#827115 netpbm: please honour SOURCE_DATE_EPOCH to allow reproducible output

Package:
netpbm
Source:
netpbm-free
Description:
Graphics conversion tools between image formats
Submitter:
Alexis Bienvenüe
Date:
2024-12-22 06:45:02 UTC
Severity:
wishlist
Tags:
#827115#5
Date:
2016-06-12 12:41:24 UTC
From:
To:
Dear Maintainer,

While working on the "reproducible builds" effort [1], we have noticed
that some packages (like latex2html) use one of the netpbm utilities in
their process, leading to unreproducible output (due to the use of the
random generator, seeded from a time() call).

To solve this kind of issues, it would be nice to make netpbm support
the SOURCE_DATE_EPOCH environment variable [2].

See the attached patch for a proposed solution.

Regards,
Alexis Bienvenüe.

[1] https://wiki.debian.org/ReproducibleBuilds
[2] https://reproducible-builds.org/specs/source-date-epoch/

#827115#12
Date:
2022-04-07 05:37:37 UTC
From:
To:
Hi,

thanks a lot for your effort to enable reproducible builds, which I
really like to support.  Unfortunately your patch remained unapplied
by the Maintainers of this package.  I recently moved the package to
the Debian Phototools team and try to have a look *from time to time*
(=I do not feel like a responsible Uploader due to time constraints
but I'd volunteer to do team uploads for reasons I consider important
and reproducible builds belong to this.)

I tried to apply your patch to the latest upstream version which I just
uploaded.  Unfortunately every single chunk of the patch is rejected.  I
had a quick look and realised that the code changed in a way that it is
really hard to adapt the patches and I gave up.  I'd happily upload a
package quickly if you could come up with a new patch.  Feel free to
ping me about this.

Kind regards
   Andreas.

#827115#21
Date:
2024-12-21 16:34:58 UTC
From:
To:
Latex2html uses "pnmquant -norandom" (since v2021.2),
so this bug no longer affects latex2html.

#827115#26
Date:
2024-12-22 06:44:10 UTC
From:
To:
Control: affects 827115 - latex2html

Thanks for the heads-up.

cu Andreas