#1136298 - pycorrfit: please make the build reproducible (original) (raw)

Debian Bug report logs - #1136298

pycorrfit: please make the build reproducible

Reported by: "Chris Lamb" lamby@debian.org

Date: Mon, 11 May 2026 16:45:01 UTC

Severity: wishlist

Tags: patch

Found in version pycorrfit/1.3.1+nopack-3

Fixed in version pycorrfit/1.3.1+nopack-4

Done: Karsten Schöke karsten.schoeke@geobasis-bb.de

Bug is archived. No further changes may be made.

Display info messages

Report forwardedto debian-bugs-dist@lists.debian.org, Debian Med Packaging Team <debian-med-packaging@lists.alioth.debian.org> (src:pycorrfit for {1136298}), reproducible-bugs@lists.alioth.debian.org (additional cc recipient for {1136298}):
Bug#1136298; Package src:pycorrfit. (Mon, 11 May 2026 16:45:03 GMT) (full text, mbox, link).

Acknowledgement sentto "Chris Lamb" <lamby@debian.org>:
New Bug report received and forwarded. Copy sent to reproducible-bugs@lists.alioth.debian.org, debian-med-packaging@lists.alioth.debian.org. (Mon, 11 May 2026 16:45:03 GMT) (full text, mbox, link).

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Source: pycorrfit Version: 1.3.1+nopack-3 Severity: wishlist Tags: patch User: reproducible-builds@lists.alioth.debian.org Usertags: filesystem X-Debbugs-Cc: reproducible-bugs@lists.alioth.debian.org

Hi,

Whilst working on the Reproducible Builds effort [0], we noticed that pycorrfit could not be built reproducibly.

This is because it uses its own code to generate a simple gallery, and this code calls glob.glob(..) without applying a sort afterwards. This means that the output depends on the naive filesystem ordering.

A patch is attached that adds a sorted(...) in the right place.

[0] https://reproducible-builds.org/

Regards,

-- ,''. : :' : Chris Lamb . ' lamby@debian.org / chris-lamb.co.uk `-

[pycorrfit.diff.txt (text/plain, attachment)]

Reply sentto Karsten Schöke <karsten.schoeke@geobasis-bb.de>:
You have taken responsibility. (Tue, 12 May 2026 08:43:05 GMT) (full text, mbox, link).

Notification sentto "Chris Lamb" <lamby@debian.org>:
Bug acknowledged by developer. (Tue, 12 May 2026 08:43:05 GMT) (full text, mbox, link).

Message #10 received at 1136298-close@bugs.debian.org (full text, mbox, reply):

[Message part 1 (text/plain, inline)]

Source: pycorrfit Source-Version: 1.3.1+nopack-4 Done: Karsten Schöke karsten.schoeke@geobasis-bb.de

We believe that the bug you reported is fixed in the latest version of pycorrfit, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is attached.

Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1136298@bugs.debian.org, and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software pp. Karsten Schöke karsten.schoeke@geobasis-bb.de (supplier of updated pycorrfit package)

(This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512

Format: 1.8 Date: Tue, 12 May 2026 09:37:37 +0200 Source: pycorrfit Built-For-Profiles: nocheck Architecture: source Version: 1.3.1+nopack-4 Distribution: unstable Urgency: medium Maintainer: Debian Med Packaging Team debian-med-packaging@lists.alioth.debian.org Changed-By: Karsten Schöke karsten.schoeke@geobasis-bb.de Closes: 1136298 Changes: pycorrfit (1.3.1+nopack-4) unstable; urgency=medium .

Team upload.
fix reproducible-build issue on documentation. (Closes: #1136298) Checksums-Sha1: 9e07d28c35cc79b845c20b5ce54681ac76578005 2523 pycorrfit_1.3.1+nopack-4.dsc 9447b13eb1ec7bdbf030468fb5d1ce3d82c07bc2 7960 pycorrfit_1.3.1+nopack-4.debian.tar.xz 0e1aca4428f2b6b216c376c1a8ef9ef301159420 15991 pycorrfit_1.3.1+nopack-4_amd64.buildinfo Checksums-Sha256: 9c0ff37e64efae0634ef1654c19d6f0e1c16b68f5c33daf33ba4c37b7b71d442 2523 pycorrfit_1.3.1+nopack-4.dsc 4dfba59f6510f7c07eb9215bbb22783764507fd6ee0d60fbce5ed68112cf7515 7960 pycorrfit_1.3.1+nopack-4.debian.tar.xz 219f2c566e0a23e0a749f0c175253b63634e84eda44baf6376d1dafae4940a19 15991 pycorrfit_1.3.1+nopack-4_amd64.buildinfo Files: d0b8c69c41b792cb471c41a3caea6b8f 2523 python optional pycorrfit_1.3.1+nopack-4.dsc 4bbc5ebe1f2a65f9aae35957935fb2ba 7960 python optional pycorrfit_1.3.1+nopack-4.debian.tar.xz bf64c226e7505c7255abcb276c58c866 15991 python optional pycorrfit_1.3.1+nopack-4_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEESJcY4TbXsC5S1RQ8jT4KJgRDZUgFAmoC3tMACgkQjT4KJgRD ZUgFIg/+Omt3cNSFBj9wuecerpr8KOXCt33Y4ZRcGs9dTX0J7f/TLpZFKRR7CBhE PPgOy/SAWNicyKPUj2JRBQN6iNo8JWiwI4yhLWJwNXywD8Uj2V0mUPqN0TX1P1vE t2xvtuBswdmT9rQiR9oYh2Y/7GaLC9oXCYiJqA94gIfXhMat7Ng/OU7fgtqZPaFv 8R1HSa+gKGx+zLPgsP5mVIZ5AA8mWMmZQOkHKPot6QqDB+sbJtiNYJ0WN9FFP3zQ hKxaMthCBSlzMU1wGfxwhN4/2920g/rmAlwV+Gtt3qAuzKcNEFxuUxX3UmAKUmdc 0v6HxwQJKrY9m9hGCCuSCo3197jxcysRJZ4gq1zo/CDbvYDEgi/buGh2mEEzCJfY /Q5hvYXYozYZEogYp22bzf+CA608L80bOYfUwYYCdkgjvzOIc0aPGB2lfTsMzW97 FwFp/IKHP+HKDdFGFf6No3R8hSXidUynOVd6yDM9xDsakaF3znVuwH1lC+n4l/3/ V8/gYnJqp6+Opql5xX1VIs+H/CWQJWu3gZQHIUZmaibAJMfGu5FA45V1rROeR4ww hh5HSM3E+3He0dPGBzuEpkKhcxHIPTMOfHQCAG/xyE4L5PulNjZuu0rScm4nNlis uyNCZS9odmZ5ad7I+pj8kKFssiojtG9loCdKvdn/O5dfexoUwOs= =8F2k -----END PGP SIGNATURE-----

[Message part 2 (application/pgp-signature, inline)]

**Bug archived.**Request was from Debbugs Internal Request <owner@bugs.debian.org>to internal_control@bugs.debian.org. (Wed, 17 Jun 2026 07:28:41 GMT) (full text, mbox, link).

Send a report that this bug log contains spam.

Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified:Wed Jun 17 21:20:48 2026; Machine Name:bembo

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.