Source: debian-keyring Version: 2016.01.20 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: fileordering X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
Hi! While working on the “reproducible builds” effort [1], we have noticed that debian-keyring could not be built reproducibly. The attached patch fix the order of files in md5sums. Once applied, debian-keyring can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds Thank you! Satyam Zode PICT, Pune
diff -Nru debian-keyring-2015.04.10/debian/changelog debian-keyring-2015.04.10.0~reproducible1/debian/changelog --- debian-keyring-2015.04.10/debian/changelog 2015-04-10 14:53:32.000000000 +0530 +++ debian-keyring-2015.04.10.0~reproducible1/debian/changelog 2016-03-13 23:59:02.000000000 +0530 @@ -1,3 +1,9 @@ +debian-keyring (2015.04.10.0~reproducible1) UNRELEASED; urgency=medium + + * Made debian-keyring reproducible + + -- Satyam Zode <satyamz...@gmail.com> Sun, 13 Mar 2016 23:57:03 +0530 + debian-keyring (2015.04.10) unstable; urgency=medium [ Gunnar Wolf ] diff -Nru debian-keyring-2015.04.10/debian/rules debian-keyring-2015.04.10.0~reproducible1/debian/rules --- debian-keyring-2015.04.10/debian/rules 2015-03-31 04:23:17.000000000 +0530 +++ debian-keyring-2015.04.10.0~reproducible1/debian/rules 2016-03-14 00:01:43.000000000 +0530 @@ -53,7 +53,8 @@ chown -R root.root debian/tmp chmod -R go=rX debian/tmp - cd debian/tmp && find . -type f ! -regex '.*DEBIAN/.*' -printf '%P\0' | xargs -r0 md5sum > DEBIAN/md5sums + cd debian/tmp && find . -type f ! -regex '.*DEBIAN/.*' -printf '%P\0' | \ + LC_ALL=C sort -z | xargs -r0 md5sum > DEBIAN/md5sums find debian/tmp -depth -newermt '$(BUILD_DATE)' -print0 | \ xargs -0r touch --no-dereference --date='$(BUILD_DATE)'