HTTP/2 302 x-content-type-options: nosniff x-frame-options: sameorigin referrer-policy: no-referrer x-xss-protection: 1 permissions-policy: interest-cohort=() strict-transport-security: max-age=15552000 location: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1121070 content-length: 307 content-type: text/html; charset=iso-8859-1 date: Sat, 27 Dec 2025 14:27:13 GMT server: Apache HTTP/2 200 cache-control: public, max-age=300 x-content-type-options: nosniff x-frame-options: sameorigin referrer-policy: no-referrer x-xss-protection: 1 permissions-policy: interest-cohort=() strict-transport-security: max-age=15552000 etag: 913455c766d2105202c41906b3fe54fe vary: Accept-Encoding content-encoding: gzip x-clacks-overhead: GNU Terry Pratchett content-length: 6060 content-type: text/html; charset=utf-8 date: Sat, 27 Dec 2025 14:27:13 GMT server: Apache

Debian Bug report logs - #1121070
golang-github-kshedden-statmodel: please make the build reproducible

Reply or subscribe to this bug.

Display info messages

---

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Source: golang-github-kshedden-statmodel
Version: 0.0~git20210519.ee97d3e-1
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: nocheck
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org
Hi,
Whilst working on the Reproducible Builds effort [0], we noticed that
golang-github-kshedden-statmodel could not be built reproducibly.
This was because it ships a different binary package depending
on whether the tests are run or not. Specifically, the testsuite
generates a glm.log and glm_test.log file that was being installed
into the binary .deb.
Patch attached that uses DH_GOLANG_EXCLUDES to ensure they are not
shipped.
 [0] https://reproducible-builds.org/
Regards,
-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[golang-github-kshedden-statmodel.diff.txt (text/plain, attachment)]

---

Message #10 received at 1121070-close@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Source: golang-github-kshedden-statmodel
Source-Version: 0.0~git20210519.ee97d3e-2
Done: Stephen Kitt <skitt@debian.org>
We believe that the bug you reported is fixed in the latest version of
golang-github-kshedden-statmodel, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1121070@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Stephen Kitt <skitt@debian.org> (supplier of updated golang-github-kshedden-statmodel package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 06 Dec 2025 09:11:08 +0100
Source: golang-github-kshedden-statmodel
Architecture: source
Version: 0.0~git20210519.ee97d3e-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Stephen Kitt <skitt@debian.org>
Closes: 1121070
Changes:
 golang-github-kshedden-statmodel (0.0~git20210519.ee97d3e-2) unstable; urgency=medium
 .
   * Exclude log files to avoid installing them, so that build
     reproducibility doesn’t vary depending on whether the tests are run.
     Thanks to Chris Lamb for noticing the issue and prodiving a patch!
     Closes: #1121070.
   * Drop “Rules-Requires-Root: no” since it’s now the default.
Checksums-Sha1:
 31c7d2e7e6c3aacfb6cd32d4d15e4ed650141434 2534 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.dsc
 d56c62f40e0cf060d349ca27b43d1d6b6f9f7570 3480 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.debian.tar.xz
 f07c6b4894fa552ddfd8d12f503c643432b343ed 7782 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2_source.buildinfo
Checksums-Sha256:
 a3f88617df92e39e0844aa77ca4637b5f7abaa694357a98b8a30e0f5cf595c95 2534 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.dsc
 c57303ae79ce56a8c745f95b0d77cb0edca015c71d82a04ecd0744619c208f0b 3480 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.debian.tar.xz
 38a0709108bfae1cea76c271e509386aef3f1dd3805665e648230b6c6695f572 7782 golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2_source.buildinfo
Files:
 119ccdcc54f9e0568178959cb85cde59 2534 golang optional golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.dsc
 2dd2e87f80e0576486333d3f95813b79 3480 golang optional golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2.debian.tar.xz
 74fd56bb7a360e08c72c44f432439f2e 7782 golang optional golang-github-kshedden-statmodel_0.0~git20210519.ee97d3e-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=VXEw
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

---

Send a report that this bug log contains spam.

---

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Sat Dec 27 14:27:15 2025; Machine Name: bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.