Notes for gearmand - reproducible builds result

Version annotated: 1.0.6-7
Identified issues:
Identifier: leaks_path_environment_variable
Description The environment variable PATH is embedded in the build result.
Sometimes it's just leaked into some file (so "just" causing reproducibility issues), while sometimes this PATH is also used for building, which might give unexpected and broken results.
Identifier: captures_shell_variable_in_autofoo_script
Description Something looking like autotools is capturing SHELL for use at
runtime, which should probably be fixed to /bin/sh anyway.
.
Autotools also capturing the build path.
Comments: The $PATH leakage is in a libtool wrapper script (foo/bar/baz for foo/bar/.libs/baz) that probably shouldn't get installed in the first place.
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).