[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#801528: lintian: package-contains-timestamped-gzip false positive



On 25/10/15 12:12, Jakub Wilk wrote:
> Hi Tomasz!

Hi Jakub,

>
> * Tomasz Buchert <tomasz@debian.org>, 2015-10-25, 03:02:
> >Basically it looks as if dh-strip-nondeterminism/toolchain strips/will
> >strip so much that this tag may not be useful anymore.
>
> Well, not everybody uses dh-strip-nondeterminism. I don't use it in any of
> my packages, and I will never will. (It's such a gigantic hack, that I hoped
> nobody would use it unless they were desperate... But apparently debhelper
> maintainers disagree.)
>
> --
> Jakub Wilk
>

I just noticed that in the version 9.20151004, d-s-nd is called by
default by dh, however is *optional* in the sense that if not present,
it won't be called. This is slightly messy: your build will be
different if dh-strip-nondeterminism is/is not in your $PATH
(something that reproducible builds want to avoid!).

Anyway, is the current heuristic fine? This tag seems to be only
useful if you don't use d-s-nd. I'm not fully happy with the current
implementation since if the build process just copies over gzipped
files from source tarball then (fs_mtime > changelog) and we have a
false positive. Maybe it is gz_mtime that we want to test?

Cheers,
Tomasz

[1] https://anonscm.debian.org/cgit/debhelper/debhelper.git/commit/?id=be4ce1dbf1fc8ddc7064b3f7c235052a8980e396

Attachment: signature.asc
Description: PGP signature


Reply to: