Notes for bind9 - reproducible builds result

Version annotated: 1:9.10.3.dfsg.P4-10
Identified issues:
Identifier: gcc_captures_build_path
Description Captures build path, e.g., /build/1st/foo-42.0 v. /build/foo-42.0/2nd
Currently we vary the build path only when testing packages from unstable
and experimental, for testing and stable we recommend that rebuilds
are done in the same path as the original build.
.
dpkg-buildflags version 1.20.6+ sets -ffile-prefix-map by default
(and -fdebug-prefix-map in older versions) which fixes this issue
in many cases, but not all (see: records_build_flags).
.
There are patches submitted upstream to address this specific issue, but they
are unlikely to be merged at this point:
.
https://gcc.gnu.org/ml/gcc-patches/2017-04/msg00513.html
.
When this is accepted into GCC upstream, we could remove this note.
In the meantime, please do not remove this issue, nor mark it as deterministic,
nor untag these packages.
Identifier: timestamps_in_manpages_generated_by_rst2man
URL https://bugs.debian.org/831779
Description Manpages generated with rst2man embed the date
Identifier: captures_shell_variable_in_autofoo_script
Description Something looking like autotools is capturing SHELL for use at
runtime, which should probably be fixed to /bin/sh anyway.
.
Autotools also capturing the build path.
Identifier: records_build_flags
Description Records $CFLAGS, which vary intentionally due to the «-fdebug-prefix-map=${BUILDPATH}=.»,
«-ffile-prefix-map=${BUILDPATH}=.» or «-fmacro-prefix-map=${BUILDPATH}=.» flags.
.
We have a patch pending to GCC to fix this issue centrally:
.
https://gcc.gnu.org/ml/gcc-patches/2016-11/msg00182.html
.
Though the patch is currently unlikely to be merged. If/when this
is accepted, this issue should be fixed for all packages and you
should not need to fix it specifically in your package.
.
There is also a work-in-progress patch to dpkg that could address this issue:
.
https://bugs.debian.org/985553
.
For more background information see:
.
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160822/006788.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160905/006984.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160912/007076.html
Bugs noted: 1064782+: "bind9-doc: please output tags in the documentation in deterministic order."
Comments: Embeds current year into copyright header.
https://sources.debian.net/src/bind9/latest/lib/dns/gen.c/#L117
.
isc_tags need to be sorted, though only partial fix.
https://sources.debian.org/src/bind9/1%3A9.19.6-1/doc/arm/_ext/iscconf.py/#L237
.
references to PACKAGE_CONFIGARGS embed the build path.
https://sources.debian.org/src/bind9/1:9.19.6-1/bin/named/main.c/#L577
https://sources.debian.org/src/bind9/1:9.19.6-1/bin/named/main.c/#L1120
https://sources.debian.org/src/bind9/1:9.19.6-1/bin/named/include/named/globals.h/#L74
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).