From: Peter Wu <peter@lekensteyn.nl>
Date: Mon, 20 Jan 2020 22:32:15 +0000 (+0000)
Subject: [Minor] Debian: set fixfilepath reproducible build option
X-Git-Tag: 2.3~71^2~6
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=a91a3bc6e0a94ff8ba807590983c4af789aa7022;p=thirdparty%2Frspamd.git

[Minor] Debian: set fixfilepath reproducible build option

* Enable -ffile-prefix-map to ensure that assert statements in
  contrib/libev/ev.c and other places do not store the full file path.
  This ensures reproducible builds, invariant of the build directory.
  Supported since dpkg 1.19.1, including Debian buster and Ubuntu 19.04.
* Enable all hardening features while at it, this adds bindnow only. See
  https://manpages.debian.org/buster/dpkg-dev/dpkg-buildflags.1.en.html
---

diff --git a/debian/rules b/debian/rules
index b3a0feafcf..42f98643bd 100755
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all reproducible=+fixfilepath
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
 export ASAN_OPTIONS=detect_leaks=0