Hardcode file permissions for files generated by output redirection

This should finally make the build really reproducible.

diff --git a/debian/changelog b/debian/changelog
index f26296ec26b8421b76ff4861bcdbf395fc4bfd85..929cf3ccea73cbadc4ee8eec383a27873d93c985 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,10 @@
+t-prot (3.4-3) UNRELEASED; urgency=medium
+
+  * Really make build reproducible by also hardcoding file permissions for
+    files generated by output redirection.
+
+ -- Axel Beckert <abe@debian.org>  Tue, 12 May 2015 22:55:49 +0200
+
 t-prot (3.4-2) unstable; urgency=medium
 
   * debian/rules: Set timestamp of all new files to the same time to make

diff --git a/debian/rules b/debian/rules
index 3104ee7cbf347106377ae6d7f445ed75433c6d83..4f411be445df673a3b3fd66fa460917ebb2b4314 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -72,6 +72,10 @@ binary-indep: install
        dpkg-gencontrol -ldebian/changelog -isp -p$(PKG) -P$(TMP)
        cd $(TMP) && find * -type f ! -regex '^DEBIAN/.*' -print0 | \
                xargs -r0 md5sum > DEBIAN/md5sums
+       # Make build reproducible:
+       # Hardcode permissions for files created by output redirection
+       chmod 644 $(TMP)/DEBIAN/md5sums $(TMP)/DEBIAN/templates
+       # Set timestamp of all files to timestamp in debian/changelog entry
        find $(TMP) -depth -newermt '$(BUILD_DATE)' -print0 | \
                xargs -0r touch --no-dereference --date='$(BUILD_DATE)'
        dpkg --build $(TMP) ..