Notes for qmail-tools - reproducible builds result

Version annotated: 0.1.0
Identified issues:
Identifier: timestamps_in_gzip_headers
Description gzip stores a timestamp by default in its header.
Identifier: random_order_in_md5sums
Description order of files in md5sums (in control.tar.gz) differ from build1 to build2. This only happens in
packages not using dh_md5sums and it's easily fixed by sorting the output of "find" before
piping it to md5sum. Example:
cd debian/tmp && \
find * -type f ! -regex "^DEBIAN/.*" -print0 |\
LC_ALL=C sort -z | xargs -0r md5sum > DEBIAN/md5sums
Bugs noted: 776936+: "qmail-tools: please make the build reproducible"
847029+: "qmail-tools: please make the build reproducible (fileordering)"

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).