Notes for cffi - reproducible builds result

Version annotated: 1:0.16.1-1
Identified issues:
Identifier: timestamps_in_gzip_headers
URL https://wiki.debian.org/ReproducibleBuilds/TimestampsInGzipHeaders
Description gzip stores a timestamp by default in its header.
Identifier: timestamps_in_tarball
URL https://wiki.debian.org/ReproducibleBuilds/TimestampsInTarball
Description Tarballs capture build time in mtime of its members.
Identifier: different_due_to_umask
Description Files have varying permissions because of different umasks.
Identifier: timestamps_in_ps_generated_by_dvips
Description eg. %%CreationDate (or DVIPSSource?) in header
.
https://sources.debian.net/src/texlive-bin/latest/texk/web2c/pdftexdir/pdftex.web/#L14449
.
DVIPSSource date Can be set to SOURCE_DATE_EPOCH by setting FORCE_SOURCE_DATE to 1.
Identifier: timestamps_in_dvi_generated_by_latex
URL https://wiki.debian.org/ReproducibleBuilds/TimestampsInDviGeneratedByLaTeX
Description The creation date of the DVI file is the current time.
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).