rivera <stefa...@debian.org> (supplier of updated python3.14 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 08 Jul 2025 19:29:09 +0200
Source: python3.14
Architecture: source
Version: 3.14.0~b4-1
Distribution: experimental
Urgency: medium
Maintainer: Matthias Klose <d...@debian.org>
Changed-By: Stefano Rivera <stefa...@debian.org>
Closes: 1105119
Changes:
python3.14 (3.14.0~b4-1) experimental; urgency=medium
.
* Python 3.14.0 beta 4.
* Enable deterministic LTO output (Closes: #1105119)
Checksums-Sha1:
15b45f3f51c97536aa350844635326b90e9a0cce 3569 python3.14_3.14.0~b4-1.dsc
39668305b495a0d1a7a31475e3fb5c4ce0c10105 23641472
python3.14_3.14.0~b4.orig.tar.xz
98f3dc05ac2a7df44fe11a46c0c1cce98164138f 218688
python3.14_3.14.0~b4-1.debian.tar.xz
09e55aec8d0f16ef7ba905aadb0c825f7525220b 10410
python3.14_3.14.0~b4-1_source.buildinfo
Checksums-Sha256:
b9310153eb89ca8522da9248c2291eebe9d7fc7c069d9efd8310c717b03c6bea 3569
python3.14_3.14.0~b4-1.dsc
15e123e056abebba6de5e73cfa304459a8c82cafa85d4fc7fc6de80e6a3e1b39 23641472
python3.14_3.14.0~b4.orig.tar.xz
774c4e3d1cbfb455584e9d769bfcb49e6b9c5628a3a70292923cf7edf455619a 218688
python3.14_3.14.0~b4-1.debian.tar.xz
eecc64ce0fa6689a2c350544b1ee8ca9639ecc097ffdc46a3967f05ab06975c7 10410
python3.14_3.14.0~b4-1_source.buildinfo
Files:
56905970d9c1168a98afdc99cda9eb5d 3569 python optional
python3.14_3.14.0~b4-1.dsc
deed9d6e0eba630a5d085bb2df6f8da3 23641472 python optional
python3.14_3.14.0~b4.orig.tar.xz
dc40b1e434266844206f0103313e0dc5 218688 python optional
python3.14_3.14.0~b4-1.debian.tar.xz
7368172a194007847511f23178049e74 10410 python optional
python3.14_3.14.0~b4-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iIoEARYKADIWIQTumtb5BSD6EfafSCRHew2wJjpU2AUCaG6WwBQcc3RlZmFub3JA
ZGViaWFuLm9yZwAKCRBHew2wJjpU2DfJAP9ebDRgxmeJd5T4ldXbD6QfTi82mPmt
Hz1ENpD+FxqmuQEArF1B7rupU0Ntms/lUwAYGDzdNHAp0AdCAwSPu/IJYQw=
=Q17B
-----END PGP SIGNATURE-----
pgp98P0x16zjS.pgp
Description: PGP signature
--- End Message ---
