On 2022-04-28, Chris Lamb wrote: >> Version: 4.6.2.7+dfsg-2 >> >> It looks like this was fixed some time ago: >> >> 84aa977e3d2275a8cc43e21398dc90d01fb21b04 >> Sort dh_makeclilibs output so it's deterministic. Thanks to Chris Lamb > > Interesting. I don't see this commit SHA in the cli-common.git > repository, nor some associated change in dh_makeclilibs under a > different SHA.
https://salsa.debian.org/dotnet-team/mono/-/commit/84aa977e3d2275a8cc43e21398dc90d01fb21b04 Was this functionality moved to cli-common somehow? > But whatever the historical Git archaeology, the bug is still > affecting packages — de4dot, for example. Looking at the history of de4dot, it seems consistantly reproducible on amd64 and arm64, but consistantly unreproducible on i386 and armhf: https://tests.reproducible-builds.org/debian/history/amd64/de4dot.html https://tests.reproducible-builds.org/debian/history/i386/de4dot.html So the obvious difference here is 32-bit vs. 64-bit... a non-obvious difference is choice of locale for each architecture for tests.reproducible-builds.org infrastructure differs. Looking at the history for the originally referenced gtk-sharp-beans is a little less consistant, but still more frequently unreproducible on i386/armhf: https://tests.reproducible-builds.org/debian/history/amd64/gtk-sharp-beans.html https://tests.reproducible-builds.org/debian/history/i386/gtk-sharp-beans.html > Hope we can get this resolved soon. If it helps, a simpler patch might > even be: > > @@ -187,7 +187,7 @@ foreach my $package (@{$dh{DOPACKAGES}}) { > if (defined($dh{EXCLUDE_FIND}) && $dh{EXCLUDE_FIND} ne '') { > $exclude = "! \\( $dh{EXCLUDE_FIND} \\) "; > } > - open(FIND, "find $tmp -type f \\( -name '*.dll' \\) $exclude |"); > + open(FIND, "find $tmp -type f \\( -name '*.dll' \\) $exclude | > sort |"); > > dll: > while (<FIND>) { I wonder if you wouldn't also want to specify the locale to sort here? live well, vagrant
signature.asc
Description: PGP signature