GNOME Bugzilla – Bug 765108
skeletonmm.tar.gz contains timestamps
Last modified: 2016-04-17 15:24:55 UTC
When building mm-common for Debian, I get the following warning: W: mm-common: package-contains-timestamped-gzip usr/share/doc/mm-common/skeletonmm.tar.gz N: N: The package contains a gzip-compressed file that has timestamps. Such N: files make the packages unreproducible, because their contents depend on N: the time when the package was built. N: N: Please consider passing the "-n" flag to gzip to avoid this. N: N: Refer to https://wiki.debian.org/ReproducibleBuilds for details. N: N: Severity: normal, Certainty: certain Please consider adding -n to mm-common/Makefile.am: skeletonmm.tar.gz: $(skeletonmm_files) $(AM_V_GEN)($(srctar_stdout) $(skeletonmm_files)) | gzip -c >$@
Created attachment 326102 [details] [review] [PATCH] build: don't save time stamps in skeletonmm.tar.gz
I have pushed your patch. Is this a new requirement? skeletonmm.tar.gz has been built with timetamps for 6 years.
Thanks. See the referenced link: https://wiki.debian.org/ReproducibleBuilds for more information This is a new initiative speer-headed by Debian, to make builds reproducible, but has been picked up by various upstream projects and distros.