Commits (2)
......@@ -3,12 +3,15 @@ layout: report
year: "2022"
month: "07"
title: "Reproducible Builds in July 2022"
draft: true
draft: false
date: 2022-08-04 15:35:26
---
[![]({{ "/images/reports/2022-07/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
Welcome to the **July 2022** report from the [Reproducible Builds](https://reproducible-builds.org) project where we attempt to outline the most relevant things that have been going on in the past month. As a brief introduction, the reproducible builds effort is concerned with ensuring no flaws have been introduced during this compilation process by promising identical results are always generated from a given source, thus allowing multiple third-parties to come to a consensus on whether a build was compromised. As ever, if you are interested in contributing to the project, please visit our [*Contribute*]({{ "/contribute/" | relative_url }}) page on our website.
Welcome to the **July 2022** report from the [Reproducible Builds](https://reproducible-builds.org) project!
In our reports we attempt to outline the most relevant things that have been going on in the past month. As a brief introduction, the reproducible builds effort is concerned with ensuring no flaws have been introduced during this compilation process by promising identical results are always generated from a given source, thus allowing multiple third-parties to come to a consensus on whether a build was compromised. As ever, if you are interested in contributing to the project, please visit our [*Contribute*]({{ "/contribute/" | relative_url }}) page on our website.
<br>
......@@ -16,13 +19,15 @@ Welcome to the **July 2022** report from the [Reproducible Builds](https://repro
Despite several delays, we are pleased to announce that registration is open for our <a href="{{ "/events/venice2022/" | relative_url }}">in-person summit this year</a>:
<center>November 1st → November 3rd</center><br>
<big><center>November 1st → November 3rd</center></big><br>
The event will happen in **Venice (Italy)**. We intend to pick a venue reachable via the train station and an international airport. However, the precise venue will depend on the number of attendees.
The event will happen in Venice (Italy), and we intend to pick a venue reachable via the train station and an international airport. However, the precise venue will depend on the number of attendees. **Please see the [announcement email](https://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002666.html) for information about how to register.**
**Please see the [announcement email](https://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002666.html) for information about how to register.**
<br>
#### [*Is reproducibility practical?*](https://hpc.guix.info/blog/2022/07/is-reproducibility-practical/)
#### [Is reproducibility practical?](https://hpc.guix.info/blog/2022/07/is-reproducibility-practical/)
[![]({{ "/images/reports/2022-07/guix.png#right" | relative_url }})](https://hpc.guix.info/blog/2022/07/is-reproducibility-practical/)
......@@ -34,16 +39,6 @@ The post goes on to outlines the concept of reproducibility, situating examples
<br>
#### Mailing list
On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) this month:
* Roland Clobus posted his [*Eleventh status update about reproducible [Debian] live-build ISO images*](ttps://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002665.html), noting — amongst many other things! — that "all major desktops build reproducibly with *bullseye*, *bookworm* and *sid*."
* Santiago Torres-Arias [announced a Call for Papers (CfP)](https://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002651.html) for a new [SCORED](https://scored.dev/) conference, an "academic workshop around software supply chain security". As Santiago highlights, this new conference "invites reviewers from industry, open source, governement and academia to review the papers [and] I think that this is super important to tackle the supply chain security task".
<br>
#### [diffoscope](https://diffoscope.org)
[![]({{ "/images/reports/2022-07/diffoscope.png#right" | relative_url }})](https://diffoscope.org)
......@@ -70,6 +65,16 @@ On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/
<br>
#### Mailing list
On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) this month:
* Roland Clobus posted his [*Eleventh status update about reproducible [Debian] live-build ISO images*](ttps://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002665.html), noting — amongst many other things! — that "all major desktops build reproducibly with *bullseye*, *bookworm* and *sid*."
* Santiago Torres-Arias [announced a Call for Papers (CfP)](https://lists.reproducible-builds.org/pipermail/rb-general/2022-July/002651.html) for a new [SCORED](https://scored.dev/) conference, an "academic workshop around software supply chain security". As Santiago highlights, this new conference "invites reviewers from industry, open source, governement and academia to review the papers [and] I think that this is super important to tackle the supply chain security task".
<br>
#### Upstream patches
The Reproducible Builds project attempts to fix as many currently-unreproducible packages as possible. This month, however, we submitted the following patches:
......@@ -197,7 +202,7 @@ In addition, Vagrant Cascadian updated host keys for the `cbxi4pro0` and `wbq0`
#### Contact
If you are interested in contributing to the Reproducible Builds project, please visit our [*Contribute*](https://reproducible-builds.org/contribute/) page on our website. However, you can get in touch with us via:
As ever, if you are interested in contributing to the Reproducible Builds project, please visit our [*Contribute*](https://reproducible-builds.org/contribute/) page on our website. However, you can get in touch with us via:
* IRC: `#reproducible-builds` on `irc.oftc.net`.
......
images/reports/2022-07/guix.png

8.08 KB | W: | H:

images/reports/2022-07/guix.png

5.52 KB | W: | H:

images/reports/2022-07/guix.png
images/reports/2022-07/guix.png
images/reports/2022-07/guix.png
images/reports/2022-07/guix.png
  • 2-up
  • Swipe
  • Onion skin