Your message dated Thu, 25 Feb 2016 10:06:19 +0000 with message-id <e1ayson-0002r9...@franck.debian.org> and subject line Bug#815716: fixed in pairs 4:15.04.3-1 has caused the Debian Bug report #815716, regarding pairs: please make the build reproducible (username) to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 815716: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=815716 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: pairs Version: 4.14.1 Severity: wishlist Tags: patch User: reproducible-bui...@lists.alioth.debian.org Usertags: username Hi! While working on the “reproducible builds” effort [1], we have noticed that pairs could not be built reproducibly. The attached patch removes extra timestamps from the build system and ensure a stable file order when creating the source archive. Once applied, pairs can be built reproducibly in our current experimental framework. [1]: https://wiki.debian.org/ReproducibleBuilds -- System Information: Debian Release: stretch/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.3.0-1-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system)diff -Nru pairs-4.14.1/debian/changelog pairs-4.14.1/debian/changelog --- pairs-4.14.1/debian/changelog 2014-09-17 00:44:43.000000000 -0700 +++ pairs-4.14.1/debian/changelog 2016-02-23 11:38:38.000000000 -0800 @@ -1,3 +1,10 @@ +pairs (4:4.14.1-1.0~reproducible1) UNRELEASED; urgency=medium + + * Add --owner=root --group=root --numeric-owner to tar command line + patch to make package build reproducibly. + + -- Scarlett Clark <sgcl...@kubuntu.org> Tue, 23 Feb 2016 11:35:26 -0800 + pairs (4:4.14.1-1) unstable; urgency=medium * New upstream release (4.14.1). diff -Nru pairs-4.14.1/debian/patches/series pairs-4.14.1/debian/patches/series --- pairs-4.14.1/debian/patches/series 1969-12-31 16:00:00.000000000 -0800 +++ pairs-4.14.1/debian/patches/series 2016-02-23 13:12:06.000000000 -0800 @@ -0,0 +1 @@ +update_tar_flags_reproducibility_timestamps.diff diff -Nru pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff --- pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff 1969-12-31 16:00:00.000000000 -0800 +++ pairs-4.14.1/debian/patches/update_tar_flags_reproducibility_timestamps.diff 2016-02-23 13:09:07.000000000 -0800 @@ -0,0 +1,18 @@ +Description: Add --owner=root --group=root --numeric-owner to tar command line. + To fix buid reproducibility. +Forwarded: TBD +Author: Scarlett Clark <sgclark-gu...@users.alioth.debian.org> + +diff --git a/themes/CMakeLists.txt b/themes/CMakeLists.txt +index fa3ae67..8597ccb 100644 +--- a/themes/CMakeLists.txt ++++ b/themes/CMakeLists.txt +@@ -47,7 +47,7 @@ function(create_theme _baseName) + else(WIN32) + add_custom_command(OUTPUT ${_template} + COMMAND tar ARGS cjf +- ${_template} ${_files} ++ ${_template} --owner=root --group=root --numeric-owner ${_files} + DEPENDS "${CMAKE_CURRENT_SOURCE_DIR}/${_baseName}" + WORKING_DIRECTORY "${CMAKE_CURRENT_SOURCE_DIR}/${_baseName}" + )
--- End Message ---
--- Begin Message ---Source: pairs Source-Version: 4:15.04.3-1 We believe that the bug you reported is fixed in the latest version of pairs, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 815...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Maximiliano Curia <m...@debian.org> (supplier of updated pairs package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Feb 2016 09:53:07 +0100 Source: pairs Binary: pairs Architecture: source Version: 4:15.04.3-1 Distribution: unstable Urgency: medium Maintainer: Debian/Kubuntu Qt/KDE Maintainers <debian-qt-kde@lists.debian.org> Changed-By: Maximiliano Curia <m...@debian.org> Description: pairs - memory and pairs game Closes: 815716 Changes: pairs (4:15.04.3-1) unstable; urgency=medium . * New upstream release (15.04.1). * New upstream release (15.04.2). * New upstream release (15.04.3). . [ Scarlett Clark ] * Add --owner=root --group=root --numeric-owner to tar command line patch to make package build reproducibly. (Closes: #815716) . [ Maximiliano Curia ] * Bump Standards-Version to 3.9.7, no changes needed. Checksums-Sha1: 170726e6ab57ae1a2cd8d4d9061557beb303e6b8 2020 pairs_15.04.3-1.dsc 796a6c8e0c2de3408cee08f3d268cdeec9b2ebd3 2819460 pairs_15.04.3.orig.tar.xz 752c2d6658831508988b4d50a4725745fe588379 3996 pairs_15.04.3-1.debian.tar.xz Checksums-Sha256: 0a7b676fcb987e6a7651c5e1bf364304635ff0113062d8a9bee6c763cf230693 2020 pairs_15.04.3-1.dsc 3bd9c33a74475201feb3ced58bb3777610c42d1ea720cb36543c0b94a1eaf5df 2819460 pairs_15.04.3.orig.tar.xz 97f9f995dc5cfee0f855b4c537070f26c215386a325615b66d5a813a684cc746 3996 pairs_15.04.3-1.debian.tar.xz Files: e05cc36177786aaeb55f00c50e1de34a 2020 kde optional pairs_15.04.3-1.dsc 7b045da2cdb4134a0fdda8f321d9346a 2819460 kde optional pairs_15.04.3.orig.tar.xz 9cee40c7671ed4b5eb0803288782e4cf 3996 kde optional pairs_15.04.3-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCgAGBQJWzsE2AAoJEMcZdpmymyMqcRMP/1hh23u/M12MdtDsygmX7S3v fV4443nvhC/QIELHnGrcOxSbiDmoVzrDKweFvIu6HYD32UGJAP52PCadoo7L7eyG /k8Tu+vge02+rnFqQ8ieo7Ud1N+VK3mdhKoi0Lnl5poSLJsnqua891MgzinTiLTp h+WfMQbsFCrsRvIs/DWEXg43NCffakldDHlJj3rJ0VoBNp6ItLEE2kZfoKudLQOu ZaWNEoAazW8QO7Ha7hUor3zIVGNejVFj9ClET2sDPK1amIx1AZV2KWyRqHg8vVtp WX0HgBryh2ABbXnZe/ld6lziassRQFOKSShFytPlZIF4RYjzY9rBy+pUu+Qz1Ab4 lryC2P2XNliNDw09009D2AJUrtBo0jcK4OZCDdmo42r/N2hIjwKyb3jbfBaRgqts R2acx5ZEV/ZQrG2XvpwbWWAWKY8M9vdTzc5QTLw6pAR2g9Du9LSSDHuxzKlm1mHX daZ4LVg7Z7d+QdJefpUkeG/oDaDuX2SQieIbWBL/Dlc06OqrCaS2hhRdMoy1u176 B+vT5wnTqAT6UJebME3W75r1yHnbPkI9DRydG1Z+tZaa6vPUvlPVnUUKSxztaWmc vkDwXiO+K6NfQZVCmvdPjyIN2UwaT6NiBhbByvZ8Ue3TtL9WfhKmofveQgbxTMAx a/UgarrkOCThPTNRiQUv =ZJel -----END PGP SIGNATURE-----
--- End Message ---
