From a91a3bc6e0a94ff8ba807590983c4af789aa7022 Mon Sep 17 00:00:00 2001 From: Peter Wu Date: Mon, 20 Jan 2020 22:32:15 +0000 Subject: [PATCH] [Minor] Debian: set fixfilepath reproducible build option * Enable -ffile-prefix-map to ensure that assert statements in contrib/libev/ev.c and other places do not store the full file path. This ensures reproducible builds, invariant of the build directory. Supported since dpkg 1.19.1, including Debian buster and Ubuntu 19.04. * Enable all hardening features while at it, this adds bindnow only. See https://manpages.debian.org/buster/dpkg-dev/dpkg-buildflags.1.en.html --- debian/rules | 1 + 1 file changed, 1 insertion(+) diff --git a/debian/rules b/debian/rules index b3a0feafc..42f98643b 100755 --- a/debian/rules +++ b/debian/rules @@ -1,5 +1,6 @@ #!/usr/bin/make -f +export DEB_BUILD_MAINT_OPTIONS = hardening=+all reproducible=+fixfilepath export DEB_LDFLAGS_MAINT_APPEND = -Wl,--as-needed export ASAN_OPTIONS=detect_leaks=0 -- 2.39.5