FS#69451 - [transmission-cli] Build against system libraries, make it reproducible

Attached to Project: Arch Linux
Opened by Emil (xexaxo) - Wednesday, 27 January 2021, 12:46 GMT
Last edited by Antonio Rojas (arojas) - Thursday, 10 February 2022, 22:35 GMT
Task Type Bug Report
Category Packages: Extra
Status Closed
Assigned To Florian Pritz (bluewind)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Tl;Dr: Please rebuild the package with system libnatpmp, miniupnpc. It will make it smaller and reproducible.

Transmission like many other projects, can bundle with third-party libraries statically linked in.
Going through the list [1]:
* dht - no pkg, don't bother
* libb64 - has pkg, don't bother - their git repo seems to vary!
* libevent - using pkg, yay
* libnatpmp - has pkg, use it?
* libutp - no pkg, don't bother
* miniupnpc - has pkg, use it?

Bonus points: using the built-in "miniupnpc" results in the package not being reproducible. In particular:
-User-Agent: Linux/5.7.9-arch1-1, UPnP/1.1, MiniUPnPc/2.0
+User-Agent: Linux/5.9.11-arch2-1, UPnP/1.1, MiniUPnPc/2.0


[1] https://github.com/transmission/transmission/.gitmodules

Additional info:
* package version(s) - 3.00-2


Steps to reproduce:
* rebuild package, with "libnatpmp miniupnpc" in depends(),
* confirm it's using the system libraries - objdump -x /usr/bin/transmission-cli | grep -w NEEDED | grep -wE "libnatpmp|libminiupnpc"
* confirm package is reproducible
This task depends upon

Closed by  Antonio Rojas (arojas)
Thursday, 10 February 2022, 22:35 GMT
Reason for closing:  Fixed
Additional comments about closing:  transmission 3.00-3
Comment by Emil (xexaxo) - Wednesday, 27 January 2021, 12:50 GMT
Small correction (thanks jelle) - actual .gitmodules URL is:
https://github.com/transmission/transmission/blob/master/.gitmodules

Loading...