[Reproducible-commits] [blog] 01/01: 63: document dpkg upload

[Mattia Rizzolo]

This is an automated email from the git hooks/post-receive script.

mattia pushed a commit to branch master
in repository blog.

commit d474f035643b857332840159a5672144a7ab77df
Author: Mattia Rizzolo <mattia at debian.org>
Date:   Sun Jul 3 22:13:25 2016 +0000

    63: document dpkg upload
---
 drafts/63.mdwn | 26 +++++++++++++++++++++++++-
 1 file changed, 25 insertions(+), 1 deletion(-)

diff --git a/drafts/63.mdwn b/drafts/63.mdwn
index 8afc4bf..fa18174 100644
--- a/drafts/63.mdwn
+++ b/drafts/63.mdwn
@@ -15,6 +15,30 @@ Documentation update
 Toolchain fixes
 ---------------
 
+- Guillem Jover uploaded [[!pkg dpkg]]/1.18.8, containing a lot of changes
+  relevant for us:
+  + Use new GNU tar `--clamp-mtime` option in dpkg-deb(1) to make sure no file in
+    binary packages has an mtime later than the given time.  Closes: [[!bug 759886]]
+  + Use the same timestamp for the ar container as for tarball mtime clamping
+    in dpkg-deb(1).
+  + Set ar timestamp and tar mtime clamping to `SOURCE_DATE_EPOCH` if defined
+    in dpkg-deb(1).  (Based on a patch by Lunar).
+  + Preset build timestamp to latest changelog entry in dpkg-buildpackage(1),
+    by setting `SOURCE_DATE_EPOCH` environment variable if it is not already
+    defined. (Based on a patch by Lunar).  Closes: [[!bug 759999]]
+  + Export `SOURCE_DATE_EPOCH` from pkg-info.mk makefile snippet.  Closes: [[!bug 824572]]
+  + Add new Timestamp field to Dpkg::Changelog output, which ends up on
+    dpkg-parsechangelog(1)'s output.
+  This is a huge upload for us, so thank you Guillem for doing it and helping
+  reproducible builds becoming something real.
+
+With this dpkg upload there can be real reproducible packages in the wild; we
+still have a couple of local patches (to normalize the control.tar member of the
+`.deb` files, to enable by default the `-fdebug-path-map` option of GCC, and to
+produce the `.buildinfo` files), but nonetheless we expect a lot of packages to
+be reproducible out of the box, and we're actually looking out to find them!
+
+
 Other upstream fixes
 --------------------
 
@@ -55,5 +79,5 @@ tests.reproducible-builds.org
 Misc.
 -----
 
-This week's edition was written by… and reviewed by a bunch of Reproducible builds folks on IRC.
+This week's edition was written by Mattia Rizzolo,… and reviewed by a bunch of Reproducible builds folks on IRC.
 

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git