On 2018-03-30 15:02 +0100, Chris Lamb wrote: > [adding 894441@ to CC] > > Hi Jean-Michel, > >> Filled as #894441 >> https://bugs.debian.org/894441 > > Thanks for this. I was just briefly wondering whether this is related to: > > https://lists.debian.org/debian-security/2017/05/msg00011.html
It seems so. What you are describing there had been noticed by Ian Jackson before: https://lists.debian.org/debian-devel/2016/11/msg00328.html Ian then filed bug #843773 against sbuild, and as a result sbuild (as of version 0.73.0-1) no longer reuses the timestamp of the last changelog entry in binNMUs. The same version of sbuild introduced a --binNMU-timestamp option, and I think wanna-build should use it to achieve a consistent SOURCE_DATE_EPOCH across architectures in binNMUs. Something along these lines had already been proposed in #843773. Cheers, Sven