Notes for openssl - reproducible builds result

Version annotated: 1.1.0e-2
Identified issues:
Identifier: build_path_captured_in_assembly_objects
URL https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93371
Description This is issue has been fixed for GCC 13 on 2022-11-02.
.
Before GNU as didn't support BUILD_PATH_PREFIX_MAP, so objects compiled from
assembly sources captured the build path.
.
Before GNU "as" only supported --debug-prefix-map=BUILDPATH=. which can
sometimes be passed via ASMFLAGS, ASFLAGS, or similar variables.
Identifier: records_build_flags
Description Records $CFLAGS, which vary intentionally due to the «-fdebug-prefix-map=${BUILDPATH}=.»,
«-ffile-prefix-map=${BUILDPATH}=.» or «-fmacro-prefix-map=${BUILDPATH}=.» flags.
.
We have a patch pending to GCC to fix this issue centrally:
.
https://gcc.gnu.org/ml/gcc-patches/2016-11/msg00182.html
.
Though the patch is currently unlikely to be merged. If/when this
is accepted, this issue should be fixed for all packages and you
should not need to fix it specifically in your package.
.
There is also a work-in-progress patch to dpkg that could address this issue:
.
https://bugs.debian.org/985553
.
For more background information see:
.
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160822/006788.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160905/006984.html
• https://alioth-lists.debian.net/pipermail/reproducible-builds/Week-of-Mon-20160912/007076.html
Identifier: ftbfs_in_jenkins_setup
Description Could be:
1) jobs that try to bind to localhost ports which are in use by something in the
jenkins machines. The occupied ports are: 22, 25, 80, 443, 3128, 3129, 4949, 34167
2) the build tries to access a debian archive over http, which is something
allowed but pbuilder doesn't support this yet (this should only be interesting
for debian-installer)
3) something else, the machine is heavily loaded all the time...
Bugs noted: 1009934+: "openssl: reproducible-builds: Embeded compiler flags contain build paths"
Comments: Test suite failures in jenkins trigger FTBFS issues, 1.1 and 3.0
build fine in sbuild locally.
 

Our notes about issues affecting packages are stored in notes.git and are targeted at packages in Debian in 'unstable/amd64' (unless they say otherwise).