#1140400 rabbitmq-server: the package is not reproducible

#1140400#5
Date:
2026-06-19 15:06:43 UTC
From:
To:
Dear Maintainer,

As far as I can see from the page with testing migration excuses for
rabbitmq-server, it is blocked because it's unreproducible. Ans the
culprit is the code which generates the list of modules for the
rabbitmq_cli application. Their order is not fixed every time
the package is built. This application is then packed inside
the rabbitmq-diagnostics binary file, which becomes unreproducible.

The attached patch to erlang.mk just sorts the list of modules,
which is sufficient to make rabbitmq-server reproducible.

Cheers!

#1140400#8
Date:
2026-06-22 06:40:25 UTC
From:
To:
Hello,

Bug #1140400 in rabbitmq-server reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/openstack-team/rabbitmq/rabbitmq-server/-/commit/bf9b88574cb923a64e55251b3caa894bdcd66b39
------------------------------------------------------------------------
* Make package reproducible, thanks to Sergei Golovan <sgolovan@debian.org>
    (Closes: #1140400).
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1140400

#1140400#15
Date:
2026-06-22 07:35:12 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
rabbitmq-server, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1140400@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Goirand <zigo@debian.org> (supplier of updated rabbitmq-server package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 22 Jun 2026 08:24:57 +0200
Source: rabbitmq-server
Binary: rabbitmq-server
Architecture: source all
Version: 4.3.2-3
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Description:
 rabbitmq-server - AMQP server written in Erlang
Closes: 1140400
Changes:
 rabbitmq-server (4.3.2-3) unstable; urgency=medium
 .
   * Make package reproducible, thanks to Sergei Golovan <sgolovan@debian.org>
     (Closes: #1140400).
Checksums-Sha1:
 c4a21473bfd23027c662dedab2d940b1190e3d90 2708 rabbitmq-server_4.3.2-3.dsc
 e1b58729a6e7fc32e9fce4ec8981e62b7c63fae0 47580 rabbitmq-server_4.3.2-3.debian.tar.xz
 7e4a5e9e779ea002f67e10acf440641e17450a9c 23867968 rabbitmq-server_4.3.2-3_all.deb
 22240c25626c7bc9a76efe49456a75d569aa497f 8868 rabbitmq-server_4.3.2-3_amd64.buildinfo
Checksums-Sha256:
 cec9edfffcf2a8200a7e81831d95594258d3a1423d5ebd833e8bccf372553377 2708 rabbitmq-server_4.3.2-3.dsc
 0bdf50d5e789acde8b3c05f8952d12b6047ab9a0948b2c995760de714a4d889c 47580 rabbitmq-server_4.3.2-3.debian.tar.xz
 d39ebb4ef779916cfbcb9b6e672b3b3b543eb3b53ae8745effd975b48355f3f3 23867968 rabbitmq-server_4.3.2-3_all.deb
 c836e4b066b063ceda146360e69a0827e84f057addf4a1a2fb41d686201b1bdc 8868 rabbitmq-server_4.3.2-3_amd64.buildinfo
Files:
 b88b5a715062464128dd1fc8cafd1e57 2708 net optional rabbitmq-server_4.3.2-3.dsc
 6d18ad2cad2be05acee293b41141f2cb 47580 net optional rabbitmq-server_4.3.2-3.debian.tar.xz
 372c816938a78c5cedee5870d2f5c534 23867968 net optional rabbitmq-server_4.3.2-3_all.deb
 933384f20dc98825b7b224a02aa029ed 8868 net optional rabbitmq-server_4.3.2-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=pr/v
-----END PGP SIGNATURE-----