Commits (3)
......@@ -3,7 +3,8 @@ layout: report
year: "2022"
month: "03"
title: "Reproducible Builds in March 2022"
draft: true
draft: false
date: 2022-04-08 08:14:15
---
[![]({{ "/images/reports/2022-03/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
......@@ -42,13 +43,13 @@ Kit Martin posted to the [FOSSA](https://fossa.com/) blog a post titled [*The Th
> It is one thing to talk about reproducible builds and how they strengthen software supply chain security, but it’s quite another to effectively configure a reproducible build. Concrete steps for specific languages are a far larger topic than can be covered in a single blog post, but today we’ll be talking about some guiding principles when designing reproducible builds. [[...](https://fossa.com/blog/three-pillars-reproducible-builds/)]
(The article was also [discussed on Hacker News](https://news.ycombinator.com/item?id=30604954).)
The article was [discussed on Hacker News](https://news.ycombinator.com/item?id=30604954).
<br>
[![]({{ "/images/reports/2022-03/werewolves.png#right" | relative_url }})](https://github.com/rajeshsola/gnu-hello/blob/master/tests/greeting-2#18)
Bernhard M. Wiedemann noticed that the GNU *Helloworld* project varies depending on whether it is being [built during a full moon](https://github.com/rajeshsola/gnu-hello/blob/master/tests/greeting-2#L18)! ([Reddit announcement](https://old.reddit.com/r/reproduciblebuilds/comments/tqrf9q/the_binary_that_varies_from_full_moon/), [openSUSE bug report](https://bugzilla.opensuse.org/show_bug.cgi?id=1197575))
Finally, Bernhard M. Wiedemann noticed that the GNU *Helloworld* project varies depending on whether it is being [built during a full moon](https://github.com/rajeshsola/gnu-hello/blob/master/tests/greeting-2#L18)! ([Reddit announcement](https://old.reddit.com/r/reproduciblebuilds/comments/tqrf9q/the_binary_that_varies_from_full_moon/), [openSUSE bug report](https://bugzilla.opensuse.org/show_bug.cgi?id=1197575))
<br>
......@@ -66,7 +67,7 @@ It was also recently announced that [DebConf22](https://debconf22.debconf.org/)
## Misc news
Holger Levsen updated the Reproducible Builds website to improve the [documentation for the `SOURCE_DATE_EPOCH` environment variable](FIXME), both by expanding parts of the existing text&nbsp;[[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/3764949f)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/013a11fb)] as well as clarifying meaning by removing text in other places&nbsp;[[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/8d3ecd99)]. In addition, Chris Lamb added a [Twitter Card](https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/abouts-cards) to [our website](https://reproducible-builds.org/)'s metadata too [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7153dab5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/0cd478a6)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/d08be58d)].
Holger Levsen updated the Reproducible Builds website to improve the [documentation for the `SOURCE_DATE_EPOCH` environment variable]({{ "/docs/source-date-epoch/" | relative_url }}), both by expanding parts of the existing text&nbsp;[[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/3764949f)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/013a11fb)] as well as clarifying meaning by removing text in other places&nbsp;[[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/8d3ecd99)]. In addition, Chris Lamb added a [Twitter Card](https://developer.twitter.com/en/docs/twitter-for-websites/cards/overview/abouts-cards) to [our website](https://reproducible-builds.org/)'s metadata too [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/7153dab5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/0cd478a6)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/d08be58d)].
On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) this month:
......