90.md 6.84 KB
Newer Older
1
---
2
layout: new/blog
3
week: 90
4
published: 2017-01-18 21:01:19
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55
---

What happened in the [Reproducible
Builds](https://wiki.debian.org/ReproducibleBuilds) effort between Sunday
January 8 and Saturday January 14 2017:


Upcoming Events
---------------

- [The Reproducible Build
  Zoo](https://openiotelcna2017.sched.com/event/9Iu4/the-reproducible-build-zoo-vagrant-cascadian-aikidev-llc)
  will be presented by Vagrant Cascadian at the Embedded Linux
  Conference in Portland, Oregon, February 22nd

- Dennis Gilmore and Holger Levsen will present about "Reproducible Builds and
  Fedora" at [Devconf.cz](https://devconf.cz/) on February, 27th.

- [Introduction to Reproducible Builds](https://www.socallinuxexpo.org/scale/15x/presentations/introduction-reproducible-builds)
  will be presented by Vagrant Cascadian at Scale15x in Pasadena, California,
  March 5th


Reproducible work in other projects
-----------------------------------

Reproducible Builds have been mentioned in the [FSF high-priority project
list](https://www.fsf.org/campaigns/priority-projects/security-by-and-for-free-software).

The [F-Droid Verification Server](https://verification.f-droid.org/) has been
launched. It rebuilds apps from source that were built by
[f-droid.org](https://f-droid.org/) and checks that the results match.

Bernhard M. Wiedemann [did some more work](
https://lists.opensuse.org/opensuse-factory/2017-01/msg00120.html) on
reproducibility for openSUSE.

[Bootstrappable.org](http://bootstrappable.org) (unfortunately no HTTPS yet)
was launched after the initial work was started at our recent summit in Berlin.
This is another topic related to reproducible builds and both will be needed in
order to perform "Diverse Double Compilation" in practice in the future.


Toolchain development and fixes
-------------------------------

Ximin Luo researched data formats for `SOURCE_PREFIX_MAP` and explored
different options for encoding a map data structure in a single environment
variable. He also continued to talk with the [rustc
team](https://github.com/rust-lang/rust/pull/38348) on the topic.

56
Daniel Shahaf filed [#851225](https://bugs.debian.org/851225) ('udd: patches: index by DEP-3 "Forwarded"
57 58
status') to make it easier to track our patches.

59
Chris Lamb forwarded [#849972](https://bugs.debian.org/849972) upstream to
60 61 62 63 64 65 66 67 68 69 70 71 72 73 74
[yard](https://github.com/lsegal/yard/pull/1048), a Ruby documentation
generator. Upstream has fixed the issue as of [release
0.9.6](https://github.com/lsegal/yard/issues/1049).

Alexander Couzens (lynxis) [has made `mksquashfs`
reproducible](https://github.com/squashfs-tools/squashfs-tools) and is
[looking for testers](https://lunarius.fe80.eu/blog/mksquash-dot-graph.html).
It compiles on BSD systems such as FreeBSD, OpenBSD and NetBSD.


Bugs filed
----------

Chris Lamb:

75
* [#850683](https://bugs.debian.org/850683) filed against [gerbv](https://tracker.debian.org/pkg/gerbv).
76 77 78

Lucas Nussbaum:

79
* [#850973](https://bugs.debian.org/850973) filed against [shogun](https://tracker.debian.org/pkg/shogun).
80 81 82

Nicola Corna:

83
* [#851190](https://bugs.debian.org/851190) filed against [gerbv](https://tracker.debian.org/pkg/gerbv).
84 85 86 87 88 89 90 91 92 93 94


Reviews of unreproducible packages
----------------------------------

13 package reviews have been added and 13 have been removed in this week,
adding to our knowledge about [identified
issues](https://tests.reproducible-builds.org/debian/index_issues.html).

1 issue type has been added:

95
- [help2man_puts_traceback_in_generated_man_page](https://tests.reproducible-builds.org/issues/unstable/help2man_puts_traceback_in_generated_man_page_issue.html)
96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124


Weekly QA work
--------------

During our reproducibility testing, the following FTBFS bugs have been detected
and reported by:

 - Chris Lamb (3)
 - Lucas Nussbaum (11)
 - Nicola Corna (1)


diffoscope development
----------------------

<img style="margin-top: 10px; vertical-align: top;"
src="/blog/images/diffoscope_bugs_2016.png" alt="Bugs in diffoscope in the last
year" />

Many bugs [were opened in
diffoscope](https://qa.debian.org/data/bts/graphs/d/diffoscope.png) during the
past few weeks, which probably is a good sign as it shows that diffoscope is
much more widely used than a year ago. We have been working hard to squash many
of them in time for Debian stable, though we will see how that goes in the end…

- Mattia Rizzolo:
  - Code quality and style improvements.
- Maria Glukhova:
125
  - [Add image metadata comparison.](https://salsa.debian.org/reproducible-builds/diffoscope/commit/06e4ca7)
126 127 128
  - [Zipinfo included in APK files comparison.
    (Closes: #850502)](https://anonscm.debian.org/git/reroducible/diffoscope.git/commit/?id=9749aa9)
  - [Remove archive name from apktool.yml and rename it.
129
    (Closes: #850501)](https://salsa.debian.org/reproducible-builds/diffoscope/commit/b85e785)
130 131
- Chris Lamb:
  - [Correctly escape value of href="" elements
132
    (re. #849411)](https://salsa.debian.org/reproducible-builds/diffoscope/commit/483ec03)
133
  - [Support comparing .ico files using img2txt
134
    (Closes: #850730)](https://salsa.debian.org/reproducible-builds/diffoscope/commit/f311a6d)
135 136 137
    and fixes and extra tests in subsequent commits.
  - [comparators.utils.file: Include magic file type when we know the file
    format but can't find file-specific details.
138
    (Closes: #850850)](https://salsa.debian.org/reproducible-builds/diffoscope/commit/3131f5e)
139 140 141 142 143 144 145
  - And other code quality and style improvements.


reproducible-website development
--------------------------------

- Daniel Shahaf:
146
  - [Add how-to-chair-a-meeting.md.](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/dc36fbb)
147 148
- Holger Levsen:
  - [Add links to reports by several attendees of
149
    berlin2016](https://salsa.debian.org/reproducible-builds/reproducible-website.git/log/?id=d7745a2)
150 151 152 153 154 155 156 157 158 159 160


tests.reproducible-builds.org
-----------------------------

- Ximin Luo and Holger Levsen worked on stricter tests to check that `/dev/shm`
  and `/run/shm` are both mounted with the correct permissions. Some of our
  build machines currently still fail this test, and the problem is probably
  the [root cause of the
  FTBFS](https://tests.reproducible-builds.org/debian/issues/unstable/ftbfs_due_to_jenkins_semaphore_setup_issue.html)
  of some packages (which fails with issues regarding `sem_open`).  The proper
161
  fix is still being discussed in [#851427](https://bugs.debian.org/851427).
162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178

- Valerie Young worked on creating and linking
  [autogenerated schema
  documentation](https://tests.reproducible-builds.org/reproducibledb.html) for
  our database used to store the results.

- Holger Levsen added a [graph with diffoscope crashes and
  timeouts](https://tests.reproducible-builds.org/debian/stats_breakages.png).

- Holger also further improved the daily mail notifications about problems.


Misc.
-----

This week's edition was written by Ximin Luo, Chris Lamb and Holger Levsen and reviewed by a
bunch of Reproducible Builds folks on IRC & the mailing lists.