IOhannes m zmölnig (Debian GNU|Linux) <umlae...@debian.org> writes: > [[PGP Signed Part:Undecided]] > On 9/2/24 03:19, Jonathan Kamens wrote: >> However, the pipeline is still failing, now in reprotest. For >> example >> <https://salsa.debian.org/debian/apt-listchanges/-/jobs/6215633#L1650>. >> Perhaps >> this is because I haven't yet finalized the changelog for the >> upcoming release so the trailer line is badly formatted. :shrug: > > > > nope. > it's failing, because the .deb files are not identical. > if you do not want to run reprotest locally and still have a closer > look at the differences, you can download the build-artifacts (that > is: the .deb files produced by the job at [1]) and inspect them with > diffoscope, to see that the files in the tarballs have different > timestamps (which obviously makes them non-reproducible. > > note: this is just general advice, i haven't looked at the *actual* > package. > > gfmasdr > IOhannes > > > > [1] > <https://salsa.debian.org/debian/apt-listchanges/-/jobs/6215633/artifacts/download> > > [2. OpenPGP public key --- application/pgp-keys; > OpenPGP_0xB65019C47F7A36F8.asc]... > > [[End of PGP Signed Part]]
Actually you can customize the Salsa CI configuration to enable diffoscope directly[1] and the result will include the diffoscope report so that you don't have to set up diffoscope separately. [1] https://salsa.debian.org/salsa-ci-team/pipeline#customizing-reprotest -- Xiyue Deng
