#995886 cxref: reproducible builds: Embedded timestamps in .dvi and .ps files

Package:
src:cxref
Source:
cxref
Submitter:
Vagrant Cascadian
Date:
2022-07-12 21:06:05 UTC
Severity:
normal
Tags:
#995886#5
Date:
2021-10-07 17:01:01 UTC
From:
To:
The build timestamp is embedded in various .dvi and .ps files:

https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope-results/cxref.html

  /usr/share/doc/cxref/README.ps.gz

  %DVIPSSource:··TeX·output·2021.09.14:1340
vs.
  %DVIPSSource:··TeX·output·2022.10.18:2205

The attached patch fixes this by setting FORCE_SOURCE_DATE=1 in
debian/rules, which texlive needs in order to respect SOURCE_DATE_EPOCH,
which is set during debian package builds to the timestamp in the latest
debian/changelog entry.

https://reproducible-builds.org/docs/source-date-epoch/

There are other reproducibility issues for cxref(build paths and
usrmerge), so this patch alone will not make cxref reproducible, but
should reduce the overall reproducibility diff, making it easier to
troubleshoot remaining issues.


Thanks for maintaining cxref!


live well,
  vagrant
#995886#10
Date:
2022-07-04 19:22:43 UTC
From:
To:
Hi,

I intend to nmu cxref with fixes for the reproducibility issues. This
would close #995886, #995896, #995953 and #995954.

I prepared a version at https://mentors.debian.net/package/cxref/.
I do have a sponsor for the upload already and plan to upload it to
DELAYED/14.

If you have any doubts about the nmu, please just cancel the upload.

Best,
Philip
#995886#15
Date:
2022-07-05 21:31:12 UTC
From:
To:
Hi,

I forgot to attach the nmudiff here, so let's do it now.

Best,
Philip
#995886#20
Date:
2022-07-12 20:55:33 UTC
From:
To:
This bug is closed by the upload of version 1.6e-4, thanks Camm!