[Minor] Debian: set fixfilepath reproducible build option

* Enable -ffile-prefix-map to ensure that assert statements in
  contrib/libev/ev.c and other places do not store the full file path.
  This ensures reproducible builds, invariant of the build directory.
  Supported since dpkg 1.19.1, including Debian buster and Ubuntu 19.04.
* Enable all hardening features while at it, this adds bindnow only. See
  https://manpages.debian.org/buster/dpkg-dev/dpkg-buildflags.1.en.html

diff --git a/debian/rules b/debian/rules
index b3a0feafcf70756fcb9892e2ade5c96ccdbf7155..42f98643bd4053bfd07cae312252b9bfd7d6ca7e 100755 (executable)
--- a/debian/rules
+++ b/debian/rules
@@ -1,5 +1,6 @@
 #!/usr/bin/make -f
 
+export DEB_BUILD_MAINT_OPTIONS = hardening=+all reproducible=+fixfilepath
 export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed
 export ASAN_OPTIONS=detect_leaks=0