Debian Bug report logs - #1100977
python-moto: please make the build reproducible

Reply or subscribe to this bug.

Display info messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: "Chris Lamb" <lamby@debian.org>

To: submit@bugs.debian.org

Subject: python-moto: please make the build reproducible

Date: Fri, 21 Mar 2025 10:48:35 +0000

[Message part 1 (text/plain, inline)]

Source: python-moto
Version: 5.1.1-3
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertags: randomness
X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that
python-moto could not be built reproducibly.

This is because the tests generate a "moto_recording" file that then
gets installed directly under the /usr/lib/python3/dist-packages
directory (which, itself, I believe is a bug).

Patch attached that removes this file after running the testsuite.

 [0] https://reproducible-builds.org/


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby@debian.org / chris-lamb.co.uk
       `-

[python-moto.diff.txt (text/plain, attachment)]

Message #10 received at 1100977-close@bugs.debian.org (full text, mbox, reply):

From: Debian FTP Masters <ftpmaster@ftp-master.debian.org>

To: 1100977-close@bugs.debian.org

Subject: Bug#1100977: fixed in python-moto 5.1.1-4

Date: Fri, 21 Mar 2025 16:10:27 +0000

[Message part 1 (text/plain, inline)]

Source: python-moto
Source-Version: 5.1.1-4
Done: Thomas Goirand <zigo@debian.org>

We believe that the bug you reported is fixed in the latest version of
python-moto, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1100977@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Thomas Goirand <zigo@debian.org> (supplier of updated python-moto package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 21 Mar 2025 16:23:22 +0100
Source: python-moto
Architecture: source
Version: 5.1.1-4
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Thomas Goirand <zigo@debian.org>
Closes: 1100977
Changes:
 python-moto (5.1.1-4) unstable; urgency=medium
 .
   * Add patch to make the package reproducible, thanks to Chris Lamb
     (Closes: #1100977).
Checksums-Sha1:
 15b44ae3a41e9a57142f00520f2ae9e25e937692 2721 python-moto_5.1.1-4.dsc
 6036cf11cdf681a4bba4a0a74f15ceb505f94758 3856 python-moto_5.1.1-4.debian.tar.xz
 51a543cfcb08636be12b6ea6aa78d8d12c015c05 9659 python-moto_5.1.1-4_amd64.buildinfo
Checksums-Sha256:
 5badb67de3ac3d40c781ae86318aefe1d045e4a2777f904530f72a2661bffc63 2721 python-moto_5.1.1-4.dsc
 a78ac28b90bf8cfc48e14d478cb0caa15b5209fcc00703153df2ba393f49b63b 3856 python-moto_5.1.1-4.debian.tar.xz
 2eefcbd4b05fb5f06527bf1946672de6ec872d7a16a91c02ff016db0facc5999 9659 python-moto_5.1.1-4_amd64.buildinfo
Files:
 ab24ace46b106330df7c9c71d8fd3fec 2721 python optional python-moto_5.1.1-4.dsc
 648a03811acd31b3dc1f6a82281e9cf5 3856 python optional python-moto_5.1.1-4.debian.tar.xz
 d2ff9f0e04cef3c85ed2755fcaaf7a73 9659 python optional python-moto_5.1.1-4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----
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=sHR1
-----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

Send a report that this bug log contains spam.