Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-apptainer-sif could not be built reproducibly.

This was because debian/rules populated the "keys/" and "images/"
directories if the tests are run, but only cleaned up images/. This
means that if the tests are skipped, then the binary package will
have different contents.

A patch is attached that removes keys/ unconditionally, but if the binary
package really needs these files for some reason (eg. autopkgtests)
then the packaging will need rejigging/

 [0] https://reproducible-builds.org/


Regards,

We believe that the bug you reported is fixed in the latest version of
golang-github-apptainer-sif, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1122232@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Josefsson <simon@josefsson.org> (supplier of updated golang-github-apptainer-sif package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 01 Jun 2026 10:01:30 +0200
Source: golang-github-apptainer-sif
Architecture: source
Version: 2.24.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1122232
Changes:
 golang-github-apptainer-sif (2.24.0-1) unstable; urgency=medium
 .
   * Team upload
 .
   [ Simon Josefsson ]
   * Add gbp.conf
   * Add d/upstream/metadata
   * Drop Priority: optional
   * Drop Rules-Requires-Root: no
   * Standards-Version: 4.7.4
   * Use dh-sequence-golang
   * Bump debian/* copyright years
   * Use watch v5
   * Fix sigstore/sigstore test fail
   * Use Section:golang
   * Bump upstream copyright years
   * Mark golang-github-apptainer-sif-dev as Multi-Arch: foreign
   * Add missing golang-*-dev to Depends
   * Rewrite test/install rules
   * Silence lintian executable-not-elf-or-script
 .
   [ Chris Lamb ]
   * Make the build reproducible (Closes: #1122232)
Checksums-Sha1:
 7ad737858be50c5d4c64a227f03f5eb3efc73b2b 2780 golang-github-apptainer-sif_2.24.0-1.dsc
 a3dbc9e4a7ac327b09cb76d40732f97d23ea1d22 127880 golang-github-apptainer-sif_2.24.0.orig.tar.xz
 8bbeb4dd2578238b71553c610ed3690fd3f84a6a 3092 golang-github-apptainer-sif_2.24.0-1.debian.tar.xz
 01dc79b9d0d507d08ea771e9e151476df17fcf48 291716 golang-github-apptainer-sif_2.24.0-1.git.tar.xz
 7ad5715f587049d9529eaadc2a7110f6df1d2a28 17569 golang-github-apptainer-sif_2.24.0-1_source.buildinfo
Checksums-Sha256:
 93785af8702c2e3fed434cd723f5044b54307fd98afcb15ab3cda3d865c242bf 2780 golang-github-apptainer-sif_2.24.0-1.dsc
 a331cb4def07a2750d771ff29a8bb4f8fb4a3f72d55234086cf215571396dfb8 127880 golang-github-apptainer-sif_2.24.0.orig.tar.xz
 0da6b5683d326c64b578055e1781ac05a7dd2182494183cb66323e9ddd7d54bd 3092 golang-github-apptainer-sif_2.24.0-1.debian.tar.xz
 5db63d79c824efaf0bd705b638628107a921ed62c3f50c848b47cd5df222c0b9 291716 golang-github-apptainer-sif_2.24.0-1.git.tar.xz
 fd7065bfe70e1deb3e573f2b0b5607e1771cf2c374d252f6df59b0ccde29b7bb 17569 golang-github-apptainer-sif_2.24.0-1_source.buildinfo
Files:
 5b15d1d89b6ce5b7b03a54c5ab46d5e4 2780 golang optional golang-github-apptainer-sif_2.24.0-1.dsc
 9c38a8cffa19261fcfc238d073efae41 127880 golang optional golang-github-apptainer-sif_2.24.0.orig.tar.xz
 4526650e9aaf7e858d6c9fa0332270b4 3092 golang optional golang-github-apptainer-sif_2.24.0-1.debian.tar.xz
 f1ea1d8c2ddc03ec4a475b0c44f83d7c 291716 golang None golang-github-apptainer-sif_2.24.0-1.git.tar.xz
 9a811f3f945e029b1e7e06c6b3c6e574 17569 golang optional golang-github-apptainer-sif_2.24.0-1_source.buildinfo
Git-Tag-Info: tag=cc9b0dbda7553df83ef39bcde2295c3e73eadb54 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>
-----BEGIN PGP SIGNATURE-----
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=SoQ/
-----END PGP SIGNATURE-----