Your message dated Fri, 01 Jan 2016 18:04:24 +0000
with message-id <e1af43s-0007oh...@franck.debian.org>
and subject line Bug#805321: fixed in debian-installer 20160101
has caused the Debian Bug report #805321,
regarding debian-installer: builds unreproducible netboot images
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
805321: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805321
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: debian-installer
Version: 20150422
Severity: wishlist
Tags: patch
User: reproducible-bui...@lists.alioth.debian.org
Usertag: timestamps fileordering infrastructure
X-Debbugs-Cc: reproducible-bui...@lists.alioth.debian.org
X-Debbugs-Cc: debian-...@lists.debian.org
Hi!
The debian-installer package build produces netboot.tar.gz and
the mini.iso netboot install media. It doesn't do this in an easily
reproducible way:
* the d-i initrd/mfsroot is a filesystem image, having variable
mtime/ctime/atime timestamps from package build time;
* likewise in the generated mini.iso;
* netboot.tar.gz also has varying timestamps; the order of files
may also vary depending on the filesystem;
* likewise in the cd info tarball;
* likewise in the debian-installer-images tarball;
* all gzipped outfile files have a timestamp in the header.
I have a patch aimed at jessie-kfreebsd that should fix all of the
above. It should be possible to do the same in sid with much less
code, due to new GNU tar features and other reproducible builds work.
I've 'clamped' timestamps to be no later than the most recent
debian/changelog entry date. That way, the non-useful timestamps
from during the build are adjusted to a constant value. Older
timestamps, actually indicating how old a file is, are untouched.
The BUILD_DATE, actually the package version number, is unchanged.
Specifically on kfreebsd, the generated mfsroot is a ffs filesystem
having file atimes, and another timestamp in the filesystem superblock.
I intend to patch makefs so that it can clamp timestamps to a given
SOURCE_DATE_EPOCH.
Besides a file ordering issue in makefs, all output files including
netboot.tar.gz and mini.iso then seem to be reproducible for
jessie-kfreebsd, at least. :)
Regards,
--
Steven Chamberlain
ste...@pyro.eu.org
signature.asc
Description: Digital signature
--- End Message ---
--- Begin Message ---
Source: debian-installer
Source-Version: 20160101
We believe that the bug you reported is fixed in the latest version of
debian-installer, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 805...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Cyril Brulebois <k...@debian.org> (supplier of updated debian-installer package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.8
Date: Fri, 01 Jan 2016 18:46:41 +0100
Source: debian-installer
Binary: debian-installer
Architecture: source
Version: 20160101
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Cyril Brulebois <k...@debian.org>
Description:
debian-installer - Debian Installer documentation
Closes: 722735 789600 803711 805321 807716 808875 809301
Changes:
debian-installer (20160101) unstable; urgency=medium
.
[ Karsten Merker ]
* Provide u-boot and SD-card images for the LinkSprite pcDuino.
.
[ Cyril Brulebois ]
* Adjust p-u support to handle file:// instead of (f|ht)tp:// only,
thanks to Łukasz Stelmach for both the report and the patch
(Closes: #803711).
.
[ Samuel Thibault ]
* Bump hurd kernel version.
* Prevent spurious speech synthesis boot entry.
.
[ Vagrant Cascadian ]
* bootscr.mainline_common: Prefer newer u-boot distro_bootpart variable.
.
[ Cyril Brulebois ]
* Cherry-pick the following changes by Steven Chamberlain from the
jessie-kfreebsd branch.
* build/Makefile: Rename GZIP into gzip, and pass an extra -T to pigz
(it needs both -n and -T to behave as gzip's -n).
* build/config/x86.cfg: Also pass -n to gzip.
* Bump linux kernel version from 4.2.0-1 to 4.3.0-1
* Replace the module-init-tools build-dep with a kmod one since the
transitional package got dropped in kmod/22-1.
* Apply patch from gregor herrmann to fix new warnings with perl 5.22
(Closes: #808875). Thanks!
* Update copyright years on the F10 help screen.
* Update translation-status for the release.
.
[ Steven Chamberlain ]
* Improve reproducibility of debian-installer netboot images
(Closes: #805321):
* Add a new utility build/util/gen-tarball to make reproducible
tarballs, and use it for:
- netboot.tar.gz
- debian-cd_info.tar.gz
- the overall debian-installer-images tar.gz file.
* Inhibit gzip timestamp in initrd.gz
* Ensure SOURCE_DATE_EPOCH is exported throughout the build system,
define it if unset, or fall back to 'now' if build/Makefile is
directly invoked.
.
[ Steve McIntyre ]
* Add the part_gpt module into the core grub image to make it easier
for users doing slightly different things with our images; include
support for GPT partition tables as well as msdos (Closes: #789600).
.
[ Ben Hutchings ]
* Include leds-modules on armhf if available
* Update i386 config to use 686 kernel flavour instead of 586
.
[ Martin Michlmayr ]
* Update docs to reflect that Package-Type and Installer-Menu-Item
are official fields nowadays (Closes: #807716).
* Remove minix-modules from the orion5x network-console image since
it was only required by the D-Link DNS-323, a device that's no longer
supported.
* Exclude usb-serial-modules from the armel network-console image
since it's not useful there (Closes: #809301).
* Exclude usb-modules explicitly on armel/orion5x network-console
to work around a bug in util/pkg-list.
* Stop including sata and ext2/ext3 modules on the armel/orion5x
network-console image due to size limitations on QNAP TS-x09.
* Drop the file extension from the initrd for QNAP devices.
* Re-introduce installer images for QNAP TS-x09.
* Recognize /dev/disk1_1 and /dev/ls_disk1_1 as boot devices
on Linkstation. Thanks Roger Shimizu (Closes: 722735).
.
[ John Paul Adrian Glaubitz ]
* Set KERNELVERSION for sparc64 to $(LINUX_KERNEL_ABI)-sparc64.
* Set KEYRING to debian-ports on sparc64.
* Add silo to Build-Depends on sparc64.
* Fix typo (problimatic -> problematic) in silo comment.
* Clone boot configuration files from sparc for sparc64.
Checksums-Sha1:
074a49d56a672decc393e828d9dbccba07401181 3434 debian-installer_20160101.dsc
1e62df10d9e2b81b56e925e4f18a295129a724fa 1375522
debian-installer_20160101.tar.gz
Checksums-Sha256:
5a4e8ccfb5670bc3514a1c2f2acdca91f58c99efd2bde7ee38bb3eb2499d415a 3434
debian-installer_20160101.dsc
257c7a0d4c04486fce0ed46dd1a0d5441770b4f67ec93966e0ae64c7dd65644b 1375522
debian-installer_20160101.tar.gz
Files:
95fcf40227dbffcdf13ead8f3ceea1e3 3434 devel optional
debian-installer_20160101.dsc
ac785dca4dd335627e345c66bfc4ca88 1375522 devel optional
debian-installer_20160101.tar.gz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=HFIP
-----END PGP SIGNATURE-----
--- End Message ---
