commit a91a3bc: [Minor] Debian: set fixfilepath reproducible build option

Peter Wu peter at lekensteyn.nl
Tue Jan 21 09:14:09 UTC 2020


Author: Peter Wu
Date: 2020-01-20 22:32:15 +0000
URL: https://github.com/rspamd/rspamd/commit/a91a3bc6e0a94ff8ba807590983c4af789aa7022

[Minor] Debian: set fixfilepath reproducible build option
* Enable -ffile-prefix-map to ensure that assert statements in
  contrib/libev/ev.c and other places do not store the full file path.
  This ensures reproducible builds, invariant of the build directory.
  Supported since dpkg 1.19.1, including Debian buster and Ubuntu 19.04.
* Enable all hardening features while at it, this adds bindnow only. See
  https://manpages.debian.org/buster/dpkg-dev/dpkg-buildflags.1.en.html

---
 debian/rules | 1 +
 1 file changed, 1 insertion(+)

diff --git a/debian/rules b/debian/rules
index b3a0feafc..42f98643b 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all reproducible=+fixfilepath
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
 export ASAN_OPTIONS=detect_leaks=0
 


More information about the Commits mailing list