FS#65149 - [frotz-dumb] make package reproducible

Attached to Project: Community Packages
Opened by Jelle van der Waa (jelly) - Wednesday, 15 January 2020, 11:51 GMT
Last edited by Ivy Foster (escondida) - Monday, 30 March 2020, 00:14 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Ivy Foster (escondida)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

As can be see in the test framework the build date is embedded in the dfrotz binary which makes the package not reproducible.

[1] https://tests.reproducible-builds.org/archlinux/community/frotz/frotz-dumb-2.50-1-x86_64.pkg.tar.xz.html

Steps to reproduce:

* Build the package twice and compare with diffoscope
* run make in the source, copy the output binary and make it again and compare.

Solution:

In the PKGBUILD give a BUILD_DATE argument to make to set a fixed build date using SOURCE_DATE_EPOCH when rebuilding.
Or send a patch upstream to support SOURCE_DATE_EPOCH in the makefile. [1]

https://reproducible-builds.org/docs/source-date-epoch/
This task depends upon

Closed by  Ivy Foster (escondida)
Monday, 30 March 2020, 00:14 GMT
Reason for closing:  Fixed
Additional comments about closing:  Fixed upstream & packaged in 2.51-1
Comment by Jelle van der Waa (jelly) - Wednesday, 15 January 2020, 11:59 GMT
Made an issue upstream https://gitlab.com/DavidGriffith/frotz/issues/189
Comment by Ivy Foster (escondida) - Monday, 30 March 2020, 00:14 GMT
Fixed upstream and packaged, verified on https://tests.reproducible-builds.org/archlinux/community.html

Loading...