Source: xul-ext-monkeysphere Version: 0.8-1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: timestamps X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi, While working on the "reproducible builds" effort [1], we have noticed that xul-ext-monkeysphere could not be built reproducibly. The attached patch removes timezone-varying timestamps from the files compressed with zip. Once applied, xul-ext-monkeysphere can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds Regards, -- Dhole
diff -Nru xul-ext-monkeysphere-0.8/debian/changelog xul-ext-monkeysphere-0.8/debian/changelog --- xul-ext-monkeysphere-0.8/debian/changelog 2013-09-20 07:34:11.000000000 +0200 +++ xul-ext-monkeysphere-0.8/debian/changelog 2015-08-05 19:22:42.000000000 +0200 @@ -1,3 +1,11 @@ +xul-ext-monkeysphere (0.8-1.1) UNRELEASED; urgency=medium + + * Non-maintainer upload. + * add TZ=UTC before zip in Makefile to make the files mtime + invariant to timezone to make the package build reproducibly. + + -- Eduard Sanou <dh...@openmailbox.org> Wed, 05 Aug 2015 19:21:53 +0200 + xul-ext-monkeysphere (0.8-1) unstable; urgency=low * New Upstream Release (Closes: #720600) thanks Kristian Fiskerstrand! diff -Nru xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch --- xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch 1970-01-01 01:00:00.000000000 +0100 +++ xul-ext-monkeysphere-0.8/debian/patches/fix_timezone.patch 2015-08-05 19:23:23.000000000 +0200 @@ -0,0 +1,22 @@ +Description: Fix timezone in zip + . + xul-ext-monkeysphere (0.8-1.1) UNRELEASED; urgency=medium + . + * Non-maintainer upload. + * add TZ=UTC before zip in Makefile to make the files mtime + invariant to timezone to make the package build reproducibly. +Author: Eduard Sanou <dh...@openmailbox.org> + +--- + +--- xul-ext-monkeysphere-0.8.orig/Makefile ++++ xul-ext-monkeysphere-0.8/Makefile +@@ -12,7 +12,7 @@ ICONS = $(addprefix chrome/content/, bro + VERSION = $(shell head -n1 Changelog | sed -e 's/^.*(//' -e 's/).*$$//') + + monkeysphere.xpi: $(XPI_CONTENTS) $(ICONS) +- zip $@ $(XPI_CONTENTS) $(ICONS) ++ TZ=UTC zip $@ $(XPI_CONTENTS) $(ICONS) + + install.rdf: install.rdf.template Changelog + sed 's/__VERSION__/$(VERSION)/' < $< > $@ diff -Nru xul-ext-monkeysphere-0.8/debian/patches/series xul-ext-monkeysphere-0.8/debian/patches/series --- xul-ext-monkeysphere-0.8/debian/patches/series 1970-01-01 01:00:00.000000000 +0100 +++ xul-ext-monkeysphere-0.8/debian/patches/series 2015-08-05 19:22:56.000000000 +0200 @@ -0,0 +1 @@ +fix_timezone.patch
signature.asc
Description: OpenPGP digital signature