#1144480 qgis regressed in reproducibility

#1144480#5
Date:
2026-08-15 17:43:32 UTC
From:
To:
Hi,

src:qgis in unstable can't migrate to testing because the QA
infrastructure couldn't reproduce the some binary packages in
unstable while it could reproduce the version in testing [1, 2].

From the diff it looks like some randomness is compiled in, maybe due to
some auto generated source code? Based on the diff to -1 it could also
be in some other package.

Feel free to reach out if you need help debugging the problem but I
assume it will not be easy. Alternatively you can ask the release team
for an exception [3].

Cheers Jochen


[1] https://qa.debian.org/excuses.php?package=qgis
[2] https://lists.debian.org/debian-devel-announce/2026/05/msg00001.html
[3] https://lists.debian.org/debian-devel/2026/05/msg00383.html

#1144480#10
Date:
2026-08-15 17:50:50 UTC
From:
To:
AFAIK qgis has never been reproducible.

It's also big and takes far too long to build making troubleshooting a PITA.

glibc is my suspect.

You're welcome to spend time trying to fix the reproducibility regression, I was already planning to contact the RT after glibc migrates.

Kind Regards,

Bas

#1144480#15
Date:
2026-08-15 18:19:25 UTC
From:
To:
* Sebastiaan Couwenberg <sebastic@xs4all.nl> [2026-08-15 19:50]:
independently. That's why it states:

Migration status for qgis (3.44.13+dfsg-1 to 3.44.13+dfsg-2): BLOCKED: Rejected/violates migration policy/introduces a regression
Issues preventing migration:
∙ ∙ Piuparts regression - https://piuparts.debian.org/sid/source/q/qgis.html
∙ ∙ Reproducibility regression on arm64: libqgis-app3.44.13, libqgis-gui3.44.13
∙ ∙ Reproducibility regression on armhf: libqgis-core3.44.13
∙ ∙ Reproducibility regression on i386: libqgis-app3.44.13
∙ ∙ Missing build on riscv64
∙ ∙ Lintian check waiting for test results on riscv64 - info
∙ ∙ Too young, only 3 of 5 days old
∙ ∙ Depends: qgis glibc
Additional info (not blocking):
∙ ∙ Updating qgis will fix bugs in testing: #1143800
∙ ∙ Not reproduced on amd64 (not a regression): python3-qgis-common

I.e. it is reproducible in testing except for python3-qgis-common.

#1144480#20
Date:
2026-08-16 09:22:01 UTC
From:
To:

#1144480#25
Date:
2026-08-16 12:49:08 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
qgis, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1144480@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Bas Couwenberg <sebastic@debian.org> (supplier of updated qgis package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 16 Aug 2026 13:02:36 +0200
Source: qgis
Architecture: source
Version: 3.44.13+dfsg-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GIS Project <pkg-grass-devel@lists.alioth.debian.org>
Changed-By: Bas Couwenberg <sebastic@debian.org>
Closes: 1144480
Changes:
 qgis (3.44.13+dfsg-3) unstable; urgency=medium
 .
   * Disable QML Ahead-Of-Time compilation to improve reproducibility.
     (closes: #1144480)
Checksums-Sha1:
 4ab1918f0a7c28ef0b3209e5c683a3c175529fbc 5365 qgis_3.44.13+dfsg-3.dsc
 dcd3f819a83422b8b278e677e72dee93f366709c 136808 qgis_3.44.13+dfsg-3.debian.tar.xz
 49e614bad49d8012dc191c9b1fa257b015dd0347 44490 qgis_3.44.13+dfsg-3_amd64.buildinfo
Checksums-Sha256:
 4536dde33791d2a9ea1e0e4a99a529c7e3b080dd38bcc0554b0abdc146bb93f6 5365 qgis_3.44.13+dfsg-3.dsc
 8e107c96420edf9cdfe01e8c8471a7e3be5900679a30487135c46a52c4dad0d2 136808 qgis_3.44.13+dfsg-3.debian.tar.xz
 10f72006282ab3ed4e8b4627b84522a25dba223ee9bf9d604611c16c3280d1be 44490 qgis_3.44.13+dfsg-3_amd64.buildinfo
Files:
 bf7b2670f4c3a1ef07828878cf584636 5365 science optional qgis_3.44.13+dfsg-3.dsc
 e133bdc94bc42591dc416d52a8045baf 136808 science optional qgis_3.44.13+dfsg-3.debian.tar.xz
 33334ac8cb38f9f20773b1f4b27235f1 44490 science optional qgis_3.44.13+dfsg-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=Ma1Y
-----END PGP SIGNATURE-----

#1144480#30
Date:
2026-08-17 08:50:16 UTC
From:
To:
That didn't resolve the issue:

  Reproducibility regression on arm64: libqgis-app3.44.13, libqgis-gui3.44.13, libqgis-server3.44.13
  Reproducibility regression on armhf: libqgis-3d3.44.13, libqgis-analysis3.44.13, libqgis-gui3.44.13

https://qa.debian.org/excuses.php?package=qgis

Kind Regards,

Bas