Notes for gatb-core - reproducible builds result

Version annotated: 1.4.2+dfsg-11
Identified issues:
Identifier: captures_kernel_version_via_CMAKE_SYSTEM
Description Uses CMAKE_SYSTEM, which embeds `uname -sr` output; the -r (version) varies.
.
Instead, use CMAKE_SYSTEM_NAME (`uname -s`), which shouldn't vary.
.
May also be triggered by use of CMAKE_HOST_SYSTEM,
CMAKE_HOST_SYSTEM_VERSION or CMAKE_SYSTEM_VERSION.
.
Parent issue: captures_kernel_version
Identifier: timestamps_in_cmake
Description Timestamps generated by cmake TIMESTAMP function respect
SOURCE_DATE_EPOCH, but use the local timezone. In CMakeLists.txt,
uses of the TIMESTAMP function need to specify the timezone as
UTC:
.
string(TIMESTAMP CURRENT_TIME "%Y-%m-%d" UTC)
.
Likely affected packages:
https://codesearch.debian.net/search?q=string%5C%28TIMESTAMP.*%5B%5EU%5D%5B%5ET%5D%5B%5EC%5D%5C%29&literal=0
Comments: Uses CMAKE_SYSTEM which includes running kernel version
https://sources.debian.org/src/gatb-core/1.4.2%2Bdfsg-11/gatb-core/src/gatb/system/api/build_info.hpp.in/#L27
.
Uses Cmake TIMESTAMP, which needs UTC specified
https://sources.debian.org/src/gatb-core/1.4.2%2Bdfsg-11/gatb-core/CMakeLists.txt/#L56
https://sources.debian.org/src/gatb-core/1.4.2%2Bdfsg-11/gatb-core/cmake/Delivery.cmake/#L14
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).