[Letsencrypt-devel] Bug#886575: reproducibility problem due to captured buildpath in docs

[Harlan Lieberman-Berg]

Source: python-certbot
Version: 0.20.0-1
Severity: minor
Tags: upstream
User: reproducible-builds at lists.alioth.debian.org
Usertags: buildpath
Forwarded: https://github.com/certbot/certbot/issues/5380

As of 0.20.0-1, python-certbot is unreproducible due to capturing of the buildpath in the documentation as a result of SSL_DHPARAMS_SRC using pkg_resources at docs build time.

Strangely, this code hasn't changed since 0.18.0-1, yet that and the subsequent 0.19.0-1 were considered reproducible.  Sphinx hasn't changed in a major way either, with just a Debian rev bump.

Weird.

-- System Information:
Debian Release: buster/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled