Community Packages

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!
Tasklist

FS#65279 - [vegeta] make package reproducible

Attached to Project: Community Packages
Opened by Jelle van der Waa (jelly) - Sunday, 26 January 2020, 19:50 GMT
Last edited by Anatol Pomozov (anatolik) - Thursday, 06 February 2020, 17:33 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Jelle van der Waa (jelly)
Anatol Pomozov (anatolik)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

As can be seen in the reproducible test framework the date is embedded since the PKGBUILD generates a new date string for every build. To make it reproducible use SOURCE_DATE_EPOCH as can be seen on the reproducible builds website or for example:

-X github.com/cozy/cozy-stack/pkg/config.BuildTime=$(date --utc --date="@${SOURCE_DATE_EPOCH:-$(date +%s)}" +"%Y-%m-%dT%H:%M:%SZ") \


Steps to reproduce:

makerepropkg

https://tests.reproducible-builds.org/archlinux/community/vegeta/vegeta-12.7.0-4-x86_64.pkg.tar.xz.html
https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/vegeta#n27
https://reproducible-builds.org/docs/source-date-epoch/
This task depends upon

Closed by  Anatol Pomozov (anatolik)
Thursday, 06 February 2020, 17:33 GMT
Reason for closing:  Fixed
Additional comments about closing:  r563642
Comment by Anatol Pomozov (anatolik) - Sunday, 26 January 2020, 20:42 GMT
Jelle, the change looks good. Feel free to modify the PKGBUILD and push a new build.

Loading...