Commit 2886db09 authored by Bernhard M. Wiedemann's avatar Bernhard M. Wiedemann

2019-05: extend 5 FIXMEs

parent 0447204e
Pipeline #47634 passed with stage
in 2 minutes and 45 seconds
......@@ -7,21 +7,20 @@ draft: true
title: "Reproducible builds in May 2019"
---
* [FIXME](https://salsa.debian.org/salsa-ci-team/pipeline/merge_requests/74)
* Luca Boccassi [proposed a change](https://salsa.debian.org/salsa-ci-team/pipeline/merge_requests/74) to repotest to not use the `nocheck` option to make more reproducibility issues visible.
* Vagrant Cascadian [submitted a patch to u-boot](https://patchwork.ozlabs.org/patch/1093969/) fixing reproducibility when building a new type of compressed image.
* [GNU Guix 1.0.0 released](https://www.gnu.org/software/guix/blog/2019/gnu-guix-1.0.0-released/)
* [FIXME](https://www.wired.com/story/barium-supply-chain-hackers/)
* [FIXME](https://www.wired.com/story/barium-supply-chain-hackers/) wired reporting: A single group of hackers appears responsible for supply chain hacks of CCleaner, Asus, and more, planting backdoors on millions of machines.
* [FIXME](https://twitter.com/bengerman13/status/1124782596582518784)
* [FIXME](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/AMO/Policy/Reviews-2019-05) Mozilla Add-on Policies effective 2019-06-10 state: Add-ons may contain transpiled, minified or otherwise machine-generated code, but Mozilla needs to review a copy of the human-readable source code. The author must provide this information to Mozilla during submission along with instructions on how to reproduce the build.
* [FIXME](https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/AMO/Policy/Reviews-2019-05)
* [FIXME](https://www.youtube.com/watch?v=wRHi8Ui5vWA) PyCon 2019 talk: Building reproducible Python applications for secured environments
* [FIXME](https://twitter.com/bengerman13/status/1124782596582518784) also mentioned on twitter
* [FIXME](https://www.youtube.com/watch?v=wRHi8Ui5vWA)
* [FIXME](https://summerofcode.withgoogle.com/projects/#5992608243908608)
* [FIXME](https://summerofcode.withgoogle.com/projects/#5992608243908608) Atharva Lele is going to work on reproducible builds for [buildroot](https://buildroot.org/) as part of Google Summer of Code.
* lists.r-b.o changed home; thanks to [potager.org](https://potager.org/) for hosting us all this time. Also many thanks to Profitbricks for hosting our new mailserver, mail.r-b.o.
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment