#1140613 dpkg-genbuildinfo: record dpkg-deb compressor env vars in .buildinfo for reproducible rebuilds

Package:
dpkg-dev
Source:
dpkg-dev
Submitter:
Serge Schneider
Date:
2026-07-01 01:05:02 UTC
Severity:
normal
Tags:
#1140613#5
Date:
2026-06-23 14:11:35 UTC
From:
To:
Dear Maintainer,

If the build environments have different DPKG_DEB_COMPRESSOR_{TYPE,LEVEL}
environment variables, debrebuild fails with a checksum mismatch.

debrebuild sets the environment variables from the buildinfo file
Environment block and since these variables affect reproducibility of
the package, it would make sense to include them.

I've attached a patch that adds these variables to the allow list and
makes debrebuild 'just work' in this case.
It shouldn't affect the official buildinfo files or the resulting builds.

If this approach is not suitable for any reason, let me know and I'm happy
to rework it.

Many thanks,

Serge

#1140613#8
Date:
2026-07-01 01:02:13 UTC
From:
To:
Hi!

Bug #1140613 in package dpkg reported by you has been fixed in
the dpkg/dpkg.git Git repository. You can see the changelog below, and
you can check the diff of the fix at:

https://git.dpkg.org/cgit/dpkg/dpkg.git/diff/?id=f43fea3ca
These environment variables can modify the behavior of the dpkg-deb tool
affecting the generated binary packages and their reproducibility.

[guillem@debian.org:
 - Trim code comment, and reposition elements in the list.
 - Reword commit message. ]

Closes: #1140613
Signed-off-by: Guillem Jover <guillem@debian.org>