Hi,

I was a happy user of pristine-tar for >10 years but since some time
(about 2 months) I end up with brocken tarball checksums when doing `gbp buildpackage` in *every* case. I'm not aware that I changed anything in
my setup. I simply realise that for some succesful upload I need to
`apt source PKG` first to get the proper tarball and than build the
package. Otherwise the checksum is always different from the uploaded
package version.

Any idea where I need to look to fix this?

Kind regards
Andreas.

--
https://fam-tille.de

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Oct 10, 2024 at 08:11:58AM +0200, Andreas Tille wrote:

I was a happy user of pristine-tar for >10 years but since some time
(about 2 months) I end up with brocken tarball checksums when doing `gbp buildpackage` in *every* case.

Does it actually use pristine-tar?

--
WBR, wRAR

-----BEGIN PGP SIGNATURE-----

iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcHcXstFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh tdEP/i9IWuQX+VwQPUAChSOLYGvtvOz4Bqh5c77QQdUVBLxJGY/n9isbH3AAUPTm RKzoW7WjLfNrviO6Ht1VtKpRoJaQp5ZVzB3eqgeW48mGEBQhg4Gx7fLxv8yzLr4K rBBHDlRj4MPuKDrSFOh9b5BvIgSGqM7dyWpoLN6lnzqxe1uxOZkwxnfmUaD5DDzs nZ1oqopDpMkMFS8r3T2fuG+Sxnm5Y5UPfQdI27Y8g5pESUdTZsmvapKxdPyj28vy wZ4JfcAz6KgYWe7UMTNRMGjlguPo/Jsxt0dJAHJ2bqArytvkx8riT3oas+ly1III 4n4JoWJIWoghFFwIc45zNt7FkSND0OhNF8I1VDK1tZ/Y2fEz5dCcPAyEGmKvoLLj YqPZdEK+HEZcAGQL7kz01uyMcYDwkGpU0sgxCKE9WJzC0nNslL7b5uPot3YYSSEf 2q8N4+F58QCAEbt34J0pjLmc4cfxnVX3pi4E+3eo6221vIaQgq8un5c3x8dyfcbe 6BCvbUJZ18MtQ2wNa9vH4k0EVJtZ2ex3Od3RVDgOnWONFwCCo8BicbxEDiWCJeUI qU7Pd8UbUW8v/4qH7/i3+ahaqyAcenf56pR4deIeDILa3Tr0SGWK6poLtUtHb3Bu b6NJIjO6pcRi5PHJ2fU5dBNF9BscfIK+FR62QPkMvn21EbK9
=lpe9
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------0qSBCR7Ev6eMbWUdlRrhRfs0
Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

SGVsbG8gQW5kcmVhcywNCg0KZG8geW91IGhhdmUgYW4gZXhhbXBsZSB0byBhbmFseXplIHRo ZSBwcm9ibGVtLg0KDQpraW5kIHJlZ2FyZHMNCg0KTWVjaHRpbGRlDQoNCkFtIDEwLjEwLjI0 IHVtIDA4OjExIHNjaHJpZWIgQW5kcmVhcyBUaWxsZToNCj4gSGksDQo+IA0KPiBJIHdhcyBh IGhhcHB5IHVzZXIgb2YgcHJpc3RpbmUtdGFyIGZvciA+MTAgeWVhcnMgYnV0IHNpbmNlIHNv bWUgdGltZQ0KPiAoYWJvdXQgMiBtb250aHMpIEkgZW5kIHVwIHdpdGggYnJvY2tlbiB0YXJi YWxsIGNoZWNrc3VtcyB3aGVuIGRvaW5nIGBnYnANCj4gYnVpbGRwYWNrYWdlYCBpbiAqZXZl cnkqIGNhc2UuICBJJ20gbm90IGF3YXJlIHRoYXQgSSBjaGFuZ2VkIGFueXRoaW5nIGluDQo+ IG15IHNldHVwLiAgSSBzaW1wbHkgcmVhbGlzZSB0aGF0IGZvciBzb21lIHN1Y2Nlc2Z1bCB1 cGxvYWQgSSBuZWVkIHRvDQo+IGBhcHQgc291cmNlIFBLR2AgZmlyc3QgdG8gZ2V0IHRoZSBw cm9wZXIgdGFyYmFsbCBhbmQgdGhhbiBidWlsZCB0aGUNCj4gcGFja2FnZS4gIE90aGVyd2lz ZSB0aGUgY2hlY2tzdW0gaXMgYWx3YXlzIGRpZmZlcmVudCBmcm9tIHRoZSB1cGxvYWRlZA0K PiBwYWNrYWdlIHZlcnNpb24uDQo+IA0KPiBBbnkgaWRlYSB3aGVyZSBJIG5lZWQgdG8gbG9v ayB0byBmaXggdGhpcz8NCj4gDQo+IEtpbmQgcmVnYXJkcw0KPiAgICAgIEFuZHJlYXMuDQo+ IA0KDQotLSANCk1lY2h0aWxkZSBTdGVobWFubg0KDQojIyBQR1AgZW5jcnlwdGlvbiB3ZWxj b21lDQojIyBGMEUzIDdGM0QgQzg3QSA0OTk4IDI4OTkgIDM5RTcgRjI4NyA3QkJBIDE0MUEg QUQ3Rg0KDQo=

--------------0qSBCR7Ev6eMbWUdlRrhRfs0--

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE8ON/Pch6SZgomTnn8od7uhQarX8FAmcHd3EACgkQ8od7uhQa rX/RkhAAimdvjRXK6imJHDZibDEOSVsSwi4mkjIU1BMYuTQ0ZPbzM+lqOYSNn7eC m+yk9obG5CqITe4WhQwLsA8bu9gsgzIXx2TZYBFG/kGaaBAmnBpqb89Dxjow0ang Jim4pUA4yyUJ3PypT16Y5DkG4fb/uVdFxY6L64fXh+hh7NEkIGP3oR9NEvgv1Xrv Z2L2o8Gd6c8Lf1yu0ZywGnHZvY9DN569yn7EYqYjK8o5XPMdEeSSRHKNYXV/FEXX 8ulsA61ZkBdZXaDix1wGNT5yevz+BkH30ltCRjcNMfoGJljSRT8qCLQIETo10/EC 5E8ACkzUvrjUIi6YAvJKQYjmI7H82XHd2XzB23DOzZ+O0VVQB8sME2VfHyy9CKfu K7lnb3VGR/uQN0gWJ1+7oaYCIf/buc0ulguydKJAnlvAaP8CzIubNYAvEdgBz34f ZcVogUBoqhC6QjRdCJaCMeq/7sLRzS9ZM9r3XF3DLOl7gbCSxBQt4YNEbQs4Mqt1 YdKl3KDLfLoMUWyJcFF67XdKM1ngveeoDerW9KsE/dvl65klHpF+MOOCzqCAPb4C XKwCo3whj+1rLzsyM7c6lUacveLJcSMw2hiQw1unQKlN6vL9Ohj8JTrPCJyY3naG tfSuoO9oFk9ZRhWcP226jH0T5NxWBMIPMFIgZSHTv05w5GsubTM=
=kINj
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Oct 10, 2024 at 04:33:38PM +0200, Andreas Tille wrote:

I was a happy user of pristine-tar for >10 years but since some time (about 2 months) I end up with brocken tarball checksums when doing `gbp buildpackage` in *every* case.

Does it actually use pristine-tar?

I admit I can't say. The information is obtained from the pristine-tar branch. I simply assume gbp is calling pristine-tar.

You shouldn't assume but check whether it is calling it.

--
WBR, wRAR

-----BEGIN PGP SIGNATURE-----

iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcH5rUtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh QOoP/0rBIX5RQMmBz64+QXqvokgUmW7/UMjernaIC98bTsD39gI1BV7CiSyJ+hBp QX8LEkQXZ2BR7ZI0PykffLuQmj8J5TsisbTu2vFy19WEkKL1T0DXIUBAaoIiMK0l O121Tq8f0OUaDPKIwsO14XatGgHFn6xZ3PUr3Pcx9Ii/A+/8izJBzvpyxVdmoi08 tWri0oNCarM46SLFE6VHP/R+1bR/C15x6oMX5e3D32BuucWOI58ywxRssj2/7eLb rLS9VaQZ9trFi0+XghktiOyp+G6oCMBhENyHh1WPZdKZ93ktAu1mr87hOX1Xibk+ aS2wP+jW+NdFhYvFrSDO4wDprI5a+OWt7h1mfOUAI8F1SZOygwNinykF0GH4kd8J xxUuMtNfQfHHQp+Cck3HZVIFWCZYz+3fg+W0j98/a/cyijtqjxGqZ3x1Iyod+h+G OyX3KvIraHQjtk2/U0llruJabJiq/XmNLVKCWkftBEpxUuV1Q0z6WM2pSQXfggLK wGFAsfLoUt09qHaMfN71CX0SXWFCcTaKXCeJ+ZBdtdifdDz/FVTy73fmboKRjT2r Xhz7PyQ6T1nhSELjciY8/1PXHNobMOB0zLzSCmCKJK1kW6S5BgA6ztoYyeFLjRZL e+e3Y0O1TyCIcyhqbtSI4bPyr6qFOi/jatdI2xHtVRNnyFUu
=4U1x
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Am Thu, Oct 10, 2024 at 08:42:57AM +0200 schrieb Mechtilde Stehmann:

do you have an example to analyze the problem.

The problem is that it seems to happen only on my laptop. So you would
need to join me here on MiniDebConf in Cambridge and check. As I said
its happening on *any* repository - so you could take a random example.
:-(

I know this response is not helpful - but I have no idea how to answer
more sensibly.

Greetings from Cambridge
Andreas.


--
https://fam-tille.de

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On 10/10/2024 15:35, Andreas Tille wrote:

The problem is that it seems to happen only on my laptop.

Hi Andreas,

Whats the output of
cat ~/.gbp.conf


Regards,
Peter

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Am Thu, Oct 10, 2024 at 04:18:33PM +0100 schrieb Peter B:

Whats the output of
cat ~/.gbp.conf

Ahhhhh, well, that was the trigger I needed. Usually I had

pristine-tar = True

included but for whatever reason I removed it (assumed to do that
temporary - but simply forgot to add it). Re-added, fixed, thanks a lot

Andreas

--
https://fam-tille.de

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Oct 10, 2024 at 07:37:41PM +0500, Andrey Rakhmatullin wrote:

I was a happy user of pristine-tar for >10 years but since some time (about 2 months) I end up with brocken tarball checksums when doing `gbp
buildpackage` in *every* case.

Does it actually use pristine-tar?

I admit I can't say. The information is obtained from the pristine-tar branch. I simply assume gbp is calling pristine-tar.

You shouldn't assume but check whether it is calling it.

("you shouldn't assume" is a good generic advice in Debian packaging and
any kinds of troubleshooting in general)


--
WBR, wRAR

-----BEGIN PGP SIGNATURE-----

iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcH9ictFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh XrEP/jxlBtdihvmPdy5hilVwhR9kr80U2Oi3QnAJ3uRGAXmOcEWAOvOkyGppVexW juck9KFZSw9UpCtT3V+04b6k1T1Yw4F6ZoBSqNZe26e3Z3JC61TIdwTEz1dn+KvS nDZ7SGM4th/BuiIk+AVH89RQAOLokWW6hYt3Yd/9BC/b49RAnfx8qL3sm8qyGBKX FGv6WWLKx5vcIhvnTFn25+drEAQGQAOvAP4wHbmj1q0pv75Izxu/e3bDkpxEw62U /wK7Zb1e8R2ObxgvDKNdbeCPJ/hNaH0PG66gRfTwPhCyzpgXUylJ8+2hSahs4FpL FtkprB+0SCYOGt+daGLS9BDxOsoE+t/ZZOtJy0y7Egt7AkgTtwdM/GGr9/DOKHKA Xgh/W3nhjJtdHrCnOluZNtBiUUPs7fir4HyUBr3BLHP6OUeDtoY7wqueQ2k4XAlg ieY6ZvAp5Z3kTpkD/VhKvjQ3N0MYfoq5r15yDDcFBNIhGB4ymhfhwUBlfLHFWSOv WocmDJVkPWFZ+pEXyjmbI8vyBP4YUtwnOWdngq7CBstL09CxH2k36PTyat+yC4kG 1HVDtBhzFY0R7CssKqi4ENq/oLsrKSpoJ5FXZNT1GKZW0ZdxvQdndlWpzywRuzcP CWQOoaR38IVVOSO8cZ9YFk0H7LBn+gInSL2YyQty1LQrWpfb
=kdye
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Oct 10, 2024 at 05:32:13PM +0200, Andreas Tille wrote:

Whats the output of
cat ~/.gbp.conf

Ahhhhh, well, that was the trigger I needed. Usually I had

pristine-tar = True

I hold the strong opinion that this is bad and repos using pristine-tar
should have pristine-tar=True in debian/gbp.conf.
It is unlikely to be the consensus opinion.

--
WBR, wRAR

-----BEGIN PGP SIGNATURE-----

iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcH9fctFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh GZ8P/16//dG/1t0IVOqg1Uh2yhOt4sb7XWFU5xaR+NoviJmz8gNeywUEh+xnN1qq 9FGdfBPRR9wzmLawl7vMeGAeS9eKCju5hjRF6wiQ4ipdBHLfk1Do/XGaVC5jf5z+ aa4JuYjnuBS8SAB57zOOd0Yyo/lGxocn+obQgryIzNM9IMa6xUlArgpt2BrsjAeW S77FhO/sQaO3nqXyi3VLd25bKtB9uK3bXK697yqK9bFNJAgZ1W7y/12N2KFNFW0w 58LSDfJVP8tty5ZQT+nJqY+zFPLMtjFUgNCh4bhsFrpHtqzExfk2mbvQMQH5HMgF eBvYpsUjmFuFSFt9D9cDlO/rHnOfIGjsNc1hZpCeZ8PSIFble791AOls9zH/YmKj V1r/dE048gKeaxssLDafej47XoUyrAc9j/l44PlVHkR1gehweeY0OaPYlapIunsD +nf7gSYdi3yzMYL5iD6HrKBBjrwpsptGaYJxJfq81Z61swex/+8t279zrDbFZRPQ ll+0zW4YXr1ee+Wt+k5SdUbIhg83AxsgBIm2Hu5Eeo++eihv1DzHVRQDQvHRRlOT gznwu4I4N/ZLwaNF4MRwRVvGCOPulE1CjHMtMExTSafhkepTMikb1JWtt5z7bjrV iTPqLDmNOO+TytVbSYYudyFKZQ6amQJj/2Tg+VT6hZyXMaMk
=NBJR
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Am Thu, Oct 10, 2024 at 08:42:52PM +0500 schrieb Andrey Rakhmatullin:

Ahhhhh, well, that was the trigger I needed. Usually I had

pristine-tar = True

I hold the strong opinion that this is bad and repos using pristine-tar should have pristine-tar=True in debian/gbp.conf.
It is unlikely to be the consensus opinion.

It simply fits the policy of the teams I'm working in and thus was
sensible for me. I had removed for some package from somewhere else
(which proves your argument that there is no consensus).

Kind regards
Andreas.

--
https://fam-tille.de

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, Oct 10, 2024 at 05:49:13PM +0200, Andreas Tille wrote:

Ahhhhh, well, that was the trigger I needed. Usually I had

pristine-tar = True

I hold the strong opinion that this is bad and repos using pristine-tar should have pristine-tar=True in debian/gbp.conf.
It is unlikely to be the consensus opinion.

It simply fits the policy of the teams I'm working in and thus was
sensible for me.

As long as all people who work on those packages have it enabled
globally...

--
WBR, wRAR

-----BEGIN PGP SIGNATURE-----

iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmcH/aMtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh JDEP/19OOupVqoTblv60Ly2mmGfOeaggZtdFmvHCJeSsI7VZpmFwgdaLoCEkZ3eA sDu6avhY4b+uZ0/ac3Zja7R/xv8d2nr0MArdWfLYtWAOsaQseOanZiSqx88KttdO YCTh8T2C77yd1IBfevtFqCrlW/cg0qUh9xbHzX52avRcH73UrrDhJAL2cyC9b2C1 jkv51oPmkgL/hYYxO8cfCzznEr0eEy+qOffQ24o4sRKDHMF7BaXdgYxmB9RLyErR 8eq1gP/3VTbtR83OTXl8d/65D0B0YQ0sITevpkGrGM9R9EhJFGtWAip3Dvr0VnjA 0pHcXk6J8NggfdLADobZiL8PIUduQUV0CYCy7ALZ1fs3kNyoEkxCmBaLC07Izd2Z i9fxq/6UuSfq5VjgjPr6BMkda3xt+/TDP27swKFOBejbEPYVI8DnI5o4YxWTsjST h5XXmdL58LoJsqsieMQtJ3UhpkFo++tk1CuHPEiO3rRJNqjLlpYBNuHFkcFXW7Uq 9w7cg+/wHeKoxGlU3K9YJKmsftues8SFrqYILebL/90hFwEucgyjm1+4QP7p509J jxeU4Wm+TbBYoqC1j7WoGoNPAZpeJ/TZDkxCj8HAOjr/I7YckjWrH3ja7ApaWnps SetGjdD06rh8HpI3W/bAVqAgHjBy8VOVq8WuNZZ9NKUJugn/
=3Bud
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Am Thu, Oct 10, 2024 at 09:15:31PM +0500 schrieb Andrey Rakhmatullin:

As long as all people who work on those packages have it enabled
globally...

Its explicitly mentioned in our policy:

https://med-team.pages.debian.net/policy/


--
https://fam-tille.de

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)