Debian Bug report logs - #1120531
trillian: please make the build reproducible

version graph

Package: src:trillian; Maintainer for src:trillian is Debian Go Packaging Team <team+pkg-go@tracker.debian.org>;

Reported by: "Chris Lamb" <lamby@debian.org>

Date: Tue, 11 Nov 2025 18:49:02 UTC

Severity: wishlist

Tags: patch

Found in version trillian/1.6.1-1

Fixed in version trillian/1.6.1-2

Done: Simon Josefsson <simon@josefsson.org>

Reply or subscribe to this bug.

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, reproducible-bugs@lists.alioth.debian.org (additional cc recipient for {1120531}), Debian Go Packaging Team <team+pkg-go@tracker.debian.org> (src:trillian for {1120531}):
Bug#1120531; Package src:trillian. (Tue, 11 Nov 2025 18:49:03 GMT) (full text, mbox, link).


Acknowledgement sent to "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, team+pkg-go@tracker.debian.org. (Tue, 11 Nov 2025 18:49:03 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>
To: submit@bugs.debian.org
Subject: trillian: please make the build reproducible
Date: Tue, 11 Nov 2025 10:46:55 -0800
[Message part 1 (text/plain, inline)]
Source: trillian
Version: 1.6.1-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
trillian could not be built reproducibly.

This is because it ships different contents depending on whether
'nocheck' is specified. This in turn was caused by deleting files
within dh_auto_test, which we instead need to do in a target that
is always called.

Patch attached.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-
[trillian.diff.txt (text/plain, attachment)]

Reply sent to Simon Josefsson <simon@josefsson.org>:
You have taken responsibility. (Fri, 19 Dec 2025 15:23:01 GMT) (full text, mbox, link).


Notification sent to "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Fri, 19 Dec 2025 15:23:01 GMT) (full text, mbox, link).


Message #10 received at 1120531-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>
To: 1120531-close@bugs.debian.org
Subject: Bug#1120531: fixed in trillian 1.6.1-2
Date: Fri, 19 Dec 2025 15:20:03 +0000
[Message part 1 (text/plain, inline)]
Source: trillian
Source-Version: 1.6.1-2
Done: Simon Josefsson <simon@josefsson.org>

We believe that the bug you reported is fixed in the latest version of
trillian, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1120531@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon Josefsson <simon@josefsson.org> (supplier of updated trillian package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 19 Dec 2025 15:57:37 +0100
Source: trillian
Architecture: source
Version: 1.6.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Simon Josefsson <simon@josefsson.org>
Closes: 1120531
Changes:
 trillian (1.6.1-2) unstable; urgency=medium
 .
   [ Simon Josefsson ]
   * Drop Rules-Requires-Root: no
   * Standards-Version: 4.7.2
   * Modernize Salsa CI
 .
   [ Chris Lamb ]
   * Fix reproducibility (Closes: #1120531)
 .
   [ Simon Josefsson ]
   * Use watch v5
   * Tag patches as Forwarded:not-needed
   * Run tests but ignore failures for now
   * Fix Salsa CI wrap-and-sort
   * Use dh-sequence-golang
   * Typo fix grpc patch
   * Run tests but ignore TestMySQLWarning
   * Drop execute_before_dh_auto_install hack
   * Improve copyright years
Checksums-Sha1:
 8b4ebb895e35e204830a08c36eaeb03e7afe3c6e 3046 trillian_1.6.1-2.dsc
 08d17e112baad583a76170e810274a860fb0c742 5988 trillian_1.6.1-2.debian.tar.xz
 771fb1553c3a9e0848dc5978cbc94dba246cead8 2793660 trillian_1.6.1-2.git.tar.xz
 e5565ff21ac7fa50a46fb60ec9cca755623ab5cc 17139 trillian_1.6.1-2_source.buildinfo
Checksums-Sha256:
 5e6dfcf0cf6bdbb783e79373f45e834c76260a13ac53bd42278312197a833b5a 3046 trillian_1.6.1-2.dsc
 683740b8a9f899803d299b22f71201623b78c334f0b23d7d54c3d72d68c996f3 5988 trillian_1.6.1-2.debian.tar.xz
 54eb3e0742f1d2fb1f56470f580de438b807bfc405a5f7caadefae3cb414e5a7 2793660 trillian_1.6.1-2.git.tar.xz
 c707c94a7fb6909a7aa2d801d16e4b1eeaa6c6e3ac7b7d2e5f3e5e182d06029a 17139 trillian_1.6.1-2_source.buildinfo
Files:
 99fe587a97179a1e5012d814fee79eda 3046 golang optional trillian_1.6.1-2.dsc
 505d1901f86272ee2c33c452175f1153 5988 golang optional trillian_1.6.1-2.debian.tar.xz
 6e241242d4bab817cbf579699bb2c045 2793660 golang optional trillian_1.6.1-2.git.tar.xz
 a5cc8a850edce556fb203becceaf5b03 17139 golang optional trillian_1.6.1-2_source.buildinfo
Git-Tag-Info: tag=404abcc78f75397284b5ece1110332ce7097cd20 fp=a3cc9c870b9d310abad4cf2f51722b08fe4745a2
Git-Tag-Tagger: Simon Josefsson <simon@josefsson.org>

-----BEGIN PGP SIGNATURE-----
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=7ULW
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Fri Jan 2 09:32:45 2026; Machine Name: berlioz

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.