[Forwarding to BTS] ----- Original message ----- From: Arnout Engelen <arn...@bzzt.net> To: Chris Lamb <la...@debian.org> Subject: Re: Bug#846842: nethogs: please make the build reproducible Date: Fri, 23 Dec 2016 11:37:55 +0100
Hi Chris, First off, thanks for your efforts in making the builds more reproducible, this is an important topic. I'm the upstream nethogs author/maintainer, and I'd like to see if there's something more I can do to help. 'determineVersion.sh' indeed uses `pwd` (when building from outside git). Indeed in general leaking the full build path into the artifact seems like a bad idea (https://reproducible-builds.org/docs/build-path/). In this particular case, though, I only use the last segment of the path to determine the version. To me it doesn't sound unreasonable to consider the last segment of the build path part of the build environment (so I already consider the nethogs build 'reproducible' in that regard). Do you have any thoughts on that? Kind regards, Arnout On Sat, Dec 3, 2016 at 6:00 PM, Chris Lamb <la...@debian.org> wrote: > Source: nethogs > Version: 0.8.5-1 > Severity: wishlist > Tags: patch > User: reproducible-bui...@lists.alioth.debian.org > Usertags: builpath > X-Debbugs-Cc: reproducible-b...@lists.alioth.debian.org > > Hi, > > Whilst working on the Reproducible Builds effort [0], we noticed > that nethogs could not be built reproducibly. > > This is due to upstream's determineVersion.sh using the output > of "pwd". > > Patch attached. It overrides from debian/changelog. > > > [0] https://reproducible-builds.org/ Regards, -- ,''`. : :' : Chris Lamb `. `'` la...@debian.org / chris-lamb.co.uk `-
