trying to reproduce hello-traditional from Debian. .buildinfo file? next steps?

[Carles Pina i Estany]

Hi,

On 03 Aug 2023 at 04:38:17, Bernhard M. Wiedemann wrote:
> On 02/08/2023 11.26, Carles Pina i Estany wrote:
> > 
> > Hi,
> > 
> > This is Debian specific but I cannot find a reproducible builds Debian
> > specific mailing list. Let me know if I should ask elsewhere. Feel free
> > to send me some pointers to read it myself.
> > 
> > TL;DR: I'm trying to build hello-traditional from Debian and have the
> > same result as Debian. I cannot do it. Pointers welcome. I thought of
> > using the .buildinfo file to reproduce the build environment and deps
> > but unsure of the best way and if this is the way.
> > 
> > I'm trying to reproduce the build of the package hello-traditional. I
> > understand from here:
> > https://tests.reproducible-builds.org/debian/rb-pkg/bookworm/amd64/hello-traditional.html
> > 
> > That should be reproducible.
> > 
> > I've done:
> > $ sbuild --no-clean --arch-any --arch-all --no-source --dist=stable --arch=amd64 http://deb.debian.org/debian/pool/main/h/hello-traditional/hello-traditional_2.10-6.dsc
> 
> https://www.reddit.com/r/reproduciblebuilds/comments/tqrf9q/the_binary_that_varies_from_full_moon/

Ha, super interesting! :-)

> It might be something else, but since you mentioned "hello", there is
> a chance that this amazing story is relevant.

Actually strange enough and might warrant a bug: the "full moon" code is
in Debian's "hello-traditional" (and I suspect that "hello"), for what I
can say, it is not patched neither skipped. I think that the
packages from Debian are not reproducible because of it (if the relevant
code makes it generate a different output binary).

I need to do some work but I will try, when non-work time allows, to set
up a reprepro with a full moon date and not full moon date. I suspect
that might make hello / hello-traditional not reproducible.

Thanks for the pointer!

-- 
Carles Pina i Estany
https://carles.pina.cat || Wiktionary translations: https://kamus.pina.cat