Commit 24cfbf09 authored by Jelle van der Waa's avatar Jelle van der Waa

2019-06: initial commit

Add progress during mini debconf Hamburg
parent 34dc8354
Pipeline #49968 passed with stage
in 2 minutes and 36 seconds
---
layout: new/report
year: "2019"
month: "06"
title: "Reproducible Builds in June 2019"
draft: true
---
## Mini DebConf Hamburg Sprint
kpcyrd, lynxis, Holger Levsen and Jelle van der Waa attended [mini DebConf Hamburg](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg) and worked on reproducible builds.
* Jelle van der Waa
* Improved the [reproducible_json.py script](https://salsa.debian.org/qa/jenkins.debian.net/commit/20a7b86ce0a26bd8f8718478c8e8a1612c0af87e) to generate distro specific JSON which lead to the availability of an [Arch Linux JSON](https://tests.reproducible-builds.org/archlinux/reproducible.json) file.
* Investigated why the Arch Linux kernel package is not reproducible and found out that ```KBUILD_BUILD_HOST```, ```KGBUILD_BUILD_TIMESTAMP``` should be set. The enabling of ```CONFIG_MODULE_SIG_ALL``` causes the kernel modules to be signed with an at build time created key if non is provided which leads to unreproducibility.
* [keyutils](https://www.archlinux.org/packages/core/x86_64/keyutils/) was fixed for embedding the build date in it's binary with this [patch](https://pkgbuild.com/~jelle/0001-Make-keyutils-reproducible.patch)
* [nspr](https://www.archlinux.org/packages/core/x86_64/nspr/) has been made reproducible in Arch Linux with the follow ing [change](https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/nspr&id=3696d15bba92ea14931f842b27654e318055e532)
* kpcyrd
* Created a Jenkins [job](https://jenkins.debian.net/view/All/job/reproducible_setup_schroot_alpine_jenkins/) to generate an Alpine build chroot
* Created a Jenkins [job](https://jenkins.debian.net/view/All/job/reproducible_alpine_scheduler/) to schedule new Alpine packages
* Created a Jenkins [job](https://jenkins.debian.net/job/reproducible_builder_alpine_1/) for building Alpine packages
* Provided a proof of concept [patch](https://gitlab.com/kpcyrd/abuild/commit/ea1c11811eaf0a98b5b8ab9c57574a9895d56454.patch) to make abuild respect SOURCE_DATE_EPOCH when creating Alpine packages files.
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment