A .lock file that is intended to be removed in debian/rules may still
get installed if the package build is performed in a non-default path.

Patch attached which uses a path-independent match to remove the .lock
file.

Build paths are currently normalized on buildd.debian.org and
reproducible builds infrastructure, as well as most high-level package
building tooling, so marking this as minor severity.

live well,
  vagrant

Hello,

Bug #1149639 in horizon reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/openstack-team/services/horizon/-/commit/5a25eda2c8f96f5fee2ce11cb4b18e37a6df6a55
fails to match when the package is built in a non-default path. Use a
path-independent match instead (Closes: #1149639). Thanks Vagrant
Cascadian for the bug report and the patch.
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1149639

We believe that the bug you reported is fixed in the latest version of
horizon, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149639@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Goirand <zigo@debian.org> (supplier of updated horizon package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Tue, 06 Oct 2026 21:36:53 +0200
Source: horizon
Architecture: source
Version: 3:27.0.0-3
Distribution: unstable
Urgency: medium
Maintainer: Debian OpenStack <team+openstack@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1149639
Changes:
 horizon (3:27.0.0-3) unstable; urgency=medium
 .
   * Fixed a reproducible-builds issue: the secret_key_store lock file was
     removed with a glob derived from the build path (_build*.lock), which
     fails to match when the package is built in a non-default path. Use a
     path-independent match instead (Closes: #1149639). Thanks Vagrant
     Cascadian for the bug report and the patch.
Checksums-Sha1:
 2068dcb9cc4bcfc217d33127a9952fbb2038cd12 4372 horizon_27.0.0-3.dsc
 b5d071551e60245685d96afd4231e51790f690a6 36416 horizon_27.0.0-3.debian.tar.xz
 74c7504f9e175b61c6ee82078a4cf2cf2393bbde 17464 horizon_27.0.0-3_amd64.buildinfo
Checksums-Sha256:
 05bae33f58a563fc8648e968597bac0d0a2760ca62d591f8aecb7979b75839b1 4372 horizon_27.0.0-3.dsc
 b195691e5066797a62ccfd8b6fde80c416348431edcec9fa33da9fa269fb7804 36416 horizon_27.0.0-3.debian.tar.xz
 935a0f2cfc1f78795a99650575f530d2a6959161fdd3d6741606e0bbea65e6ce 17464 horizon_27.0.0-3_amd64.buildinfo
Files:
 1db1e2efb150eb486bcb64e0e4838764 4372 net optional horizon_27.0.0-3.dsc
 d363a7617bca1b983027d46062ef6795 36416 net optional horizon_27.0.0-3.debian.tar.xz
 ac16ac7fe555558fcd4da962a939d17c 17464 net optional horizon_27.0.0-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=cMNu
-----END PGP SIGNATURE-----