Commit ee96b06a authored by Chris Lamb's avatar Chris Lamb 💬

204: Initial draft.

parent b4c293ce
......@@ -3,14 +3,56 @@ layout: new/blog
week: 204
---
* [FIXME](https://github.com/akka/akka/pull/26546)
Here's what happened in the [Reproducible Builds](https://reproducible-builds.org) effort between Sunday March 17 and Saturday March 23 2019:
* [FIXME](https://github.com/DataBiosphere/toil/pull/2563)
* On [our mailing list](https://lists.reproducible-builds.org/pipermail/rb-general/) this week, Mike Miller started a discussion around [development toolchains embedding compiler options in binares](https://lists.reproducible-builds.org/pipermail/rb-general/2019-March/001503.html). This can result in unreproducible builds, ironically caused by [GCC flags](https://gcc.gnu.org/onlinedocs/gcc/Overall-Options.html) that were intended to remove non-deterministic behaviour in the first place (eg. `-fdebug-prefix-map` and `-ffile-prefix-map`).
* [FIXME](https://twitter.com/zbeekman/status/1108797038274199556)
* [Arnout Engelen](https://arnout.engelen.eu/) proposed [a pull request](https://github.com/akka/akka/pull/26546) for the [akka](https://akka.io/) Java-based messaging/build framework to include a reproducible builds plugin which was subsequently merged.
* [Izaak "Zaak" Beekman](https://izaakbeekman.com/) announced that the 2.6.1 [OpenCorrays](http://www.opencoarrays.org/) parallelism library for Fortran 2018 compilers now [supports reproducible builds](https://github.com/sourceryinstitute/opencoarrays/releases/tag/2.6.1).
* David Prévot updated the [reproducible-builds.org project website](https://reproducible-builds.org) to specify that the PHP example for `SOURCE_DATE_EPOCH` uses an integer type as expected in strict mode. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/9db5438)]
* 17 Debian package reviews were added, 2 were updated and 9 were removed in this week, adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). Chris Lamb identified and categorised four new issues,[`build_path_in_typelib_files_generated_by_gir_compiler`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/a1697857), [`build_path_in_qdoc`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/3d6b96da), [`bundle_name_in_java_manifest_mf`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/0a6bebbb) and [`randomness_in_prolog_saved_stage`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/23bc637f).
## diffoscope development
[![]({{ "/images/blog/202/diffoscope.svg" | prepend: site.baseurl }})](https://diffoscope.org)
[diffoscope](https://diffoscope.org/) is our in-depth "diff-on-steroids" utility which helps us diagnose reproducibility issues in packages. This week:
* Chris Lamb:
* Always warn if the `tlsh` module is not available (not just if a specific fuzziness threshold is specified) to match the epilog of the `--help` output. This prevents missing support for file rename detection. ([#29](https://salsa.debian.org/reproducible-builds/diffoscope/issues/29))
* Fix a number of tests when using GhostScript `9.20` vs `9.26` for Debian `stable` vs. the same distribution with the security/point release applied. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/8c7b085)]
* Mattia Rizzolo:
* Ignore the version mismatch detection when building backport. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/f23e04d)]
* Make test\_ps.test\_text\_diff pass with ghostscript 9.26. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/a5426f7)]
* Milena Boselli Rosa:
* Remove the `type` HTML attribute from `style` elements. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/fc082d2)]
* Prevent empty values for the `name` attribute name on HTML anchor tags and add an `id` to its parent `div` container. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/41968b8)]
* Fix a *Text run is not in Unicode Normalization Form C* HTML validation warning. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/92385ce)]
* Fix a *Table column x established by element 'col' has no cells beginning in it* HTML validation error. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/951bcaf)]
## Packages reviewed and fixed, and bugs filed
* Bernhard M. Wiedemann:
* [libqt5-qtdeclarative](https://bugreports.qt.io/browse/QTBUG-74532) (ASLR / uninitialized memory written to output file)
* [libqt5-qtdeclarative](https://bugreports.qt.io/browse/QTBUG-74532) ([ASLR](https://en.wikipedia.org/wiki/Address_space_layout_randomization) / uninitialised memory written to output file)
* [Chris Lamb](https://chris-lamb.co.uk/):
* [#925191](https://bugs.debian.org/925191) filed against [toil](https://tracker.debian.org/pkg/toil) ([filed and merged upstream](https://github.com/DataBiosphere/toil/pull/2563))
* [#925192](https://bugs.debian.org/925192) filed against [libappindicator](https://tracker.debian.org/pkg/libappindicator).
## Test framework development
We operate a comprehensive [Jenkins](https://jenkins.io/)-based testing framework that powers [tests.reproducible-builds.org](https://tests.reproducible-builds.org). This week, Mattia Rizzolo:
* Fixed the `dsa-check-running-kernel` script after [Ubuntu](https://ubuntu.com] updated their packages. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f94d787c)]
* Do not blindly forward the `jenkins@` emails, otherwise [procmail](http://www.procmail.org/) cannot filter them (breaking our `email2irc` script). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/12fa047e)]
* Gave Vagrant Cascadian root everywhere. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a170f7ee)]
---
This week's edition was written by Bernhard M. Wiedemann, [Chris Lamb](https://chris-lamb.co.uk/) & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<!-- Created with Inkscape (http://www.inkscape.org/) -->
<svg
xmlns:dc="http://purl.org/dc/elements/1.1/"
xmlns:cc="http://creativecommons.org/ns#"
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
xmlns:svg="http://www.w3.org/2000/svg"
xmlns="http://www.w3.org/2000/svg"
xmlns:xlink="http://www.w3.org/1999/xlink"
version="1.1"
width="128"
height="128"
id="svg2">
<defs
id="defs4" />
<metadata
id="metadata7">
<rdf:RDF>
<cc:Work
rdf:about="">
<dc:format>image/svg+xml</dc:format>
<dc:type
rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
<dc:title></dc:title>
</cc:Work>
</rdf:RDF>
</metadata>
<g
transform="matrix(1.0692573,0,0,1.0692573,-328.34726,-503.5515)"
id="layer1">
<g
id="g5409">
<g
transform="translate(5.418238,0)"
id="g5386">
<rect
width="90.304001"
height="50.999996"
x="316.36414"
y="472.80621"
id="rect4667-3"
style="fill:none;stroke:none" />
<g
id="text4673-8"
style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
<path
d="m 316.36413,483.82622 0,3.968 26.304,0 0,-3.968"
id="path5371"
style="fill:#c00000;fill-opacity:1" />
<path
d="m 348.36413,483.82622 0,3.968 26.304,0 0,-3.968"
id="path5373"
style="fill:#c00000;fill-opacity:1" />
<path
d="m 380.36413,483.82622 0,3.968 26.304,0 0,-3.968"
id="path5375"
style="fill:#c00000;fill-opacity:1" />
</g>
<g
id="text5366"
style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
<path
d="m 327.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
id="path5378" />
<path
d="m 359.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
id="path5380" />
<path
d="m 391.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
id="path5382" />
</g>
</g>
<use
id="use5399"
x="0"
y="0"
width="744.09448"
height="1052.3622"
xlink:href="#g5386" />
<use
transform="matrix(0.8,0,0,0.8,82.417275,133.65028)"
id="use5401"
style="opacity:0.85"
x="0"
y="0"
width="744.09448"
height="1052.3622"
xlink:href="#g5386" />
<use
transform="matrix(0.6,0,0,0.6,164.83455,260.05454)"
id="use5403"
style="opacity:0.7"
x="0"
y="0"
width="744.09448"
height="1052.3622"
xlink:href="#g5386" />
<use
transform="matrix(0.4,0,0,0.4,247.25182,379.25208)"
id="use5405"
style="opacity:0.55"
x="0"
y="0"
width="744.09448"
height="1052.3622"
xlink:href="#g5386" />
</g>
</g>
</svg>
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment