Skip to content
Commits on Source (2)
......@@ -47,7 +47,7 @@ event_summary: A three-day workshop to continue and grow the Reproducible Builds
<ul>A number of reports have been published:
<li><a href="{{ "/events/paris2018/report/" | prepend: site.baseurl }}"> Meeting report by Aspiration</a> (HTML version)</li>
<li><a href="/files/ReproducibleSummit4EventDocumentation.pdf">Meeting report by Aspiration</a> (PDF version)</li>
<li>Bernhard Wiedermann wrote <a href="https://lizards.opensuse.org/2018/12/17/report-from-the-reproducible-builds-summit-2018/">a report on his experience</a>.</li>
<li>Bernhard M. Wiedemann wrote <a href="https://lizards.opensuse.org/2018/12/17/report-from-the-reproducible-builds-summit-2018/">a report on his experience</a>.</li>
<li>Jelle van der Waa published a blog post with <a href="https://vdwaa.nl/arch-reproducible-build-summit-18.html#arch-reproducible-build-summit-18">a brief report of the event from an Arch Linux perspective</a>.</li>
<li><a href="https://discourse.nixos.org/t/reproducible-builds-summit-report/1683/2">reports from the Nix developers</a> zimbatm, Profpatsch and lewo.</a></li>
<li>Lukas Pühringer posted a report from the <a href="https://ssl.engineering.nyu.edu/blog/2019-01-18-in-toto-paris">in-toto project's participation</a>.</li>
......
......@@ -3170,7 +3170,7 @@ Links:
Profile guided optimization are currently unreproducible and for Arch
Linux enabled for some packages such as Firefox. Python.
Bernard has written an example of unreproducible PGO, and has actually
Bernhard has written an example of unreproducible PGO, and has actually
fixed PGO issues for some packages.
[build.opensuse.org/request/show/647618](https://build.opensuse.org/request/show/647618)
......
......@@ -26,7 +26,7 @@ In this month's report, we will cover:
## Media coverage
* Jospeh Devietti from [Cloudseal](https://www.cloudseal.io) published a post titled [*An introduction to reproducible builds*](https://www.cloudseal.io/blog/2019-05-15-introduction-to-reproducible-builds) on their blog, noting that:
* Joseph Devietti from [Cloudseal](https://www.cloudseal.io) published a post titled [*An introduction to reproducible builds*](https://www.cloudseal.io/blog/2019-05-15-introduction-to-reproducible-builds) on their blog, noting that:
> One key motivation for reproducible builds is to enable peak efficiency for the build caches used in modern build systems.
......@@ -48,7 +48,7 @@ There were a number of events that included or incorporated members of the Repro
Holger Levsen, Jelle van der Waa, *kpcyrd* and Alexander Couzens attended [MiniDebConf Hamburg 2019](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg) and worked on Reproducible Builds.
Holger gave a status update on the Project with a talk entited [*Reproducible Builds aiming for bullseye*](https://www.youtube.com/watch?v=vQv4fxDMMPs), referring to the [next Debian release name](https://lists.debian.org/debian-devel-announce/2016/07/msg00002.html):
Holger gave a status update on the Project with a talk entitled [*Reproducible Builds aiming for bullseye*](https://www.youtube.com/watch?v=vQv4fxDMMPs), referring to the [next Debian release name](https://lists.debian.org/debian-devel-announce/2016/07/msg00002.html):
[![]({{ "/images/reports/2019-06/aimingforbullseye.png#center" | prepend: site.baseurl }})](https://www.youtube.com/watch?v=vQv4fxDMMPs)
......@@ -65,7 +65,7 @@ As part of various hacking sessions:
* Jelle van der Waa:
* Improved the [`reproducible_json.py` script](https://salsa.debian.org/qa/jenkins.debian.net/commit/20a7b86ce0a26bd8f8718478c8e8a1612c0af87e) to generate distribution-specific JSON, leading to the availability of an [ArchLinux JSON file](https://tests.reproducible-builds.org/archlinux/reproducible.json).
* Investigated why the [Arch Linux](https://www.archlinux.org/) kernel package is not reproducible, finding out that `KBUILD_BUILD_HOST` and `KGBUILD_BUILD_TIMESTAMP` should be set. The enabling of `CONFIG_MODULE_SIG_ALL` causes the kernel modules to be signed with a (non-determinstic) build-time key if none is provided, leading to unreproducibility.
* Investigated why the [Arch Linux](https://www.archlinux.org/) kernel package is not reproducible, finding out that `KBUILD_BUILD_HOST` and `KGBUILD_BUILD_TIMESTAMP` should be set. The enabling of `CONFIG_MODULE_SIG_ALL` causes the kernel modules to be signed with a (non-deterministic) build-time key if none is provided, leading to unreproducibility.
* [keyutils](https://www.archlinux.org/packages/core/x86_64/keyutils/) was fixed with respect to it embedding the build date in its binary.&nbsp;[[...](https://pkgbuild.com/~jelle/0001-Make-keyutils-reproducible.patch)]
* [nspr](https://www.archlinux.org/packages/core/x86_64/nspr/) was made reproducible in Arch Linux.&nbsp;[[...](https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/nspr&id=3696d15bba92ea14931f842b27654e318055e532)]
......@@ -79,7 +79,7 @@ As part of various hacking sessions:
* Migrated the OpenWrt package parser to use Python 3.x as [Python 2.x will be reaching end-of-life](https://pythonclock.org/) at the end of this year.
* Setup a test environment using a new `README.development` file.
Holger Levsen was on hand to review and merge all the above commits, providing support and insight into the the codebase. He additionally split out a a `README.development` from the regular, more-generic `README` file.
Holger Levsen was on hand to review and merge all the above commits, providing support and insight into the codebase. He additionally split out a `README.development` from the regular, more-generic `README` file.
### OpenWrt summit
......@@ -206,7 +206,7 @@ In addition, Atharva Lele added the [Buildroot](https://buildroot.org/) embedded
Chris Lamb spent significant time working on [`buildinfo.debian.net`](https://buildinfo.debian.net), his experiment into how to process, store and distribute `.buildinfo` files after the Debian archive software has processed them. This included:
* Started making the move to Python 3.x (and [Django](https://www.djangoproject.com/) 2.x) [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ef866349fab43000abd6e6115b1120e035f33bf9)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c44c2eaf52defa599a67d1bc02e2e4a58a386e6e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/d27540daeedab116f09e52e4bb186b97861e5d0e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/9a68e9ab1aa13dd8550833dcab924c8818d3277f)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ec475c64274e88244661f3f76374f453b562276c)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c46e48bd52a89b0839a4a17728d6dd96be8a1bc5)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/0dcac1d682b151092bd2988b0bc442508c8bda17)], additionally performing a large number of adjacent cleanups including dropping the authentication framework [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/961be8b0b935f84f3c67804453c1508ff1751a5f)], fixing a number of [flake8](http://flake8.pycqa.org/) warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6f1257b82c89c639ec694c37d7aa6d76fcae38be)], adding a `setup.cfg` to silence some warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/fc7bbc25b163c05a8ef1e74b3a77bf94a40ab30c)], moving to `__str__` and `str.format(...)` over `%`-style interpolation and `u"unicode"` strings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/afc77977fa2ad376f828009f532be2581e3bd9b7)], etc.
* Started making the move to Python 3.x (and [Django](https://www.djangoproject.com/) 2.x) [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ef866349fab43000abd6e6115b1120e035f33bf9)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c44c2eaf52defa599a67d1bc02e2e4a58a386e6e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/d27540daeedab116f09e52e4bb186b97861e5d0e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/9a68e9ab1aa13dd8550833dcab924c8818d3277f)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ec475c64274e88244661f3f76374f453b562276c)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c46e48bd52a89b0839a4a17728d6dd96be8a1bc5)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/0dcac1d682b151092bd2988b0bc442508c8bda17)], additionally performing a large number of adjacent cleanups including dropping the authentication framework [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/961be8b0b935f84f3c67804453c1508ff1751a5f)], fixing a number of [flake8](http://flake8.pycqa.org/) warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6f1257b82c89c639ec694c37d7aa6d76fcae38be)], adding a `setup.cfg` to silence some warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/fc7bbc25b163c05a8ef1e74b3a77bf94a40ab30c)], moving to `__str__` and `str.format(...)` over `%`-style interpolation and `u"Unicode"` strings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/afc77977fa2ad376f828009f532be2581e3bd9b7)], etc.
* Adding a number of (as-yet unreleased…) features, including caching the expensive landing page queries. [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/79f5e03946b8550ed41bdee5d811ef6ae846ba52)]
......@@ -221,7 +221,7 @@ We operate a comprehensive [Jenkins](https://jenkins.io/)-based testing framewor
* Alexander Couzens ([OpenWrt](https://openwrt.org)):
* Rewrite the database interaction routines for [OpenWrt](https://openwrt.org/).&nbsp;[[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/380d632b)]
* Migrated the OpenWrt package parser to use Python 3.x as [Python 2.x will be reaching end-of-life](https://pythonclock.org/) at the end of this year.&nbsp;[[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/23a2c60e)]
* Use `IGNORE_ERRORS=n y m` similiar to [Buildbot](https://buildbot.net/).&nbsp;[[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/961e44ec)]
* Use `IGNORE_ERRORS=n y m` similar to [Buildbot](https://buildbot.net/).&nbsp;[[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/961e44ec)]
* Holger Levsen:
* Show [Alpine](https://alpinelinux.org/)-related jobs on the job health page.&nbsp;[[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f3d0a03a)]
......@@ -278,4 +278,4 @@ If you are interested in contributing the Reproducible Builds project, please vi
---
This month's report was written by Bernhard M. Wiedeman, Chris Lamb, Holger Levsen, Jelle van der Waa, *kpcyrd* & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.
This month's report was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Jelle van der Waa, *kpcyrd* & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.