Source: fonts-stix Version: 1.1.1-3 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi, While working on the "reproducible builds" effort [1], we have noticed that fonts-stix could not be built reproducibly. The attached patch removes timezone-varying timestamps from the files extracted with unzip. Once applied, fonts-stix can be built reproducibly in our reproducible toolchain. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- Dhole
diff -Nru fonts-stix-1.1.1/debian/changelog fonts-stix-1.1.1/debian/changelog
--- fonts-stix-1.1.1/debian/changelog 2015-04-15 22:47:43.000000000 +0200
+++ fonts-stix-1.1.1/debian/changelog 2015-07-16 17:31:31.000000000 +0200
@@ -1,3 +1,11 @@
+fonts-stix (1.1.1-3.1) UNRELEASED; urgency=medium
+
+ * Non-maintainer upload.
+ * add TZ=UTC before unzip in debian/rules to make the files mtime
+ invariant to timezone to make the package build reproducibly.
+
+ -- Dhole <dh...@openmailbox.org> Thu, 16 Jul 2015 17:31:17 +0200
+
fonts-stix (1.1.1-3) unstable; urgency=low
* Upload to unstable.
diff -Nru fonts-stix-1.1.1/debian/rules fonts-stix-1.1.1/debian/rules
--- fonts-stix-1.1.1/debian/rules 2015-02-12 12:05:56.000000000 +0100
+++ fonts-stix-1.1.1/debian/rules 2015-07-16 17:31:06.000000000 +0200
@@ -8,6 +8,6 @@
override_dh_auto_configure:
mkdir build
- unzip $(CURDIR)/STIXv$(ver_base).zip -d build/ && rm -rf
'debian/Fonts/STIX-Word License/STIX Font License 2010.pdf'
- unzip -uo $(CURDIR)/STIXv$(ver_word)-word.zip -d build/
+ TZ=UTC unzip $(CURDIR)/STIXv$(ver_base).zip -d build/ && rm -rf
'debian/Fonts/STIX-Word License/STIX Font License 2010.pdf'
+ TZ=UTC unzip -uo $(CURDIR)/STIXv$(ver_word)-word.zip -d build/
dh_auto_configure
signature.asc
Description: OpenPGP digital signature
