Standalone

Use fatrace to record all file access during an sbuild run and find those build dependencies which have their files never needed. You need superuser privileges to run this script because of fatrace.

Run it like follows. In one terminal execute:

$ ./findunusedbd.sh

In another run sbuild like this:

$ sbuild \
	--chroot-setup-commands='/home/user/path/to/findunusedbd.sh chroot-setup' \
	--pre-realbuild-commands='/home/user/path/to/findunusedbd.sh pre-realbuild' \
	--post-realbuild-commands='/home/user/path/to/findunusedbd.sh post-realbuild'

This needs the --pre-realbuild-commands and --post-realbuild-commands to exist which can be added to sbuild by applying 0001-add-pre-realbuild-commands-and-post-realbuild-comman.patch to it.

Any unused dependencies can then be found by investigating the file unneededdepends.list.

Batch

The process can be automated for multiple packages by passing dsc files to run.sh:

$ ./run.sh ../mysources/*.dsc

This script will put the successful builds in buildsuccess.list and the found unused build dependencies as *.unusedbd for each dsc file in the current directory. A second pass on the successfully built dsc files will then check each of the found unused build dependencies for their validity by replacing them by an empty equivs package with no dependencies one after another. The results of that run are stored in *.unusedbd.real files for each dsc file in the current directory. The run.sh script expects to find findunusedbd.sh directly under /home. Best try this out in a chroot to not mess with the host system.

Schroot setup

Create the schroot:

$ sudo sbuild-createchroot --make-sbuild-tarball=/var/lib/sbuild/sid-amd64.tar.gz sid `mktemp -d` http://127.0.0.1:3142/snapshot.debian.org/archive/debian/20140601T000000Z

Enter the schroot:

$ sbuild-shell source:sid-amd64-sbuild

Make apt ignore the Valid-Until header:

$ echo 'Acquire::Check-Valid-Until "false";' > /etc/apt/apt.conf.d/80-nocheckvaliduntil

Install equivs:

$ apt-get install equivs --no-install-recommends

Bugs

• when investigating which build dependencies are unused, virtual packages are not taken into account
• maybe the fake equivs package can be built outside the schroot to avoid the additional dependencies for installing equivs

License

Consider everything in this repository in the public domain. It is a gross hack and I do not care what you do with it.