Notes for metkit - reproducible builds result

Version annotated: 1.6.0-2
Identified issues:
Identifier: records_build_flags
Description Records $CFLAGS, which vary intentionally due to the «-fdebug-prefix-map=${BUILDPATH}=.»,
«-ffile-prefix-map=${BUILDPATH}=.» or «-fmacro-prefix-map=${BUILDPATH}=.» flags.
.
We have a patch pending to GCC to fix this issue centrally:
.
https://gcc.gnu.org/ml/gcc-patches/2016-11/msg00182.html
.
Though the patch is currently unlikely to be merged. If/when this
is accepted, this issue should be fixed for all packages and you
should not need to fix it specifically in your package.
.
There is also a work-in-progress patch to dpkg that could address this issue:
.
https://bugs.debian.org/985553
.
For more background information see:
.
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160822/006788.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160905/006984.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160912/007076.html
Identifier: timestamps_in_h_generated_by_ecbuild
Description ecbuild generates a PACKAGE_ecbuild_config.h that embeds the
build time.
https://sources.debian.org/src/ecbuild/3.7.1-1/cmake/ecbuild_config.h.in/#L35
Identifier: captures_build_arch_via_ecbuild
Description ecbuild generates a PACKAGE_ecbuild_config.h that embeds the
running kernel architecture.
.
Parent issue: captures_build_arch
Identifier: captures_kernel_version_via_ecbuild
Description ecbuild generates a PACKAGE_ecbuild_config.h that embeds the
running kernel version.
https://sources.debian.org/src/ecbuild/3.7.1-1/cmake/ecbuild_config.h.in/#L32
.
Parent issue: captures_kernel_version
Identifier: records_build_flags_from_ecbuild
Description ecbuild generates a PACKAGE_ecbuild_config.h that contains the
build flags.
https://sources.debian.org/src/ecbuild/3.7.1-1/cmake/ecbuild_config.h.in/#L44-L48
.
Parent issue: records_build_flags
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).