Skip to content
Snippets Groups Projects
Commit 94e38848 authored by Philip Rinn's avatar Philip Rinn Committed by Chris Lamb
Browse files

Import first 47 weekly reports (closes #60)

Migrate the first 47 weekly reports from Lunars personal web space to reproducible-builds.org.
Converted from HTML. Date published is 'Last edited' timestamp in CE[S]T.
parent 0c422b97
No related branches found
No related tags found
No related merge requests found
Pipeline #764912 skipped
Showing with 4691 additions and 0 deletions
This diff is collapsed.
This diff is collapsed.
This diff is collapsed.
---
layout: blog
week: 12
published: 2015-07-26 17:41:53
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
Eric Dorlan uploaded
[automake-1.15](https://tracker.debian.org/automake-1.15)/1:1.15-2 which makes
the output of `mdate-sh` deterministic. [Original
patch](https://bugs.debian.org/782345) by Reiner Herrmann.
Kenneth J. Pronovici uploaded
[epydoc](https://tracker.debian.org/epydoc)/3.0.1+dfsg-8 which now honors
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal).
[Original patch](https://bugs.debian.org/790899) by Reiner Herrmann.
Chris Lamb [submitted a patch](https://bugs.debian.org/792436) to [dh-
python](https://tracker.debian.org/dh-python) to make the order of the
generated maintainer scripts deterministic. Chris also [offered a
fix](https://bugs.debian.org/792491) for a source of non-determinism in [dpkg-
shlibdeps](https://manpage.debian.org/dpkg-shlibdeps) when packages have
alternative dependencies.
Dhole [provided a patch](https://bugs.debian.org/792687) to add support for
`SOURCE_DATE_EPOCH` to [gettext](https://tracker.debian.org/gettext).
## Packages fixed
The following 78 packages became reproducible in our setup due to changes in
their build dependencies: [chemical-mime-
data](https://tracker.debian.org/chemical-mime-data), [clojure-
contrib](https://tracker.debian.org/clojure-contrib), [cobertura-maven-
plugin](https://tracker.debian.org/cobertura-maven-plugin),
[cpm](https://tracker.debian.org/cpm),
[davical](https://tracker.debian.org/davical), [debian-security-
support](https://tracker.debian.org/debian-security-support),
[dfc](https://tracker.debian.org/dfc),
[diction](https://tracker.debian.org/diction),
[dvdwizard](https://tracker.debian.org/dvdwizard),
[galternatives](https://tracker.debian.org/galternatives), [gentlyweb-
utils](https://tracker.debian.org/gentlyweb-utils),
[gifticlib](https://tracker.debian.org/gifticlib),
[gmtkbabel](https://tracker.debian.org/gmtkbabel), [gnuplot-
mode](https://tracker.debian.org/gnuplot-mode),
[gplanarity](https://tracker.debian.org/gplanarity),
[gpodder](https://tracker.debian.org/gpodder), [gtg-
trace](https://tracker.debian.org/gtg-trace),
[gyoto](https://tracker.debian.org/gyoto),
[highlight.js](https://tracker.debian.org/highlight.js),
[htp](https://tracker.debian.org/htp), [ibus-
table](https://tracker.debian.org/ibus-table),
[impressive](https://tracker.debian.org/impressive),
[jags](https://tracker.debian.org/jags), [jansi-
native](https://tracker.debian.org/jansi-native), [jnr-
constants](https://tracker.debian.org/jnr-constants),
[jthread](https://tracker.debian.org/jthread),
[jwm](https://tracker.debian.org/jwm), [khronos-
api](https://tracker.debian.org/khronos-api), [latex-coffee-
stains](https://tracker.debian.org/latex-coffee-stains), [latex-
make](https://tracker.debian.org/latex-make),
[latex2rtf](https://tracker.debian.org/latex2rtf),
[latexdiff](https://tracker.debian.org/latexdiff),
[libcrcutil](https://tracker.debian.org/libcrcutil),
[libdc0](https://tracker.debian.org/libdc0),
[libdc1394-22](https://tracker.debian.org/libdc1394-22),
[libidn2-0](https://tracker.debian.org/libidn2-0),
[libint](https://tracker.debian.org/libint), [libjava-jdbc-
clojure](https://tracker.debian.org/libjava-jdbc-clojure), [libkryo-
java](https://tracker.debian.org/libkryo-java), [libphone-ui-
shr](https://tracker.debian.org/libphone-ui-shr), [libpicocontainer-
java](https://tracker.debian.org/libpicocontainer-java),
[libraw1394](https://tracker.debian.org/libraw1394), [librostlab-
blast](https://tracker.debian.org/librostlab-blast),
[librostlab](https://tracker.debian.org/librostlab),
[libshevek](https://tracker.debian.org/libshevek),
[libstxxl](https://tracker.debian.org/libstxxl), [libtools-logging-
clojure](https://tracker.debian.org/libtools-logging-clojure), [libtools-
macro-clojure](https://tracker.debian.org/libtools-macro-clojure),
[litl](https://tracker.debian.org/litl),
[londonlaw](https://tracker.debian.org/londonlaw),
[ltsp](https://tracker.debian.org/ltsp),
[macsyfinder](https://tracker.debian.org/macsyfinder),
[mapnik](https://tracker.debian.org/mapnik), [maven-compiler-
plugin](https://tracker.debian.org/maven-compiler-plugin),
[mc](https://tracker.debian.org/mc),
[microdc2](https://tracker.debian.org/microdc2),
[miniupnpd](https://tracker.debian.org/miniupnpd),
[monajat](https://tracker.debian.org/monajat),
[navit](https://tracker.debian.org/navit),
[pdmenu](https://tracker.debian.org/pdmenu),
[pirl](https://tracker.debian.org/pirl),
[plm](https://tracker.debian.org/plm), [scikit-
learn](https://tracker.debian.org/scikit-learn), [snp-
sites](https://tracker.debian.org/snp-sites), [sra-
sdk](https://tracker.debian.org/sra-sdk),
[sunpinyin](https://tracker.debian.org/sunpinyin),
[tilda](https://tracker.debian.org/tilda), [vdr-plugin-
dvd](https://tracker.debian.org/vdr-plugin-dvd), [vdr-plugin-
epgsearch](https://tracker.debian.org/vdr-plugin-epgsearch), [vdr-plugin-
remote](https://tracker.debian.org/vdr-plugin-remote), [vdr-plugin-
spider](https://tracker.debian.org/vdr-plugin-spider), [vdr-plugin-
streamdev](https://tracker.debian.org/vdr-plugin-streamdev), [vdr-plugin-
sudoku](https://tracker.debian.org/vdr-plugin-sudoku), [vdr-plugin-
xineliboutput](https://tracker.debian.org/vdr-plugin-xineliboutput),
[veromix](https://tracker.debian.org/veromix),
[voxbo](https://tracker.debian.org/voxbo),
[xaos](https://tracker.debian.org/xaos),
[xbae](https://tracker.debian.org/xbae).
The following packages became reproducible after getting fixed:
* [analog](https://tracker.debian.org/analog)/2:6.0-21 uploaded by Andreas Beckmann, [original patch](https://bugs.debian.org/788752) by Dhole.
* [base-passwd](https://tracker.debian.org/base-passwd)/3.5.38 uploaded by Colin Watson, [original patch](https://bugs.debian.org/792520) by Juan Picca.
* [debconf](https://tracker.debian.org/debconf)/1.5.57 uploaded by Colin Watson, [original patch](https://bugs.debian.org/783255) by Lunar.
* [ipband](https://tracker.debian.org/ipband)/0.8.1-4 by Mats Erik Andersson.
* [kfreebsd-10](https://tracker.debian.org/kfreebsd-10)/10.1~svn274115-7 by Steven Chamberlain.
* [libcommons-cli-java](https://tracker.debian.org/libcommons-cli-java)/1.3.1-1 by tony mancill.
* [libpsl](https://tracker.debian.org/libpsl)/0.7.1-1 by Daniel Kahn Gillmor.
* [maven-archiver](https://tracker.debian.org/maven-archiver)/2.6-3 by Emmanuel Bourg.
* [mtink](https://tracker.debian.org/mtink)/1.0.16-9 by Graham Inggs.
* [ocamlweb](https://tracker.debian.org/ocamlweb)/1.39-2 uploaded by Mehdi Dogguy, [original patch](https://bugs.debian.org/776643) by Chris Lamb.
* [rbdoom3bfg](https://tracker.debian.org/rbdoom3bfg)/1.0.3+repack1+git20150625-1 by Tobias Frost.
* [spatialite-tools](https://tracker.debian.org/spatialite-tools)/4.2.1~rc1-2 by Bas Couwenberg.
* [task](https://tracker.debian.org/task)/2.4.4+dfsg-1 by Sebastien Badia.
Some uploads fixed some reproducibility issues but not all of them:
* [bullet](https://tracker.debian.org/bullet)/2.83.4+dfsg-1 by Markus Koschany.
* [cdo](https://tracker.debian.org/cdo)/1.6.6+dfsg.1-2 by Alastair McKinstry.
* [fish](https://tracker.debian.org/fish)/2.2.0-1 uploaded by Tristan Seligmann, [original patch](https://bugs.debin.org/791648) by Chris Lamb.
* [sympy](https://tracker.debian.org/sympy)/0.7.6-3 by Sergey B Kirpichev.
* [xtables-addons](https://tracker.debian.org/xtables-addons)/2.7-1 uploaded by Dmitry Smirnov, [original patch](https://bugs.debian.org/776879) by Reiner Herrmann.
Patches submitted which have not made their way to the archive yet:
* [#792178](https://bugs.debian.org/792178) on [gunroar](https://tracker.debian.org/gunroar) by Reiner Herrmann: use C locale when sorting source files.
* [#792181](https://bugs.debian.org/792181) on [tth](https://tracker.debian.org/tth) by Reiner Herrmann: remove timestamps from generated HTML files.
* [#792285](https://bugs.debian.org/792285) on [pkgconf](https://tracker.debian.org/pkgconf) by Juan Picca: set `LC_ALL=C` when running `sort`.
* [#792319](https://bugs.debian.org/792319) on [jsmath-fonts](https://tracker.debian.org/jsmath-fonts) by Chris Lamb: set `TZ=UTC` when calling `unzip`.
* [#792424](https://bugs.debian.org/792424) on [swh-plugins](https://tracker.debian.org/swh-plugins) by Chris Lamb: sort inputs in `Makefile`.
* [#792525](https://bugs.debian.org/792525) on [ruby-standalone](https://tracker.debian.org/ruby-standalone) by Reiner Herrmann: use UTC and C locale when formatting the manpage date for the documentation.
* [#792528](https://bugs.debian.org/792528) on [dict-foldoc](https://tracker.debian.org/dict-foldoc) by Reiner Herrmann: use C locale when formatting the date for the documentation.
* [#792529](https://bugs.debian.org/792529) on [tomatoes](https://tracker.debian.org/tomatoes) by Reiner Herrmann: use date from `debian/changelog` in version string.
* [#792593](https://bugs.debian.org/792593) on [lives](https://tracker.debian.org/lives) by Dhole: process a Perl hash in stable order.
* [#792596](https://bugs.debian.org/792596) on [jsmath](https://tracker.debian.org/jsmath) by Dhole: set `TZ=UTC` when calling `unzip`.
* [#792597](https://bugs.debian.org/792597) on [jsmath-fonts-sprite](https://tracker.debian.org/jsmath-fonts-sprite) by Dhole: set `TZ=UTC` when calling `unzip`.
* [#792598](https://bugs.debian.org/792598) on [libreoffice-canzeley-client](https://tracker.debian.org/libreoffice-canzeley-client) by Dhole: set `TZ=UTC` when calling `unzip`.
* [#792599](https://bugs.debian.org/792599) on [openthesaurus](https://tracker.debian.org/openthesaurus) by Dhole: set `TZ=UTC` when calling `unzip`.
* [#792602](https://bugs.debian.org/792602) on [fonts-stix](https://tracker.debian.org/fonts-stix) by Dhole: set `TZ=UTC` when calling `unzip`.
* [#792667](https://bugs.debian.org/792667) on [jack-audio-connection-kit](https://tracker.debian.org/jack-audio-connection-kit) by use date from `debian/changelog` in manpages.
* [#792668](https://bugs.debian.org/792668) on [pyhoca-gui](https://tracker.debian.org/pyhoca-gui) by remove date from package version number.
* [#792671](https://bugs.debian.org/792671) on [apertium-dbus](https://tracker.debian.org/apertium-dbus) by remove `*.pyo` and `*.pyc` from binary package.
* [#792673](https://bugs.debian.org/792673) on [bup](https://tracker.debian.org/bup) by use date from `debian/changelog` when generating version strings.
* [#792684](https://bugs.debian.org/792684) on [cain](https://tracker.debian.org/cain) by Chris Lamb: ensure stable permissions when creating source tarball.
* [#792709](https://bugs.debian.org/792709) on [dict-jargon](https://tracker.debian.org/dict-jargon) by Dhole: set timestamp in archive using the latest entry of `debian/changelog`.
* [#792727](https://bugs.debian.org/792727) on [libaqbanking](https://tracker.debian.org/libaqbanking) by Micha Lenk (upstream): sort source files in documentation.
* [#792763](https://bugs.debian.org/792763) on [docbook-dsssl](https://tracker.debian.org/docbook-dsssl) by Chris Lamb: sort input files when creating changelog.
* [#792770](https://bugs.debian.org/792770) on [lynx-cur](https://tracker.debian.org/lynx-cur) by Reiner Herrmann: use C locale when sorting configuration files.
* [#792771](https://bugs.debian.org/792771) on [mu-cade](https://tracker.debian.org/mu-cade) by Reiner Herrmann: use C locale when sorting source files.
* [#792772](https://bugs.debian.org/792772) on [titanion](https://tracker.debian.org/titanion) by Reiner Herrmann: use C locale when sorting source files.
* [#792783](https://bugs.debian.org/792783) on [linuxlogo](https://tracker.debian.org/linuxlogo) by Reiner Herrmann: use C locale when sorting source files.
* [#792821](https://bugs.debian.org/792821) on [pkg-config](https://tracker.debian.org/pkg-config) by Juan Picca: use C locale when sorting source files.
* [#792828](https://bugs.debian.org/792828) on [tiger](https://tracker.debian.org/tiger) by Daniel Kahn Gillmor: use C locale when listing soure files.
## reproducible.debian.net
The statistics on the [main page of
reproducible.debian.net](https://reproducible.debian.net/reproducible.html)
are now updated every five minutes. A random unreviewed package is suggested
in the “look at a package” form on every build. (h01ger)
A [new package
set](https://reproducible.debian.net/unstable/amd64/pkg_set_cii-census.html)
based new on the [Core Internet Infrastructure
census](https://github.com/linuxfoundation/cii-census) has been added.
(h01ger)
Testing of FreeBSD has started, though no results yet. More [details have been
posted](http://lists.freebsd.org/pipermail/freebsd-
hackers/2015-July/047997.html) to the `freebsd-hackers` mailing list. The
build is run on a new virtual machine running FreeBSD 10.1 with 3 cores and 6
GB of RAM, also sponsored by [Profitbricks](https://www.profitbricks.co.uk/).
## strip-nondeterminism development
Andrew Ayer released version 0.009 of [strip-
nondeterminism](https://packages.debian.org/strip-nondeterminism). The new
version will strip locales from Javadoc, include the name of files causing
errors, and [ignore unhandled (but rare) zip64
archives](https://bugs.debian.org/791574).
## debbindiff development
Lunar continued its major refactoring to enhance code reuse and pave the way
to fuzzy-matching and parallel processing. Most file comparators have now been
converted to the new class hierarchy.
In order to support for archive formats, work has started on packaging [Python
bindings for libarchive](https://github.com/Changaco/python-libarchive-c).
While getting support for more archive formats with a common interface is very
nice, [libarchive](http://www.libarchive.org/) is a stream oriented library
and might have bad performance with how debbindiff currently works. Time will
tell if better solutions need to be found.
## Documentation update
Lunar started a [Reproducible builds
HOWTO](https://anonscm.debian.org/cgit/reproducible/reproducible-builds-
howto.git) intended to explain the different aspects of making software build
reproducibly to the different audiences that might have to get involved like
software authors, producers of binary packages, and distributors.
## Package reviews
17 obsolete
[reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 212 added and 46 updated this week.
15 new bugs for packages failing to build from sources have been reported by
Chris West (Faux), and Mattia Rizzolo.
## Presentations
Lunar presented Debian efforts and some recipes on making software build
reproducibly at [Libre Software Meeting
2015](https://2015.rmll.info/reproducible-builds-in-debian-and-
everywhere?lang=en).
[Slides](https://reproducible.alioth.debian.org/presentations/2015-07-06-LSM2015.pdf)
and a [video
recording](https://rmll.ubicast.tv/permalink/v1253b3db528fcf0ch3p/) are
available.
## Misc.
h01ger, dkg, and Lunar attended a [Core Infrastructure
Initiative](https://www.coreinfrastructure.org/) meeting. The progress and
tools mode for the Debian efforts were shown. Several discussions also helped
getting a better understanding of the needs of other free software projects
regarding reproducible builds. The idea of a global append only log, similar
to the logs used for [Certificate
Transparency](https://en.wikipedia.org/wiki/Certificate_Transparency), came up
on multiple occasions. Using such append only logs for keeping records of
sources and build results has gotten the name “Binary Transparency Logs”. They
would at least help identifying a compromised software signing key. Whether
the benefits in using such logs justify the costs need more research.
---
layout: blog
week: 13
published: 2015-07-26 18:03:47
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Emmanuel Bourg uploaded [maven-archiver](https://tracker.debian.org/maven-archiver)/2.6-3 which fixed parsing `DEB_CHANGELOG_DATETIME` with non English locales.
* Emmanuel Bourg uploaded [maven-repo-helper](https://tracker.debian.org/maven-repo-helper)/1.8.12 which always use the same system independent encoding when transforming the pom files.
* Piotr Ożarowski uploaded [dh-python](https://tracker.debian.org/dh-python)/2.20150719 which makes the order of the generated maintainer scripts deterministic. [Original patch](https://bugs.debian.org/792436) by Chris Lamb.
akira uploaded a new version of [doxygen](https://tracker.debian.org/doxygen)
in the [experimental “reproducible”
repository](https://wiki.debian.org/ReproducibleBuilds/ExprimentalToolchain)
incorporating [upstream
patch](https://github.com/doxygen/doxygen/commit/b31266c1076c6284116f17241d9e8aa048f88e60)
for
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal),
and now producing timezone independent timestamps.
Dhole updated Peter De Wachter's patch on
[ghostscript](https://tracker.debian.org/ghostscript) to use
`SOURCE_DATE_EPOCH` and use UTC as a timezone. A modified package is now being
experimented.
## Packages fixed
The following 14 packages became reproducible due to changes in their build
dependencies: [bino](https://tracker.debian.org/bino),
[cfengine2](https://tracker.debian.org/cfengine2),
[fwknop](https://tracker.debian.org/fwknop), [gnome-
software](https://tracker.debian.org/gnome-software), [jnr-
constants](https://tracker.debian.org/jnr-constants),
[libextractor](https://tracker.debian.org/libextractor),
[libgtop2](https://tracker.debian.org/libgtop2), [maven-compiler-
plugin](https://tracker.debian.org/maven-compiler-plugin), [mk-
configure](https://tracker.debian.org/mk-configure),
[nanoc](https://tracker.debian.org/nanoc), [octave-
splines](https://tracker.debian.org/octave-splines), [octave-
symbolic](https://tracker.debian.org/octave-symbolic),
[riece](https://tracker.debian.org/riece), [vdr-plugin-
infosatepg](https://tracker.debian.org/vdr-plugin-infosatepg).
The following packages became reproducible after getting fixed:
* [cpl-plugin-fors](https://tracker.debian.org/cpl-plugin-fors)/5.0.11+dfsg-4 uploaded by Ole Streicher, [original patch](https://bugs.debian.org/792933) by Chris Lamb.
* [cpl-plugin-hawki](https://tracker.debian.org/cpl-plugin-hawki)/1.8.18+dfsg-4 uploaded by Ole Streicher, [original patch](https://bugs.debian.org/792936) by Chris Lamb.
* [cpl-plugin-kmos](https://tracker.debian.org/cpl-plugin-kmos)/1.3.12+dfsg-4 uploaded by Ole Streicher, [original patch](https://bugs.debian.org/792937) by Chris Lamb.
* [cpl-plugin-visir](https://tracker.debian.org/cpl-plugin-visir)/3.5.1+dfsg-3 uploaded by Ole Streicher, [original patch](https://bugs.debian.org/792942) by Chris Lamb.
* [docbook-dsssl](https://tracker.debian.org/docbook-dsssl)/1.79-8 uploaded by Peter Eisentraut, [original patch](https://bugs.debian.org/792763) by Chris Lamb.
* [git-annex](https://tracker.debian.org/git-annex)/5.20150617 by Joey Hess, [initial report](https://bugs.debian.org/785736) by Daniel Kahn Gillmor.
* [links2](https://tracker.debian.org/links2)/2.10-1 by Axel Beckert.
* [linuxlogo](https://tracker.debian.org/linuxlogo)/5.11-8 uploaded by Dariusz Dwornikowski, [original patch](https://bugs.debian.org/792783) by Reiner Herrmann.
* [maradns](https://tracker.debian.org/maradns)/2.0.11-1 uploaded by Dariusz Dwornikowski, [original patch](https://bugs.debian.org/785535) by Reiner Herrmann.
* [pkgconf](https://tracker.debian.org/pkgconf)/0.9.12-1 uploaded by Andrew Shadura, [original patch](https://bugs.debian.org/792285) by Juan Picca.
* [python-odf](https://tracker.debian.org/python-odf)/1.3.1+dfsg-1 uploaded by W. Martin Borgert, [original patch](https://bugs.debian.org/777635) by akira.
* [qsapecng](https://tracker.debian.org/qsapecng)/2.0.0-6 uploaded by Simone Rossetto, [original patch](https://bugs.debian.org/789428) by akira.
* [ruby-liquid](https://tracker.debian.org/ruby-liquid)/3.0.4-1 uploaded by Cédric Boutillier, [report](https://bugs.debian.org/788694) by Dylan Thacker-Smith.
* [ruby-standalone](https://tracker.debian.org/ruby-standalone)/0.5.1 uploaded by Antonio Terceiro, [original patch](https://bugs.debian.org/792525) by Reiner Herrmann.
* [sahara](https://tracker.debian.org/sahara)/2015.1.0-6 uploaded by Thomas Goirand, [original patch](https://bugs.debian.org/788595) by Juan Picca.
* [squid3](https://tracker.debian.org/squid3)/3.5.6-1 uploaded by Luigi Gangitano, fixed upstream.
* [tabble](https://tracker.debian.org/tabble)/0.43-3 uploaded by gregor herrmann, [original patch](https://bugs.debian.org/782222) by Reiner Herrmann.
* [twine](https://tracker.debian.org/twine)/1.5.0-1 by Zygmunt Krynicki.
* [visp](https://tracker.debian.org/visp)/2.10.0-4 uploaded by Fabien Spindler, [original patch](https://bugs.debian.org/790074) by akira.
Some uploads fixed some reproducibility issues but not all of them:
* [dpatch](https://tracker.debian.org/dpatch)/2.0.36 by Gergely Nagy, with a [patch](https://bugs.debian.org/792954) from akira.
* [fldigi](https://tracker.debian.org/fldigi)/3.22.13-1 by Kamal Mostafa.
* [fortunes-bg](https://tracker.debian.org/fortunes-bg)/1.2 uploaded by Anton Zinoviev, [original patch](https://bugs.debian.org/792970) by akira.
* [openjfx](https://tracker.debian.org/openjfx)/8u40-b25-3 by Emmanuel Bourg.
* [zoneminder](https://tracker.debian.org/zoneminder)/1.28.1-7 by Dmitry Smirnov.
* [zookeeper](https://tracker.debian.org/zookeeper)/3.4.6-5 by Emmanuel Bourg.
Patches submitted which have not made their way to the archive yet:
* [#792943](https://bugs.debian.org/792943) on [argus-client](https://tracker.debian.org/argus-client) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792945](https://bugs.debian.org/792945) on [authbind](https://tracker.debian.org/authbind) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792947](https://bugs.debian.org/792947) on [cvs-mailcommit](https://tracker.debian.org/cvs-mailcommit) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792949](https://bugs.debian.org/792949) on [chimera2](https://tracker.debian.org/chimera2) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792950](https://bugs.debian.org/792950) on [ccze](https://tracker.debian.org/ccze) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792951](https://bugs.debian.org/792951) on [dbview](https://tracker.debian.org/dbview) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792952](https://bugs.debian.org/792952) on [dhcpdump](https://tracker.debian.org/dhcpdump) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792953](https://bugs.debian.org/792953) on [dhcping](https://tracker.debian.org/dhcping) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792955](https://bugs.debian.org/792955) on [dput](https://tracker.debian.org/dput) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792958](https://bugs.debian.org/792958) on [dtaus](https://tracker.debian.org/dtaus) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792959](https://bugs.debian.org/792959) on [elida](https://tracker.debian.org/elida) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792961](https://bugs.debian.org/792961) on [enemies-of-carlotta](https://tracker.debian.org/enemies-of-carlotta) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792963](https://bugs.debian.org/792963) on [erc](https://tracker.debian.org/erc) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792965](https://bugs.debian.org/792965) on [fastforward](https://tracker.debian.org/fastforward) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792967](https://bugs.debian.org/792967) on [fgetty](https://tracker.debian.org/fgetty) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792969](https://bugs.debian.org/792969) on [flowscan](https://tracker.debian.org/flowscan) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792971](https://bugs.debian.org/792971) on [junior-doc](https://tracker.debian.org/junior-doc) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792972](https://bugs.debian.org/792972) on [libjama](https://tracker.debian.org/libjama) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792973](https://bugs.debian.org/792973) on [liblip](https://tracker.debian.org/liblip) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792974](https://bugs.debian.org/792974) on [liblockfile](https://tracker.debian.org/liblockfile) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792975](https://bugs.debian.org/792975) on [libmsv](https://tracker.debian.org/libmsv) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792976](https://bugs.debian.org/792976) on [logapp](https://tracker.debian.org/logapp) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792977](https://bugs.debian.org/792977) on [luakit](https://tracker.debian.org/luakit) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792978](https://bugs.debian.org/792978) on [nec](https://tracker.debian.org/nec) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792979](https://bugs.debian.org/792979) on [runit](https://tracker.debian.org/runit) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792980](https://bugs.debian.org/792980) on [tworld](https://tracker.debian.org/tworld) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792981](https://bugs.debian.org/792981) on [wmweather](https://tracker.debian.org/wmweather) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792982](https://bugs.debian.org/792982) on [ftpcopy](https://tracker.debian.org/ftpcopy) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792983](https://bugs.debian.org/792983) on [gerstensaft](https://tracker.debian.org/gerstensaft) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792984](https://bugs.debian.org/792984) on [integrit](https://tracker.debian.org/integrit) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792985](https://bugs.debian.org/792985) on [ipsvd](https://tracker.debian.org/ipsvd) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792986](https://bugs.debian.org/792986) on [uruk](https://tracker.debian.org/uruk) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792987](https://bugs.debian.org/792987) on [jargon](https://tracker.debian.org/jargon) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792988](https://bugs.debian.org/792988) on [xbs](https://tracker.debian.org/xbs) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792989](https://bugs.debian.org/792989) on [freecdb](https://tracker.debian.org/freecdb) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792990](https://bugs.debian.org/792990) on [skalibs](https://tracker.debian.org/skalibs) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792991](https://bugs.debian.org/792991) on [gpsmanshp](https://tracker.debian.org/gpsmanshp) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792993](https://bugs.debian.org/792993) on [cgoban](https://tracker.debian.org/cgoban) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792994](https://bugs.debian.org/792994) on [angband-doc](https://tracker.debian.org/angband-doc) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792995](https://bugs.debian.org/792995) on [abook](https://tracker.debian.org/abook) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792996](https://bugs.debian.org/792996) on [bcron](https://tracker.debian.org/bcron) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792998](https://bugs.debian.org/792998) on [chiark-utils](https://tracker.debian.org/chiark-utils) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#792999](https://bugs.debian.org/792999) on [console-cyrillic](https://tracker.debian.org/console-cyrillic) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793000](https://bugs.debian.org/793000) on [beav](https://tracker.debian.org/beav) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793001](https://bugs.debian.org/793001) on [blosxom](https://tracker.debian.org/blosxom) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793002](https://bugs.debian.org/793002) on [cgilib](https://tracker.debian.org/cgilib) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793003](https://bugs.debian.org/793003) on [daemontools](https://tracker.debian.org/daemontools) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793004](https://bugs.debian.org/793004) on [debdelta](https://tracker.debian.org/debdelta) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793005](https://bugs.debian.org/793005) on [checkpw](https://tracker.debian.org/checkpw) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793006](https://bugs.debian.org/793006) on [dropbear](https://tracker.debian.org/dropbear) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793126](https://bugs.debian.org/793126) on [torbutton](https://tracker.debian.org/torbutton) by Dhole: set `TZ=UTC` when calling `zip`.
* [#793127](https://bugs.debian.org/793127) on [pdf.js](https://tracker.debian.org/pdf.js) by Dhole: set `TZ=UTC` when calling `zip`.
* [#793300](https://bugs.debian.org/793300) on [deejayd](https://tracker.debian.org/deejayd) by Dhole: set `TZ=UTC` when calling `zip`.
## reproducible.debian.net
Packages identified as failing to build from source with no bugs filed and
older than 10 days are scheduled more often now (except in experimental).
(h01ger)
## Package reviews
178 obsolete
[reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 59 added and 122 updated this week.
New issue identified this week:
[random_order_in_ruby_rdoc_indices](https://reproducible.debian.net/issues/unstable/random_order_in_ruby_rdoc_indices_issue.html).
18 new bugs for packages failing to build from sources have been reported by
Chris West (Faux), and h01ger.
---
layout: blog
week: 14
published: 2015-08-03 13:03:08
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Joachim Breitner uploaded [haskell-devscripts](https://tracker.debian.org/haskell-devscripts)/0.9.11 which ads support for UTF-8 encoded `debian/control` file with all locales. [Original patch](https://bugs.debian.org/793944) by Chris Lamb.
* Jonas Smedegaard uploaded [ghostscript](https://tracker.debian.org/9.16~dfsg-1) which adds support for [SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal). [Original patch](https://bugs.debian.org/794004) by Dhole.
akira submitted a patch to make [cdbs](https://tracker.debian.org/cdbs) export
`SOURCE_DATE_EPOCH`. She uploded a package with the enhancement to the
[experimental “reproducible”
repository](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain).
## Packages fixed
The following 15 packages became reproducible due to changes in their build
dependencies: [dracut](https://tracker.debian.org/dracut), [editorconfig-
core](https://tracker.debian.org/editorconfig-core),
[elasticsearch](https://tracker.debian.org/elasticsearch),
[fish](https://tracker.debian.org/fish),
[libftdi1](https://tracker.debian.org/libftdi1),
[liblouisxml](https://tracker.debian.org/liblouisxml), [mk-
configure](https://tracker.debian.org/mk-configure),
[nanoc](https://tracker.debian.org/nanoc), [octave-
bim](https://tracker.debian.org/octave-bim), [octave-data-
smoothing](https://tracker.debian.org/octave-data-smoothing), [octave-
financial](https://tracker.debian.org/octave-financial), [octave-
ga](https://tracker.debian.org/octave-ga), [octave-missing-
functions](https://tracker.debian.org/octave-missing-functions), [octave-
secs1d](https://tracker.debian.org/octave-secs1d), [octave-
splines](https://tracker.debian.org/octave-splines),
[valgrind](https://tracker.debian.org/valgrind).
The following packages became reproducible after getting fixed:
* [ant-contrib](https://tracker.debian.org/ant-contrib)/1.0~b3+svn177-7 by Emmanuel Bourg.
* [authbind](https://tracker.debian.org/authbind)/2.1.1+nmu1 uploaded by Johannes Schauer, [original patch](https://bugs.debian.org/792945) by akira.
* [elektra](https://tracker.debian.org/elektra)/0.8.12-1 uploaded by Pino Toscano, [original patch](https://bugs.debian.org/788879) by akira.
* [glance](https://tracker.debian.org/glance)/2015.1.0-3 by Thomas Goirand.
* [gnumeric](https://tracker.debian.org/gnumeric)/1.12.23-1 uploaded by Dmitry Smirnov, [original patch](https://bugs.debian.org/784672) by Daniel Kahn Gillmor.
* [libdevice-cdio-perl](https://tracker.debian.org/libdevice-cdio-perl)/0.3.0-5 uploaded by gregor herrmann, [report](https://bugs.debian.org/793680) by Chris Lamb.
* [libxray-scattering-perl](https://tracker.debian.org/libxray-scattering-perl)/3.0.1-1.1 uploaded by gregor herrmann, [original patch](https://bugs.debian.org/786634) by Reiner Herrmann.
* [libxray-spacegroup-perl](https://tracker.debian.org/libxray-spacegroup-perl)/0.1.1-2.1 uploaded by gregor herrmann, [original patch](https://bugs.debian.org/790072) by Chris Lamb.
* [ryu](https://tracker.debian.org/ryu)/3.23-2 by Dariusz Dwornikowski.
Some uploads fixed some reproducibility issues but not all of them:
* [apophenia](https://tracker.debian.org/apophenia)/0.999e+ds-1 uploaded by Jerome Benoit, [original patch](https://bugs.debian.org/788868) by akira.
* [xbs](https://tracker.debian.org/xbs)/0-10 uploaded by Matthew Vernon, [original patch](https://bugs.debian.org/792988) by Colin Watson.
* [bbswitch](https://tracker.debian.org/bbswitch)/0.8-2 uploaded by Vincent Cheng, [original patch](https://bugs.debian.org/778455) by Chris Lamb.
* [mariadb-10.0](https://tracker.debian.org/mariadb-10.0)/10.0.20-3 by Otto Kekäläinen.
* [icedove](https://tracker.debian.org/icedove)/38.0.1-1 uploaded by Christoph Goehre, improvements by Carsten Schoenert.
* [apache2](https://tracker.debian.org/apache2)/2.4.16-1 uploaded by Stefan Fritsch, improvements by Jean-Michel Vourgère.
In contrib, Dmitry Smirnov improved [libdvd-
pkg](https://tracker.debian.org/libdvd-pkg) with 1.3.99-1-1.
Patches submitted which have not made their way to the archive yet:
* [#793705](https://bugs.debian.org/793705) on [mime-support](https://tracker.debian.org/mime-support) by akira: set the mtimes of all files which are modified during builds to the latest `debian/changelog` entry.
* [#793922](https://bugs.debian.org/793922) on [polymake](https://tracker.debian.org/polymake) by Chris Lamb: sort Perl hash keys.
* [#793980](https://bugs.debian.org/793980) on [lsof](https://tracker.debian.org/lsof) by Valentin Lorentz: removes extra informations from the build system..
* [#793996](https://bugs.debian.org/793996) on [at](https://tracker.debian.org/at) by Valentin Lorentz: use absolute values for chmod.
* [#794005](https://bugs.debian.org/794005) on [python-dtcwt](https://tracker.debian.org/python-dtcwt) by Chris Lamb: use a constant seed for the random number generator.
* [#794011](https://bugs.debian.org/794011) on [gzip](https://tracker.debian.org/gzip) by Valentin Lorentz: remove date from texinfo header.
* [#794014](https://bugs.debian.org/794014) on [moin](https://tracker.debian.org/moin) by Dhole: normalizes the timezone and fixes timestamps from the files compressed with zip.
* [#794106](https://bugs.debian.org/794106) on [cryptsetup](https://tracker.debian.org/cryptsetup) by Valentin Lorentz: use date from latest `debian/changelog` entry in manpage.
* [#794130](https://bugs.debian.org/794130) on [coq](https://tracker.debian.org/coq) by Valentin Lorentz: use C locale and UTC timezone when generating the build date.
* [#794225](https://bugs.debian.org/794225) on [libsyncml](https://tracker.debian.org/libsyncml) by akira: export `SOURCE_DATE_EPOCH`.
* [#794239](https://bugs.debian.org/794239) on [ zipios++](https://tracker.debian.org/ zipios++) by akira: export `SOURCE_DATE_EPOCH`.
* [#794247](https://bugs.debian.org/794247) on [whizzytex](https://tracker.debian.org/whizzytex) by Dhole: remove current date from documentation.
* [#794248](https://bugs.debian.org/794248) on [cortado](https://tracker.debian.org/cortado) by Dhole: allow the build date to be set externally and use time from the latest `debian/changelog` entry.
* [#794395](https://bugs.debian.org/794395) on [classified-ads](https://tracker.debian.org/classified-ads) by Reiner Herrmann: remove timestamps from PNG images.
* [#794398](https://bugs.debian.org/794398) on [clhep](https://tracker.debian.org/clhep) by Reiner Herrmann: sort source file list.
* [#794399](https://bugs.debian.org/794399) on [parsec47](https://tracker.debian.org/parsec47) by Reiner Herrmann: use C locale when sorting source files.
* [#794400](https://bugs.debian.org/794400) on [tumiki-fighters](https://tracker.debian.org/tumiki-fighters) by Reiner Herrmann: use C locale when sorting source files.
## reproducible.debian.net
Four `armhf` build hosts were provided by Vagrant Cascadian and have been
configured to be used by [jenkins.debian.net](https://jenkins.debian.net/).
Work on including `armhf` builds in the
[reproducible.debian.net](https://reproducible.debian.net/) webpages has
begun. So far the repository comparison page just shows us which `armhf`
binary packages are currently missing in our repo. (h01ger)
The scheduler has been changed to re-schedule more packages from stretch than
sid, as the gcc5 transition has started… This mostly affects build log age.
(h01ger)
A new [depwait
status](https://reproducible.debian.net/unstable/amd64/index_depwait.html) has
been introduced for packages which can't be built because of missing build
dependencies. (Mattia Rizzolo)
## debbindiff development
Finally, on August 31st, Lunar released [debbindiff
27](https://tracker.debian.org/news/701661) containing a [complete overhaul of
the code for the comparison
stage](https://anonscm.debian.org/cgit/reproducible/debbindiff.git/commit/?id=5c02e00001e46706a7bf7c8faad353d17178a4d6).
The new architecture is more versatile and extensible while minimizing code
duplication. [libarchive](http://libarchive.org/) is now used to handle cpio
archives and iso9660 images through the newly packaged [python-
libarchive-c](https://tracker.debian.org/python-libarchive-c). This should
also help support a couple other archive formats in the future. Symlinks and
devices are now properly compared. Text files are compared as Unicode after
being decoded, and encoding differences are reported. Support for Sqlite3 and
Mono/.NET executables has been added. Thanks to Valentin Lorentz, the test
suite should now run on more systems. A [small defiency in
unquashfs](https://bugs.debian.org/794096) has been identified in the process.
A long standing optimization is now performed on Debian package: based on the
content of the `md5sums` control file, we skip comparing files with matching
hashes. This makes debbindiff usable on packages with many files. Fuzzy-
matching is now performed for files in the same container (like a tarball) to
handle renames. Also, for Debian `.changes`, listed files are now compared
without looking the embedded version number. This makes debbindiff a lot more
useful when comparing different versions of the same package.
Based on the rearchitecturing work has been done to allow parallel processing.
The
[branch](https://anonscm.debian.org/cgit/reproducible/debbindiff.git/log/?h=pu/parallel)
now seems to work most of the time. More test needs to be done before it can
be merged.
The current fuzzy-matching algorithm,
[ssdeep](http://ssdeep.sourceforge.net/), has showed disappointing results.
One important use case is being able to properly compare debug symbols. Their
path is made using the [Build
ID](https://fedoraproject.org/wiki/Releases/FeatureBuildId#Unique_build_ID).
As this identifier is made with a checksum of the binary content, finding
things like [CPP
macros](https://reproducible.debian.net/issues/unstable/timestamps_from_cpp_macros_issue.html)
is much easier when a diff of the debug symbols is available. Good news is
that [TLSH](https://github.com/trendmicro/tlsh), another fuzzy-matching
algorithm, has been tested with much better results. A package is [waiting in
NEW](https://ftp-master.debian.org/new/tlsh_3.2.1+20150727-1.html) and the
[code is
ready](https://anonscm.debian.org/cgit/reproducible/debbindiff.git/log/?h=pu/tlsh)
for it to become available.
A follow-up [release 28](https://tracker.debian.org/news/702053) was made on
August 2nd fixing content label used for gzip2, bzip2 and xz files and an
error on text files only differing in their encoding. It also contains a small
code improvement on how comments on `Difference` object are handled.
This is the last release name `debbindiff`. A new name has been chosen to
better reflect that it is not a Debian specific tool. Stay tuned!
## Documentation update
Valentin Lorentz updated the [patch submission
template](https://wiki.debian.org/ReproducibleBuilds/Contribute#How_to_report_bugs)
to suggest to write the kind of issue in the bug subject.
Small progress have been made on the [Reproducible Builds
HOWTO](https://anonscm.debian.org/cgit/reproducible/reproducible-builds-
howto.git/) while preparing the related [CCCamp15
talk](https://events.ccc.de/camp/2015/Fahrplan/events/6657.html).
## Package reviews
235 obsolete
[reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 47 added and 113 updated this week.
42 reports for packages failing to build from source have been made by Chris
West (Faux).
New issue added this week:
[haskell_devscripts_locale_substvars](https://reproducible.debian.net/issues/unstable/haskell_devscripts_locale_substvars_issue.html).
## Misc.
Valentin Lorentz wrote a [script to report packages tested as
unreproducible](https://anonscm.debian.org/cgit/reproducible/misc.git/tree/unreproducible-
installed) installed on a system. We encourage everyone to run it on their
systems and give feedback!
---
layout: blog
week: 15
published: 2015-08-10 13:17:40
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
Guillem Jover uploaded [dpkg](https://tracker.debian.org/dpkg)/1.18.2 which
makes dependency comparisons deep by comparing not only the first dependency
alternative, to get them sorted in a reproducible way. [Original
patch](https://bugs.debian.org/792491) by Chris Lamb.
Dhole updated the [patch adding support for
SOURCE_DATE_EPOCH](https://bugs.debian.org/792687) in
[gettext](https://tracker.debian.org/gettext). A modified package is in the
[experimental “reproducible”
repository](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain).
Valentin Lorentz submitted a [patch adding support for
SOURCE_DATE_EPOCH](https://bugs.debian.org/794586) to
[ocamldoc](https://tracker.debian.org/ocaml). Valentin Lorentz also opened a
bug about the [inability to set an arbitrary RNG seed for
ocamlopt](https://bugs.debian.org/794583) which would be a way to fix an
[issue affecting many OCaml
packages](https://reproducible.debian.net/issues/unstable/randomness_in_ocaml_a_files_issue.html).
Dhole submitted a [patch adding support for
SOURCE_DATE_EPOCH](https://bugs.debian.org/794681) in
[qhelpgenerator](https://tracker.debian.org/qt4-x11). A modified package has
been sent to the experimental repository as well.
Several packages have been updated for the experimental toolchain:
[doxygen](https://tracker.debian.org/doxygen) (akira), and
[dpkg](https://tracker.debian.org/dpkg) (h01ger).
Also, h01ger has built and uploaded all experimental packages having
`arch:any` packages for `armhf`: [dpkg](https://tracker.debian.org/dpkg),
[gettext](https://tracker.debian.org/gettext),
[doxygen](https://tracker.debian.org/doxygen),
[fontforge](https://tracker.debian.org/fontforge),
[libxslt](https://tracker.debian.org/libxslt) and [texlive-
bin](https://tracker.debian.org/texlive-bin). We are now providing our
toolchain for `armhf` and `amd64`.
## Packages fixed
As you might have noticed, Debian sid is currently largely uninstallable, due
to the [GCC 5
transition](https://reproducible.debian.net/unstable/amd64/index_depwait.html),
which also can be see in our reproducibility test setup. Please
[help](https://lists.debian.org/debian-devel-announce/2015/08/msg00002.html)!
The following packages became reproducible due to changes in their build
dependencies: [glosstex](https://tracker.debian.org/glosstex),
[indent](https://tracker.debian.org/indent),
[ktikz](https://tracker.debian.org/ktikz),
[liblouis](https://tracker.debian.org/liblouis),
[libmicrohttpd](https://tracker.debian.org/libmicrohttpd),
[linkchecker](https://tracker.debian.org/linkchecker),
[multiboot](https://tracker.debian.org/multiboot),
[qterm](https://tracker.debian.org/qterm),
[rrep](https://tracker.debian.org/rrep),
[trueprint](https://tracker.debian.org/trueprint), [twittering-
mode](https://tracker.debian.org/twittering-mode).
The following packages became reproducible after getting fixed:
* [aegisub](https://tracker.debian.org/aegisub)/3.2.2+dfsg-1 uploaded by Sebastian Reichel, [original patch](https://bugs.debian.org/789728).
* [libinline-java-perl](https://tracker.debian.org/libinline-java-perl)/0.56-2 uploaded by Jonas Smedegaard, [original patch](https://bugs.debian.org/778983) by Chris Lamb.
* [mime-support](https://tracker.debian.org/mime-support)/3.59 uploaded by Charles Plessy, [original patch](https://bugs.debian.org/793705) by akira.
* [osmo](https://tracker.debian.org/osmo)/0.2.14-1 by Markus Koschany.
* [python-cyclone](https://tracker.debian.org/python-cyclone)/1.1-2 by Lunar.
Patches submitted which have not made their way to the archive yet:
* [#794395](https://bugs.debian.org/794395) on [classified-ads](https://tracker.debian.org/classified-ads) by Reiner Herrmann: removes timestamps in embedded PNG images. Already [merged upstream](https://github.com/operatornormal/classified-ads/commit/db7cbe561e1ea9b657698f61308441fc2cf26df9).
* [#794398](https://bugs.debian.org/794398) on [clhep](https://tracker.debian.org/clhep) by Reiner Herrmann: sort with `LC_ALL` set to `C`.
* [#794399](https://bugs.debian.org/794399) on [parsec47](https://tracker.debian.org/parsec47) by Reiner Herrmann: sort with `LC_ALL` set to `C`.
* [#794400](https://bugs.debian.org/794400) on [tumiki-fighters](https://tracker.debian.org/tumiki-fighters) by Reiner Herrmann: sort with `LC_ALL` set to `C`.
* [#794603](https://bugs.debian.org/794603) on [xchat](https://tracker.debian.org/xchat) by Valentin Lorentz: call strip-nondeterminism and remove time C pre-processor macros.
* [#794740](https://bugs.debian.org/794740) on [camitk](https://tracker.debian.org/camitk) by akira: use `SOURCE_DATE_EPOCH` as build date.
* [#794779](https://bugs.debian.org/794779) on [foxyproxy](https://tracker.debian.org/foxyproxy) by Dhole: set `TZ` to `UTC` when using `zip`.
* [#794781](https://bugs.debian.org/794781) on [xul-ext-monkeysphere](https://tracker.debian.org/xul-ext-monkeysphere) by Dhole: set `TZ` to `UTC` when using `zip`.
* [#794792](https://bugs.debian.org/794792) on [freeipmi](https://tracker.debian.org/freeipmi) by Dhole: use latest entry from `debian/changelog` as build date.
* [#794793](https://bugs.debian.org/794793) on [doc-base](https://tracker.debian.org/doc-base) by Dhole: use UTC timezone when generating source date string.
* [#794795](https://bugs.debian.org/794795) on [debiandoc-sgml-doc](https://tracker.debian.org/debiandoc-sgml-doc) by Dhole: remove date. A better approach has been suggested by maintainer.
* [#794892](https://bugs.debian.org/794892) on [autogen](https://tracker.debian.org/autogen) by Valentin Lorentz: use a constant time as timeout instead of measuring how long it takes for `./configure` to run, use `C` locale when sorting, and use UTC when converting dates. Upstream made a new pre-release providing a `--enable-timeout` option. Date related issues will need more work to have portable solutions.
Lunar reported an issue on an [unstable ABI from a generated
header](https://bugs.debian.org/794456) in
[icedove](https://tracker.debian.org/icedove) reminding of an [issue affecting
libical-dev](https://bugs.debian.org/773916). The bug has since been fixed by
Carsten Schoenert.
akira identified an [unreferenced embeded code
copy](https://bugs.debian.org/794955) (causing unreproducibility!) in
[gperf](https://tracker.debian.org/gperf).
## reproducible.debian.net
The scheduler has temporarily been changed to not schedule any already tested
packages for sid and experimental, due to the the GCC 5 transitions, which are
well visible in [our
graphs](https://reproducible.debian.net/unstable/index_suite_stats.html) now.
On the plus side this has caused our stretch testing to catch up (and [improve
stats](https://reproducible.debian.net/testing/index_suite_stats.html)).
(h01ger)
[depwait
packages](https://reproducible.debian.net/testing/amd64/index_depwait.html)
(packages where the `Build-Depends` cannot be satisfied) are now listed in the
[last 24h](https://reproducible.debian.net/testing/amd64/index_last_24h.html)
and [last
48h](https://reproducible.debian.net/testing/amd64/index_last_24h.html) pages
(Mattia Rizzolo)
Two new `amd64` build nodes (with 8 cores and 32 GB RAM each) have been added,
kindly sponsored by [Profitbricks](https://www.profitbricks.co.uk/). (h01ger)
The 4 `armhf` (setup last week by Vagrant Cascadian) and 2 `amd64` build nodes
have been made available to Jenkins. Remote job scheduling has been
implemented and 35 new jobs have been added for `pbuilder` and `schroot`
creation and maintenance of the nodes. (h01ger)
The manual scheduler gained a flag (`-a`/`--architecture`) to select which
arch to schedule in. (Mattia Rizzolo)
`armhf` will only be testing stretch for now, due to limited hardware
ressources. (h01ger)
The page listing [maintainers of unreproducible
packages](https://reproducible.debian.net/unstable/index_dd-list.html) gained
internal anchors. As an example, one can now link to [unreproducible orphaned
packages](https://reproducible.debian.net/unstable/index_dd-
list.html#packages@qa.debian.org). (Mattia Rizzolo)
Packages with a bug tagged “pending” are marked using a new symbol: a brown
`P` (Mattia Rizzolo)
## diffoscope development
`debbindiff` is now called _diffoscope_! It also has a website at
[diffoscope.org](http://diffoscope.org/). The name was changed to better
reflect that it became a general purpose tool, capable of comparing many
different archive formats, or directories.
[Version 29](https://tracker.debian.org/news/703323) is the renaming release.
Amongst a couple of other cosmetic changes a favicon showing the new logo has
been added to the generated HTML reports.
[Version 30](https://tracker.debian.org/news/703329) replaces the file
matching algorithm for files listed in `.changes` to a smarter one that
removes only the version number. It also fixes a bug where squashfs
directories were being extracted even if their content was being compared at a
later stage. It also fixes an issue with the test suite that was detected by
[debci](https://ci.debian.net/).
## Documentation update
More rationale have been added for [supporting
SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Goal)
The unfinished [Reproducible Builds
HOWTO](https://reproducible.debian.net/howto/) is now visible on the web,
feedback and patches most welcome.
## Package reviews
261 obsolete
[reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 73 added and 145 updated this week.
---
layout: blog
week: 16
published: 2015-08-16 16:11:33
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Stéphane Glondu uploaded [dh-ocaml](https://tracker.debian.org/dh-ocaml)/1.0.10 which now generates *.info with a deterministic order. [Original patch](https://bugs.debian.org/779037) by Chris Lamb. Stéphane also uploaded [ocaml](https://tracker.debian.org/ocaml)/4.02.3-1 to experimental which enables `ocamldoc` to build reproducible manpages using a [patch](https://bugs.debian.org/794586) by Valentin Lorentz.
* Paul Gevers uploaded [pasdoc](https://tracker.debian.org/pasdoc)/0.14.0-1 with upstream changes which should make the generated documentation reproducible by default.
* Osamu Aoki uploaded [debiandoc-sgml](https://tracker.debian.org/debiandoc-sgml)/1.2.31-1 adding spport for a `DEBIANDOC_DATE` environment variable to override the content of the `<date>` tag.
* Dmitry Shachnev uploaded [sphinx](https://tracker.debian.org/sphinx)/1.3.1-4 which fixes many reproducibility issues and add support for [SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal).
Valentin Lorentz sent a [patch](https://bugs.debian.org/795606) for
[ispell](https://tracker.debian.org/ispell) to initialize memory structures
before dumping their content.
In [our experimental
repository](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain),
[qt4-x11](https://tracker.debian.org/qt4-x11) has been rebased on the latest
version (Dhole), as was [doxygen](https://tracker.debian.org/doxygen) (akira).
## Packages fixed
The following packages became reproducible due to changes in their build
dependencies: [backup-manager](https://tracker.debian.org/backup-manager),
[cheese](https://tracker.debian.org/cheese), [coinor-
csdp](https://tracker.debian.org/coinor-csdp), [coinor-
dylp](https://tracker.debian.org/coinor-dylp), [ebook-
speaker](https://tracker.debian.org/ebook-speaker),
[freefem](https://tracker.debian.org/freefem),
[indent](https://tracker.debian.org/indent), [libjbcrypt-
java](https://tracker.debian.org/libjbcrypt-java), [qtquick1-opensource-
src](https://tracker.debian.org/qtquick1-opensource-src), [ruby-coffee-
script](https://tracker.debian.org/ruby-coffee-script), [ruby-
distribution](https://tracker.debian.org/ruby-distribution),
[schroot](https://tracker.debian.org/schroot), [twittering-
mode](https://tracker.debian.org/twittering-mode).
The following packages became reproducible after getting fixed:
* [abook](https://tracker.debian.org/abook)/0.6.0~pre2-5 by Denis Briand.
* [ada-reference-manual](https://tracker.debian.org/ada-reference-manual)/1:2012.2-6 by Nicolas Boulenguez.
* [aegisub](https://tracker.debian.org/aegisub)/3.2.2+dfsg-1 uploaded by Sebastian Reichel, [original patch](https://bugs.debian.org/789728) by Juan Picca.
* [casablanca](https://tracker.debian.org/casablanca)/2.5.0-1 uploaded by Gianfranco Costamagna, fix by Mattia Rizzolo.
* [dpatch](https://tracker.debian.org/dpatch)/2.0.37 by Gergely Nagy.
* [ganeti](https://tracker.debian.org/ganeti)/2.14.1-1~exp1 by Apollon Oikonomopoulos.
* [gperf](https://tracker.debian.org/gperf)/3.0.4-2 by Hilko Bengen, [report](https://bugs.debian.org/794955) by akira.
* [htdig](https://tracker.debian.org/htdig)/1:3.2.0b6-14 uploaded by Ralf Treinen, [original patch](https://bugs.debian.org/793648) by Chris Lamb.
* [icedove](https://tracker.debian.org/icedove)/38.1.0-1 uploaded by Christoph Goehre, [report](https://bugs.debian.org/794456) by Lunar.
* [kamailio](https://tracker.debian.org/kamailio)/4.3.1-2 by Victor Seva.
* [leveldb](https://tracker.debian.org/leveldb)/1.18-3 uploaded by Laszlo Boszormenyi, [original patch](https://bugs.debian.org/791960) by Reiner Herrmann.
* [librostlab-blast](https://tracker.debian.org/librostlab-blast)/1.0.1-5 uploaded by Andreas Tille, [original patch](https://bugs.debian.org/795485) by Chris Lamb.
* [linux-tools](https://tracker.debian.org/linux-tools)/4.1.4-1 by Ben Hutchings.
* [nitpic](https://tracker.debian.org/nitpic)/0.1-16 uploaded by Ralf Treinen, patches by Chris Lamb ([#777492](https://bugs.debian.org/777492)) and akira ([#793708](https://bugs.debian.org/793708)).
* [openscad](https://tracker.debian.org/openscad)/2015.03-1+dfsg-1 uploaded by Christian M. Amsüss, fixed upstream.
* [pciutils](https://tracker.debian.org/pciutils)/1:3.3.1-1 uploaded by Anibal Monsalve Salazar, [origial patch](https://bugs.debian.org/783144) by Reiner Herrmann.
* [pyepr](https://tracker.debian.org/pyepr)/0.9.3-1 uploaded by Antonio Valentino, [original patch](https://bugs.debian.org/788246) by Juan Picca.
* [pytables](https://tracker.debian.org/pytables)/3.2.1-1 by Antonio Valentino.
* [python-xlib](https://tracker.debian.org/python-xlib)/0.14+20091101-3 by Andrew Shadura, [report](https://bugs.debian.org/795057) by akira.
* [rrdtool](https://tracker.debian.org/rrdtool)/1.5.4-3 by Jean-Michel Vourgère.
* [sgmltools-lite](https://tracker.debian.org/sgmltools-lite)/3.0.3.0.cvs.20010909-18 uploaded by Ralf Treinen, patches by Chris Lamb ([#777011](https://bugs.debian.org/777011)) and akira ([#793720](https://bugs.debian.org/793720)).
* [uhd](https://tracker.debian.org/uhd)/3.8.5-2 by A. Maitland Bottoms.
* [xfireworks](https://tracker.debian.org/xfireworks)/1.3-10 uploaded by Yukiharu YABUKI, [original patch](https://bugs.debian.org/777402) by Chris Lamb.
Some uploads fixed some reproducibility issues but not all of them:
* [ben](https://tracker.debian.org/ben)/0.7.1 uploaded by Mehdi Dogguy, [original patch](https://bugs.debian.org/792054) by Reiner Herrmann.
* [debiandoc-sgml-doc](https://tracker.debian.org/debiandoc-sgml-doc)/1.1.24 uploaded by Osamu Aoki, [initial patch](https://bugs.debian.org/794795) by Dhole.
* [ifrench-gut](https://tracker.debian.org/ifrench-gut)/1:1.0-31 uploaded by Lionel Elie Mamane, [original patch](https://bugs.debian.org/795581) by Valentin Lorentz.
* [qdjango](https://tracker.debian.org/qdjango)/0.6.0-1 uploaded by Jeremy Lainé, fixed upstream, [original patch](https://bugs.debian.org/789405) by akira.
* [spectacle](https://tracker.debian.org/spectacle)/0.25-1 assembled by Philippe Coval, [original patch](https://bugs.debian.org/775996) by Chris Lamb.
Patches submitted which have not made their way to the archive yet:
* [#795203](https://bugs.debian.org/795203) on [xlsx2csv](https://tracker.debian.org/xlsx2csv) by Dhole: set `PODDATE` to the date of the latest `debian/changelog` entry.
* [#795392](https://bugs.debian.org/795392) on [blkreplay](https://tracker.debian.org/blkreplay) by Dhole: tell `pod2man` to use the date of the latest `debian/changelog` entry.
* [#795394](https://bugs.debian.org/795394) on [libitpp](https://tracker.debian.org/libitpp) by Dhole: use `SOURCE_DATE_EPOCH` as source for the manpage date instead of the currentdate.
* [#795395](https://bugs.debian.org/795395) on [adblock-plus](https://tracker.debian.org/adblock-plus) by Dhole: set `TZ` to `UTC` when using `zip`.
* [#795438](https://bugs.debian.org/795438) on [wims-extra](https://tracker.debian.org/wims-extra) by Chris Lamb: ask `grep` to cope with non-UTF8 files.
* [#795441](https://bugs.debian.org/795441) on [aprx](https://tracker.debian.org/aprx) by Chris Lamb: use `SOURCE_DATE_EPOCH` as source for the manpage date instead of the currentdate.
* [#795462](https://bugs.debian.org/795462) on [ogre-1.9](https://tracker.debian.org/ogre-1.9) by Chris Lamb: removes timestamps from the documentation system.
* [#795484](https://bugs.debian.org/795484) on [ruby-rmagick](https://tracker.debian.org/ruby-rmagick) by Chris Lamb: patch the bindings to allow the PRNG seed to be set, and set it to a fixed value when generating examples.
* [#795562](https://bugs.debian.org/795562) on [htp](https://tracker.debian.org/htp) by Chris Lamb: export `TZ=UTC` in `debian/rules`.
akira found [another embedded code copy](https://bugs.debian.org/795056) of
[texi2html](https://tracker.debian.org/texi2html) in
[maxima](https://tracker.debian.org/maxima).
## reproducible.debian.net
Work on testing several architectures has continued. (Mattia/h01ger)
## Package reviews
29 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 187 added and 34 updated this week.
172 new FTBFS reports were filled, 137 solely by Chris West (Faux).
josch spent time investigating the issue with [fonts in PDF
files](https://reproducible.debian.net/issues/unstable/fonts_in_pdf_files_issue.html).
Chris Lamb documented the [issue affecting documentation generated by
ocamldoc](https://reproducible.debian.net/issues/unstable/timestamps_in_documentation_generated_by_ocamldoc_issue.html).
## Misc.
Lunar presented a general [“Reproducible builds HOWTO”
talk](https://events.ccc.de/camp/2015/Fahrplan/events/6657.html) at the [Chaos
Communication Camp 2015](https://events.ccc.de/camp/2015/) in Germany on
August 13th.
[Recordings](https://media.ccc.de/browse/conferences/camp2015/camp2015-6657-how_to_make_your_software_build_reproducibly.html)
are already available, as well as
[slides](https://reproducible.alioth.debian.org/presentations/2015-08-13-CCCamp15.pdf)
and
[script](https://reproducible.alioth.debian.org/presentations/2015-08-13-CCCamp15-outline.pdf).
h01ger and Lunar also used CCCamp15 as an opportunity to have discussions with
members of several different projects about reproducible builds. Good news
should be coming soon.
This diff is collapsed.
---
layout: blog
week: 18
published: 2015-09-01 14:51:21
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Bdale Garbee uploaded [tar](https://tracker.debian.org/tar)/1.28-1 which includes the `--clamp-mtime` option. [Patch](https://bugs.debian.org/790415) by Lunar.
Aurélien Jarno uploaded
[glibc](https://tracker.debian.org/glibc)/2.21-0experimental1 which will fix
the issue were [locales-all did not behave exactly like
locales](https://bugs.debian.org/788352) despite having it in the `Provides`
field.
Lunar rebased the `pu/reproducible_builds` branch for
[dpkg](https://tracker.debian.org/dpkg) on top of the released 1.18.2. This
made visible [an issue with `udeb`s and automatically generated debug
packages](https://bugs.debian.org/797391).
The [summary from the meeting at DebConf15 between ftpmasters, dpkg
mainatainers and reproducible builds
folks](http://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-
Mon-20150824/003008.html) has been posted to the revelant mailing lists.
## Packages fixed
The following 70 packages became reproducible due to changes in their build
dependencies: [activemq-activeio](https://tracker.debian.org/activemq-
activeio), [async-http-client](https://tracker.debian.org/async-http-client),
[classworlds](https://tracker.debian.org/classworlds),
[clirr](https://tracker.debian.org/clirr), [compress-
lzf](https://tracker.debian.org/compress-lzf),
[dbus-c++](https://tracker.debian.org/dbus-c++), [felix-
bundlerepository](https://tracker.debian.org/felix-bundlerepository), [felix-
framework](https://tracker.debian.org/felix-framework), [felix-gogo-
command](https://tracker.debian.org/felix-gogo-command), [felix-gogo-
runtime](https://tracker.debian.org/felix-gogo-runtime), [felix-gogo-
shell](https://tracker.debian.org/felix-gogo-shell), [felix-
main](https://tracker.debian.org/felix-main), [felix-shell-
tui](https://tracker.debian.org/felix-shell-tui), [felix-
shell](https://tracker.debian.org/felix-shell), [findbugs-
bcel](https://tracker.debian.org/findbugs-bcel),
[gco](https://tracker.debian.org/gco),
[gdebi](https://tracker.debian.org/gdebi),
[gecode](https://tracker.debian.org/gecode), [geronimo-
ejb-3.2-spec](https://tracker.debian.org/geronimo-ejb-3.2-spec), [git-
repair](https://tracker.debian.org/git-repair),
[gmetric4j](https://tracker.debian.org/gmetric4j), [gs-
collections](https://tracker.debian.org/gs-collections),
[hawtbuf](https://tracker.debian.org/hawtbuf),
[hawtdispatch](https://tracker.debian.org/hawtdispatch), [jack-
tools](https://tracker.debian.org/jack-tools), [jackson-dataformat-
cbor](https://tracker.debian.org/jackson-dataformat-cbor), [jackson-
dataformat-yaml](https://tracker.debian.org/jackson-dataformat-yaml),
[jackson-module-jaxb-annotations](https://tracker.debian.org/jackson-module-
jaxb-annotations), [jmxetric](https://tracker.debian.org/jmxetric), [json-
simple](https://tracker.debian.org/json-simple), [kryo-
serializers](https://tracker.debian.org/kryo-serializers),
[lhapdf](https://tracker.debian.org/lhapdf),
[libccrtp](https://tracker.debian.org/libccrtp),
[libclaw](https://tracker.debian.org/libclaw),
[libcommoncpp2](https://tracker.debian.org/libcommoncpp2),
[libftdi1](https://tracker.debian.org/libftdi1), [libjboss-marshalling-
java](https://tracker.debian.org/libjboss-marshalling-java),
[libmimic](https://tracker.debian.org/libmimic),
[libphysfs](https://tracker.debian.org/libphysfs), [libxstream-
java](https://tracker.debian.org/libxstream-java),
[limereg](https://tracker.debian.org/limereg), [maven-debian-
helper](https://tracker.debian.org/maven-debian-helper), [maven-
filtering](https://tracker.debian.org/maven-filtering), [maven-
invoker](https://tracker.debian.org/maven-invoker),
[mochiweb](https://tracker.debian.org/mochiweb), [mongo-java-
driver](https://tracker.debian.org/mongo-java-driver), [mqtt-
client](https://tracker.debian.org/mqtt-client),
[netty-3.9](https://tracker.debian.org/netty-3.9), [openhft-chronicle-
queue](https://tracker.debian.org/openhft-chronicle-queue), [openhft-
compiler](https://tracker.debian.org/openhft-compiler), [openhft-
lang](https://tracker.debian.org/openhft-lang),
[pavucontrol](https://tracker.debian.org/pavucontrol), [plexus-ant-
factory](https://tracker.debian.org/plexus-ant-factory), [plexus-
archiver](https://tracker.debian.org/plexus-archiver), [plexus-bsh-
factory](https://tracker.debian.org/plexus-bsh-factory), [plexus-
cdc](https://tracker.debian.org/plexus-cdc), [plexus-
classworlds2](https://tracker.debian.org/plexus-classworlds2), [plexus-
component-metadata](https://tracker.debian.org/plexus-component-metadata),
[plexus-container-default](https://tracker.debian.org/plexus-container-
default), [plexus-io](https://tracker.debian.org/plexus-io),
[pytone](https://tracker.debian.org/pytone),
[scolasync](https://tracker.debian.org/scolasync), [sisu-
ioc](https://tracker.debian.org/sisu-ioc), [snappy-
java](https://tracker.debian.org/snappy-java),
[spatial4j-0.4](https://tracker.debian.org/spatial4j-0.4),
[tika](https://tracker.debian.org/tika),
[treeline](https://tracker.debian.org/treeline),
[wss4j](https://tracker.debian.org/wss4j),
[xtalk](https://tracker.debian.org/xtalk),
[zshdb](https://tracker.debian.org/zshdb).
The following packages became reproducible after getting fixed:
* [apr](https://tracker.debian.org/apr)/1.5.2-2 by Stefan Fritsch.
* [binutils-m68hc1x](https://tracker.debian.org/binutils-m68hc1x)/1:2.18-6 by Santiago Vila.
* [buxon](https://tracker.debian.org/buxon)/0.0.5-5 uploaded by Santiago Vila, [original patch](https://bugs.debian.org/777296) by Chris Lamb.
* [cdtool](https://tracker.debian.org/cdtool)/2.1.8-release-3 by Santiago Vila.
* [check](https://tracker.debian.org/check)/0.10.0-1 by Tobias Frost.
* [ffe](https://tracker.debian.org/ffe)/0.3.4-2 by Santiago Vila.
* [flowscan-cuflow](https://tracker.debian.org/flowscan-cuflow)/1.7-9 by Santiago Vila.
* [gmt](https://tracker.debian.org/gmt)/5.1.2+dfsg1-2 by Bas Couwenberg.
* [gtkspellmm](https://tracker.debian.org/gtkspellmm)/3.0.3+dfsg-2 by Philip Rinn.
* [htp](https://tracker.debian.org/htp)/1.19-2 uploaded by Santiago Vila, [original patch](https://bugs.debian.org/795562) by Chris Lamb.
* [igerman98](https://tracker.debian.org/igerman98)/20131206-6 by Roland Rosenfeld.
* [intlfonts](https://tracker.debian.org/intlfonts)/1.2.1-9 uploaded by Santiago Vila, [original patch](https://bugs.debian.org/777012) by Chris Lamb.
* [irda-utils](https://tracker.debian.org/irda-utils)/0.9.18-14 uploaded by Santiago Vila, [original patch](https://bugs.debian.org/777418) by Chris Lamb.
* [jackd2](https://tracker.debian.org/jackd2)/1.9.10+20150825git1ed50c92~dfsg-1 uploaded by Adrian Knoth, [original patch](https://bugs.debian.org/796807) by Chris Lamb.
* [jove](https://tracker.debian.org/jove)/4.16.0.73-4 by Cord Beermann.
* [jquery](https://tracker.debian.org/jquery)/1.11.3+dfsg-1 uploaded by Antonio Terceiro, [original patch](https://bugs.debian.org/782899) by Reiner Herrmann.
* [libapache2-authcookie-perl](https://tracker.debian.org/libapache2-authcookie-perl)/3.22-3 by Niko Tyni.
* [libaqbanking](https://tracker.debian.org/libaqbanking)/5.6.1beta-2 [fixed](https://bugs.debian.org/792727) and uploaded by Micha Lenk.
* [libcitygml](https://tracker.debian.org/libcitygml)/1.4.3-1 by Bas Couwenberg with a fixed new upstream release.
* [libevhtp](https://tracker.debian.org/libevhtp)/1.2.10-3 by Vincent Bernat.
* [libgnome2-perl](https://tracker.debian.org/libgnome2-perl)/1.046-2 by Niko Tyni.
* [libmarc-charset-perl](https://tracker.debian.org/libmarc-charset-perl)/1.35-2 by Niko Tyni.
* [libtime-y2038-perl](https://tracker.debian.org/libtime-y2038-perl)/20100403-5 by Niko Tyni.
* [libxray-absorption-perl](https://tracker.debian.org/libxray-absorption-perl)/3.0.1-3 uploaded by gregor herrmann, [original patch](https://bugs.debian.org/796155) by Niko Tyno.
* [lpc21isp](https://tracker.debian.org/lpc21isp)/1.97-2 by Agustin Henze.
* [luakit](https://tracker.debian.org/luakit)/2012.09.13-r1-6 by Santiago Vila, also with a [patch](https://bugs.debian.org/792977) from akira.
* [moarvm](https://tracker.debian.org/moarvm)/2015.07-1 by Daniel Dehennin with a fixed new upstream release.
* [mosquitto](https://tracker.debian.org/mosquitto)/1.4.3-1 by Roger A. Light.
* [ngircd](https://tracker.debian.org/ngircd)/22.1-2 by Christoph Biedl.
* [nn](https://tracker.debian.org/nn)/6.7.3-10 uploaded by Cord Beermann, [original patch](https://bugs.debian.org/776764) by Chris Lamb.
* [owncloud-client](https://tracker.debian.org/owncloud-client)/2.0.0~rc1+dfsg-1 by Sandro Knauß.
* [postfix-gld](https://tracker.debian.org/postfix-gld)/1.7-7 uploaded by Santiago Vila, patches for [gzip](https://bugs.debian.org/777504) by Chris Lamb and [mtimes](https://bugs.debian.org/793710) by akira.
* [pppconfig](https://tracker.debian.org/pppconfig)/2.3.22 by Santiago Vila.
* [prometheus](https://tracker.debian.org/prometheus)/0.15.1+ds-2 by Martín Ferrari.
* [python-xlrd](https://tracker.debian.org/python-xlrd)/0.9.4-1 by Vincent Bernat.
* [recode](https://tracker.debian.org/recode)/3.6-22 by Santiago Vila.
* [ruby-rmagick](https://tracker.debian.org/ruby-rmagick)/2.15.4-1 by Antonio Terceiro.
* [scite](https://tracker.debian.org/scite)/3.6.0-1 by Antonio Valentino.
* [smartlist](https://tracker.debian.org/smartlist)/3.15-25 by Santiago Vila.
* [tar](https://tracker.debian.org/tar)/1.28-1 uploaded by Bdale Garbee, [original patch](https://bugs.debian.org/774463) by Reiner Herrman.
* [transmissionrpc](https://tracker.debian.org/transmissionrpc)/0.11-2 uploaded by Vincent Bernat, [original patch](https://bugs.debian.org/788598) by Juan Picca.
* [uruk](https://tracker.debian.org/uruk)/20150810-1 uploaded by Joost van Baal-Ilić, [original patch](https://bugs.debian.org/XXX) by Lunar.
* [webassets](https://tracker.debian.org/webassets)/3:0.11-2 uploaded by Agustin Henze, [original patch](https://bugs.debian.org/775135) by Reiner Herrmann.
* [xfig](https://tracker.debian.org/xfig)/1:3.2.5.c-5 by Roland Rosenfeld.
* [xfonts-bolkhov](https://tracker.debian.org/xfonts-bolkhov)/1.1.20001007-8 by Santiago Vila.
Some uploads fixed some reproducibility issues but not all of them:
* [cvs-buildpackage](https://tracker.debian.org/cvs-buildpackage)/5.24 uploaded by Santiago Vila, [original patch](https://bugs.debian.org/777301) by Chris Lamb.
* [gcc-mingw-w64](https://tracker.debian.org/gcc-mingw-w64)/15.5 by Stephen Kitt.
* [vtk6](https://tracker.debian.org/vtk6)/6.2.0+dfsg1-4 by Anton Gladky.
Patches submitted which have not made their way to the archive yet:
* [#797027](https://bugs.debian.org/797027) on [zyne](https://tracker.debian.org/zyne) by Chris Lamb: switch to `pybuild` to get rid of `.pyc` files.
* [#797180](https://bugs.debian.org/797180) on [python-doit](https://tracker.debian.org/python-doit) by Chris Lamb: sort output when creating completion script for bash and zsh.
* [#797211](https://bugs.debian.org/797211) on [apt-dater](https://tracker.debian.org/apt-dater) by Chris Lamb: fix implementation of `SOURCE_DATE_EPOCH`.
* [#797215](https://bugs.debian.org/797215) on [getdns](https://tracker.debian.org/getdns) by Chris Lamb: fix call to `dpkg-parsechangelog` in `debian/rules`.
* [#797254](https://bugs.debian.org/797254) on [splint](https://tracker.debian.org/splint) by Chris Lamb: support `SOURCE_DATE_EPOCH` for version string.
* [#797296](https://bugs.debian.org/797296) on [shiro](https://tracker.debian.org/shiro) by Chris Lamb: remove username from build string.
* [#797408](https://bugs.debian.org/797408) on [splitpatch](https://tracker.debian.org/splitpatch) by Reiner Herrmann: use `SOURCE_DATE_EPOCH` to set manpage date.
* [#797410](https://bugs.debian.org/797410) on [eigenbase-farrago](https://tracker.debian.org/eigenbase-farrago) by Reiner Herrmann: sets the comment style to `scm-safe` which tells `ResourceGen` that no timestamps should be included.
* [#797415](https://bugs.debian.org/797415) on [apparmor](https://tracker.debian.org/apparmor) by Reiner Herrmann: sorting with the locale set to C. CAPABILITIES
* [#797419](https://bugs.debian.org/797419) on [resiprocate](https://tracker.debian.org/resiprocate) by Reiner Herrmann: set the embedded hostname to a static value.
* [#797427](https://bugs.debian.org/797427) on [jam](https:/tracker.debian.org/jam) by Reiner Herrmann: sorting with the locale set to C.
* [#797430](https://bugs.debian.org/797430) on [ii-esu](https://tracker.debian.org/ii-esu) by Reiner Herrmann: sort source list using C locale.
* [#797431](https://bugs.debian.org/797431) on [tatan](https://tracker.debian.org/tatan) by Reiner Herrmann: sort source list using C locale.
Chris Lamb also noticed that binaries shipped with [libsilo-
bin](https://packages.debian.org/libsilo-bin) [did not
work](https://bugs.debian.org/797414).
## Documentation update
Chris Lamb and Ximin Luo assembled a [proper specification for
SOURCE_DATE_EPOCH](https://reproducible-builds.org/specs/source-date-epoch/)
in the hope to convince more upstreams to adopt it. Thanks to Holger it is
published under a non-Debian domain name.
Lunar documented easiest way to solve issues with [file
ordering](https://wiki.debian.org/ReproducibleBuilds/FileOrderInTarballs) and
[timestamps](https://wiki.debian.org/ReproducibleBuilds/TimestampsInTarball)
in tarballs that came with [tar](https://tracker.debian.org/tar)/1.28-1.
Some
[examples](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal#Examples)
on how to use `SOURCE_DATE_EPOCH` have been improved to support systems
without GNU `date`.
## reproducible.debian.net
`armhf` is [finally being
tested](https://reproducible.debian.net/unstable/index_suite_armhf_stats.html),
which also means the remote building of Debian packages finally works! This
paves the way to perform the tests on even more architectures and doing
variations on CPU and date. Some packages even produce the same binary
`Arch:all` packages on different architectures
([1](https://reproducible.debian.net/buildinfo/unstable/amd64/ssh-import-
id_3.21-1_amd64.buildinfo),
[2](https://reproducible.debian.net/buildinfo/unstable/armhf/ssh-import-
id_3.21-1_armhf.buildinfo)). (h01ger)
[Tests for FreeBSD](https://reproducible.debian.net/freebsd/) are finally
running. (h01ger)
As it seems the gcc5 transition has cooled off, we schedule sid more often
than testing again on `amd64`. (h01ger)
[disorderfs](https://tracker.debian.org/disorderfs) has been built and
installed on all build nodes (`amd64` and `armhf`). One issue related to
permissions for root and unpriviliged users needs to be solved before
`disorderfs` can be used on
[reproducible.debian.net](https://reproducible.debian.net/). (h01ger)
## strip-nondeterminism
Version 0.011-1 has been released on August 29th. The new version updates
`dh_strip_nondeterminism` to match recent changes in `debhelper`. (Andrew
Ayer)
## disorderfs
[disorderfs](https://tracker.debian.org/disorderfs), the new FUSE filesystem
to ease testing of filesystem-related variations, is now almost ready to be
used. Version 0.2.0 adds support for extended attributes. Since then Andrew
Ayer also added support to reverse directory entries instead of shuffling
them, and arbitrary padding to the number of blocks used by files.
## Package reviews
142 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 48 added and 259 updated this week.
Santiago Vila renamed the `not_using_dh_builddeb` issue into
[varying_mtimes_in_data_tar_gz_or_control_tar_gz](https://reproducible.debian.net/issues/unstable/varying_mtimes_in_data_tar_gz_or_control_tar_gz_issue.html)
to align better with other tag names.
New issue identified this week:
[random_order_in_python_doit_completion](https://reproducible.debian.net/issues/unstable/random_order_in_python_doit_completion_issue.html).
37 FTBFS issues have been reported by Chris West (Faux) and Chris Lamb.
## Misc.
h01ger gave a talk at [FrOSCon](https://www.froscon.de/) on August 23rd.
[Recordings](https://media.ccc.de/browse/conferences/froscon/2015/froscon2015-1614-the_long_road_to_reproducible_builds.html)
are already online.
_These reports are being reviewed and enhanced every week by many people
hanging out on`#debian-reproducible`. Huge thanks!_
---
layout: blog
week: 19
published: 2015-09-06 22:28:06
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
Dmitry Shachnev uploaded [sphinx](https://tracker.debian.org/sphinx)/1.3.1-6
with improved [patches](https://bugs.debian.org/795976) from Val Lorentz.
Chris Lamb [submitted a patch](https://bugs.debian.org/797521) for [ibus-
table](https://tracker.debian.org/ibus-table) which makes the output of `ibus-
table-createdb` deterministic.
Niko Tyni [wrote a patch](https://bugs.debian.org/797709) to make [libmodule-
build-perl](https://tracker.debian.org/libmodule-build-perl) linking order
deterministic.
Santiago Vila [has been
leading](https://lists.alioth.debian.org/pipermail/reproducible-builds/Week-
of-Mon-20150831/003071.html) discussions on the best way to fix timestamps
coming from Gettext POT files.
## Packages fixed
The following 35 packages became reproducible due to changes in their build
dependencies: [apache-log4j2](https://tracker.debian.org/apache-log4j2),
[dctrl-tools](https://tracker.debian.org/dctrl-tools),
[dms](https://tracker.debian.org/dms),
[gitit](https://tracker.debian.org/gitit),
[gnubik](https://tracker.debian.org/gnubik),
[isrcsubmit](https://tracker.debian.org/isrcsubmit),
[mailutils](https://tracker.debian.org/mailutils),
[normaliz](https://tracker.debian.org/normaliz),
[oaklisp](https://tracker.debian.org/oaklisp), [octave-
fpl](https://tracker.debian.org/octave-fpl), [octave-
specfun](https://tracker.debian.org/octave-specfun), [octave-
vrml](https://tracker.debian.org/octave-vrml),
[opencolorio](https://tracker.debian.org/opencolorio),
[openvdb](https://tracker.debian.org/openvdb),
[pescetti](https://tracker.debian.org/pescetti), [php-
guzzlehttp](https://tracker.debian.org/php-guzzlehttp),
[proofgeneral](https://tracker.debian.org/proofgeneral),
[pyblosxom](https://tracker.debian.org/pyblosxom),
[pyopencl](https://tracker.debian.org/pyopencl),
[pyqi](https://tracker.debian.org/pyqi), [python-
expyriment](https://tracker.debian.org/python-expyriment), [python-flask-
httpauth](https://tracker.debian.org/python-flask-httpauth), [python-
mzml](https://tracker.debian.org/python-mzml), [python-
simpy](https://tracker.debian.org/python-simpy), [python-
tidylib](https://tracker.debian.org/python-tidylib), [reactive-
streams](https://tracker.debian.org/reactive-streams),
[scmxx](https://tracker.debian.org/scmxx), [shared-mime-
info](https://tracker.debian.org/shared-mime-info),
[sikuli](https://tracker.debian.org/sikuli),
[siproxd](https://tracker.debian.org/siproxd),
[srtp](https://tracker.debian.org/srtp),
[tachyon](https://tracker.debian.org/tachyon), [tcltk-
defaults](https://tracker.debian.org/tcltk-defaults),
[urjtag](https://tracker.debian.org/urjtag),
[velvet](https://tracker.debian.org/velvet).
The following packages became reproducible after getting fixed:
* [binutils-m68hc1x](https://tracker.debian.org/binutils-m68hc1x)/1:2.18-7 by Santiago Vila.
* [boa-constructor](https://tracker.debian.org/boa-constructor)/0.6.1-15 by Santiago Vila.
* [brian](https://tracker.debian.org/brian)/1.4.1-3 by Yaroslav Halchenko.
* [criticalmass](https://tracker.debian.org/criticalmass)/1:1.0.0-3 by Santiago Vila.
* [cvs-buildpackage](https://tracker.debian.org/cvs-buildpackage)/5.25 by Santiago Vila.
* [fcrackzip](https://tracker.debian.org/fcrackzip)/1.0-6 uploaded by Adam Borowski, [original patch](https://bugs.debian.org/782213) by Reiner Herrmann.
* [filters](https://tracker.debian.org/filters)/2.54 prepared by Joey Hess, fixed by Marius Gavrilescu.
* [fsvs](https://tracker.debian.org/fsvs)/1.2.6-2 by Santiago Vila.
* [fte](https://tracker.debian.org/fte)/0.50.2b6-6 by Santiago Vila.
* [gcc-mingw-w64](https://tracker.debian.org/gcc-mingw-w64)/15.7 by Stephen Kitt.
* [ircd-hybrid](https://tracker.debian.org/ircd-hybrid)/1:8.2.8+dfsg.1-1 by Dominic Hargreaves.
* [leveldb](https://tracker.debian.org/leveldb)/1.18-3 uploaded by Laszlo Boszormenyi, [patch](https://bugs.debian.org/791960) by Reiner Herrmann.
* [libavg](https://tracker.debian.org/libavg)/1.8.1-2 uploaded by Dimitri John Ledkov, [original patch](https://bugs.debian.org/797440) by Reiner Herrmann.
* [lynx-cur](https://tracker.debian.org/lynx-cur)/2.8.9dev6-4 uploaded by Axel Beckert, [patch](https://bugs.debian.org/792770) by Reiner Herrmann.
* [maildir-utils](https://tracker.debian.org/maildir-utils)/0.9.12-3 by Norbert Preining
* [pd-iemnet](https://tracker.debian.org/pd-iemnet)/0.2-1 by IOhannes m zmölnig.
* [photopc](https://tracker.debian.org/photopc)/3.05-8 by Santiago Vila.
* [postgresql-plproxy](https://tracker.debian.org/postgresql-plproxy)/2.6-1 uploaded by Christoph Berg, [report](https://bugs.debian.org/795984) by Dhole.
* [prometheus-pushgateway](https://tracker.debian.org/prometheus-pushgateway)/0.2.0+ds-2 uploaded by Martín Ferrari, [original patch](https://bugs.debian.org/797622) by Chris Lamb.
* [shelxle](https://tracker.debian.org/shelxle)/1.0.740-1 uploaded by Daniel Leidert, fixed upstream.
* [sigil](https://tracker.debian.org/sigil)/0.8.7+dfsg-2 by Mattia Rizzolo.
* [sks-ecc](https://tracker.debian.org/sks-ecc)/0.93-5 by Santiago Vila.
* [smartlist](https://tracker.debian.org/smartlist)/3.15-25 by Santiago Vila.
* [snd](https://tracker.debian.org/snd)/11.7-4 by Santiago Vila.
* [solarwolf](https://tracker.debian.org/solarwolf)/1.5-2.1 by Graham Inggs.
* [sphinx](https://tracker.debian.org/sphinx)/1.3.1-6 uploaded by Dmitry Shachnev, [patches](https://bugs.debian.org/795976) by Val Lorentz.
* [tla](https://tracker.debian.org/tla)/1.3.5+dfsg1-2 by Santiago Vila.
* [zapping](https://tracker.debian.org/zapping)/0.10~cvs6-10 by Santiago Vila.
The package is not in yet in _unstable_ , but
[linux](https://tracker.debian.org/linux)/4.2-1~exp1 is now reproducible!
Kudos to Ben Hutchings, and most fixes are already merged upstream.
Some uploads fixed some reproducibility issues but not all of them:
* [bochs](https://tracker.debian.org/bochs)/2.6-3 by Santiago Vila.
* [oolite](https://tracker.debian.org/oolite)/1.82-1 by Nicolas Boulenguez.
* [openjdk-7](https://tracker.debian.org/openjdk-7)/7u85-2.6.1-1 uploaded by Matthias Klose, [original patch](https://bugs.debia.org/787159) by Emmanuel Bourg.
* [python-dtcwt](https://tracker.debian.org/python-dtcwt)/0.10.1+dfsg1-2 uploaded by Ghislain Antony Vaillant, [original patch](https://bugs.debian.org/794005) by Chris Lamb.
Patches submitted which have not made their way to the archive yet:
* [#797432](https://bugs.debian.org/797432) on [torus-trooper](https://tracker.debian.org/torus-trooper) by Reiner Herrmann: set locale to `C` when sorting source file list.
* [#797437](https://bugs.debian.org/797437) on [flow-tools](https://tracker.debian.org/flow-tools) by Chris Lamb: use pre-defined hostname and date of the latest `debian/changelog` entry in build string.
* [#797505](https://bugs.debian.org/797505) on [cloudprint](https://tracker.debian.org/cloudprint) by Chris Lamb: remove embedded `.pyc` files.
* [#797506](https://bugs.debian.org/797506) on [comix](https://tracker.debian.org/comix) by Chris Lamb: remove embedded `.pyc` files.
* [#797508](https://bugs.debian.org/797508) on [litl](https://tracker.debian.org/litl) by Chris Lamb: remove date from documentation generated with LaTeX.
* [#797518](https://bugs.debian.org/797518) on [gyoto](https://tracker.debian.org/gyoto) by Chris Lamb: set date in documentation generated with LaTeX to the latest `debian/changelog` entry.
* [#797539](https://bugs.debian.org/797539) on [cadabra](https://tracker.debian.org/cadabra) by Chris Lamb: use date of the latest `debian/changelog` entry as build time.
* [#797543](https://bugs.debian.org/797543) on [xotcl](https://tracker.debian.org/xotcl) by Chris Lamb: sort source list in Makefile.
* [#797579](https://bugs.debian.org/797579) on [ferret-vis](https://tracker.debian.org/ferret-vis) by Chris Lamb: use date of the latest `debian/changelog` entry as build time.
* [#797711](https://bugs.debian.org/797711) on [libkinosearch1-perl](https://tracker.debian.org/libkinosearch1-perl) by Niko Tyni: sort source list in `Build.PL`.
* [#797871](https://bugs.debian.org/797871) on [xbae](https://tracker.debian.org/xbae) by Chris Lamb: use date of the latest `debian/changelog` entry as build time.
## reproducible.debian.net
Some bugs that prevented packages to build successfully in the remote builders
have been fixed. (h01ger)
Two more amd64 build jobs have been removed from the Jenkins host in favor of
six more on the new remote nodes. (h01ger)
The [munin graphs](https://jenkins.debian.net/munin/system-week.html)
currently looks fine, so more amd64 jobs will probably be added in the next
week.
## diffoscope development
Version 32 of [diffoscope](https://tracker.debian.org/diffoscope) has been
released on September 3rd with the following new features:
* A new `--fuzzy-threshold` option to specify the TLSH score used as cut-off for fuzzy matching. Specifying `0` will disable fuzzy-matching entirely. Suggested by Jakub Wilk.
* A new `--new-file` option to treat absent files as empty. This make diffoscope a great tool to look at the content of an archive at once by comparing it with a non-existent file ([example]({{ "/files/blog/2/nonexistent_vs_diffoscope_33_all.deb.diffoscope.txt" | relative_url }})). Suggested by Jakub Wilk.
* Comparisons of symlinks and devices given on the command line is now possible.
* Default values are displayed in `--help`.
It also fixes many bugs. Head over to the
[changelog](https://tracker.debian.org/news/709974) for the full list.
Version 33 was released the day after to fix a bug introduced in the
packaging.
## Documentation update
Chris Lamb [blessed](https://lists.alioth.debian.org/pipermail/reproducible-
builds/Week-of-Mon-20150831/003103.html) the [SOURCE_DATE_EPOCH
specification](https://reproducible-builds.org/specs/source-date-epoch/) with
the version number “1.0”.
Lunar documented how the `.file` assembler directive can [help with random
filenames in debug
symbols](https://wiki.debian.org/ReproducibleBuilds/RandomFilenamesInDebugSymbols).
## Package reviews
235 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 84 added and 277 updated this week.
29 new FTBFS bugs were filled by Chris Lamb, Chris West (Faux), Daniel
Stender, and Niko Tyni.
New issues identified this week:
[random_order_in_ibus_table_createdb_output](https://reproducible.debian.net/issues/unstable/_issue.html),
[random_order_in_antlr_output](https://reproducible.debian.net/issues/unstable/random_order_in_antlr_output_issue.html),
[nondetermistic_link_order_in_module_build](https://reproducible.debian.net/issues/unstable/nondetermistic_link_order_in_module_build_issue.html),
and
[timestamps_in_tex_documents](https://reproducible.debian.net/issues/unstable/timestamps_in_tex_documents_issue.html).
## Misc.
Thanks to Dhole and Thomas Vincent, the [talk held at
DebConf15](http://meetings-archive.debian.net/pub/debian-
meetings/2015/debconf15/Stretching_out_for_trustworthy_reproducible_builds_creating_bit_by_bit_identical_binaries.webm)
now has
[subtitles](https://anonscm.debian.org/cgit/debconfsubs/debconfsubs.git/plain/2015/debconf15/english/Stretching_out_for_trustworthy_reproducible_builds_creating_bit_by_bit_identical_binaries.en.srt)!
[Void Linux](http://www.voidlinux.eu/) started to merge [changes to make
packages produced by xbps
reproducible](https://github.com/voidlinux/xbps/pull/111).
This diff is collapsed.
---
layout: blog
week: 20
published: 2015-09-14 10:54:05
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Media coverage
Motherboard published an [article on the
project](http://motherboard.vice.com/read/how-debian-is-trying-to-shut-down-
the-cia-and-make-software-trustworthy-again) inspired by the [talk at the
Chaos Communication
15](http://media.ccc.de/browse/conferences/camp2015/camp2015-6657-how_to_make_your_software_build_reproducibly.html).
Journalists
[sadly](https://twitter.com/toholdaquill/status/640878186499207168) rarely
pick their headlines. The sensationalist “How Debian Is Trying to Shut Down
the CIA” got started a few rants here and there. [One from OpenBSD developper
Ted Unangst](http://www.tedunangst.com/flak/post/reproducible-builds-are-a-
waste-of-time) lead to a good email contact and some [thorough
comments](https://lobste.rs/s/5bbdbo/reproducible_builds_are_a_waste_of_time/comments/fpc69f#c_fpc69f).
## Toolchain fixes
* Emmanuel Bourg uploaded [maven-ant-helper](https://tracker.debian.org/maven-ant-helper)/7.11 which improved the reproducibility of the Javadoc by removing the timestamps and using the English locale.
* Thomas Schmitt uploaded [libisoburn](https://tracker.debian.org/libisoburn)/1.4.0-2 which adds to the ISO image creator `xorriso` new flags for `-alter_date` to avoid update ctimes. [Report](https://bugs.debian.org/787793) by Daniel Kahn Gillmor.
* Florian Schlichting uplodaded [libmodule-build-perl](https://tracker.debian.org/libmodule-build-perl)/0.421400-2 which makes linked file ordering deterministic. [Original patch](https://bugs.debian.org/797709) by Niko Tyni.
The modified version of [gettext](https://tracker.debian.org/gettext) has been
[removed](https://bugs.debian.org/792687#35) from the experimental toolchain.
Fixing individual package seems a better approach for now.
Chris Lamb sent two patches for [abi-compliance-
checker](https://tracker.debian.org/abi-compliance-checker): one to [drop the
timestamp from generated HTML reports](https://bugs.debian.org/798470) and
another to [make umask and timestamps deterministic in the abi
tarball](https://bugs.debian.org/798481).
[Bugs](https://bugs.debian.org/798557) submitted by Dhole lead to a discussion
on the best way to adapt `pod2man` now that we have [SOURCE_DATE_EPOCH
specified](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal).
There is really a whole class of issues that are currently undiscovered
waiting for tests running on a different date. This is likely to should happen
soon.
Chris Lamb uploaded a new version of
[debhelper](https://tracker.debian.org/debhelper) in the [“reproducible”
repository](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain),
cherry-picking a fix for interactions between ddebs and udebs.
## Packages fixed
The following packages became reproducible due to changes in their build
dependencies: [aspic](https://tracker.debian.org/aspic), [django-
guardian](https://tracker.debian.org/django-guardian), [erlang-
sqlite3](https://tracker.debian.org/erlang-sqlite3),
[etcd](https://tracker.debian.org/etcd), [libnative-platform-
java](https://tracker.debian.org/libnative-platform-java), [mingw-
ocaml](https://tracker.debian.org/mingw-ocaml),
[nose2](https://tracker.debian.org/nose2),
[oar](https://tracker.debian.org/oar),
[obexftp](https://tracker.debian.org/obexftp),
[py3cairo](https://tracker.debian.org/py3cairo), [python-
dugong](https://tracker.debian.org/python-dugong), [python-
secretstorage](https://tracker.debian.org/python-secretstorage), [python-
setuptools](https://tracker.debian.org/python-setuptools),
[qct](https://tracker.debian.org/qct),
[qdox](https://tracker.debian.org/qdox),
[recutils](https://tracker.debian.org/recutils),
[s3ql](https://tracker.debian.org/s3ql),
[wine](https://tracker.debian.org/wine).
The following packages became reproducible after getting fixed:
* [bochs](https://tracker.debian.org/bochs)/2.6-4 by Santiago Vila.
* [codec2](https://tracker.debian.org/codec2)/0.4-3 by A. Maitland Bottoms.
* [coquelicot](https://tracker.debian.org/coquelicot)/0.9.4-1 by Lunar.
* [criticalmass](https://tracker.debian.org/criticalmass)/1:1.0.0-3 by Santiago Vila.
* [ekg](https://tracker.debian.org/ekg)/1:1.9~pre+r2855-3 by Santiago Vila.
* [eterm](https://tracker.debian.org/eterm)/0.9.6-3 by Santiago Vila.
* [fbi](https://tracker.debian.org/fbi)/2.10-2 by Moritz Muehlenhoff.
* [fsvs](https://tracker.debian.org/fsvs)/1.2.6-2 by Santiago Vila.
* [glhack](https://tracker.debian.org/glhack)/1.2-3 by Santiago Vila.
* [httraqt](https://tracker.debian.org/httraqt)/1.4.6-2 by Anton Gladky.
* [libapache-authznetldap-perl](https://tracker.debian.org/libapache-authznetldap-perl)/0.07-6 by gregor herrmann, [original patch](https://bugs.debian.org/798558) by Dhole.
* [libkinosearch1-perl](https://tracker.debian.org/libkinosearch1-perl)/1.01-3 uploaded by Florian Schlichting, [original patch](https://bugs.debian.org/797711) by Niko Tyni.
* [liblucy-perl](https://tracker.debian.org/liblucy-perl)/0.3.3-6 uploaded by Florian Schlichting, [original patch](https://bugs.debian.org/796251) by Niko Tyni.
* [slony1-2](https://tracker.debian.org/slony1-2)/2.2.4-1 by Christoph Berg.
* [slrn](https://tracker.debian.org/slrn)/1.0.2-3 uploaded by Moritz Muehlenhoff, [original patch](https://bugs.debian.org/798269) by Dmitry Bogatov.
* [svtplay-dl](https://tracker.debian.org/svtplay-dl)/0.10.2015.08.24-1 uploaded by Olof Johansson, fixed upstream.
* [swh-plugins](https://tracker.debian.org/swh-plugins)/0.4.15+1-8 uploaded by Jaromír Mikeš, [original patch](https://bugs.debian.org/792424) by Chris Lamb.
* [sysstat](https://tracker.debian.org/sysstat)/11.1.6-2 uploaded by Robert Luberda, [original patch](https://bugs.debian.org/798469) by Chris Lamb.
* [uhd](https://tracker.debian.org/uhd)/3.9.0-3 by A. Maitland Bottoms.
* [volk](https://tracker.debian.org/volk)/1.1-3 by A. Maitland Bottoms.
* [yadifa](https://tracker.debian.org/yadifa)/2.1.3-2 uploaded by Markus Schade, [original patch](https://bugs.debian.org/798450) by Santiago Vila.
Some uploads fixed some reproducibility issues but not all of them:
* [dict-jargon](https://tracker.debian.org/dict-jargon)/4.4.7-3 uploaded by Ruben Molina, [original patch](https://bugs.debian.org/792709) by Dhole.
* [ferret-vis](https://tracker.debian.org/ferret-vis)/6.9.3-3 uploaded by Alastair McKinstry, [original patch](https://bugs.debian.org/797579) by Chris Lamb.
Patches submitted which have not made their way to the archive yet:
* [#798366](https://bugs.debian.org/798366) on [lilo](https://tracker.debian.org/lilo) by Dmitry Bogatov: remove usage of `__TIME__` and `__DATE__` macros.
* [#798557](https://bugs.debian.org/798557) on [libapache-dbi-perl](https://tracker.debian.org/libapache-dbi-perl) by Dhole: set date of the manpage to the latest `debian/changelog` entry.
* [#798776](https://bugs.debian.org/798776) on [testdisk](https://tracker.debian.org/testdisk) by [upstream](http://git.cgsecurity.org/cgit/testdisk/commit/?id=ebfc0ed789a852625121f67878db5e2a7526a5e3)!
## reproducible.debian.net
The configuration of all remote `armhf` and `amd64` nodes in now finished. The
remaining reproducibility tests running on the Jenkins host has been removed.
`armhf` results and graphs are now visible in
[dashboard](https://reproducible.debian.net/reproducible.html). We can now
test the whole archive in 2-3 weeks using the current 12 `amd64` jobs and 3
months using the current 6 `armhf` builders. We will be looking at improving
the `armhf` sitation, maybe using more native systems or via `arm64`. (h01ger)
The Jenkins UI is now more responsive since all jobs building packages have
been moved to remote hosts. (h01ger)
[A new
job](https://jenkins.debian.net/view/reproducible/job/reproducible_nodes_info/)
has been added to collect information about build nodes to be included in the
[variation
table](https://reproducible.debian.net/reproducible.html#variation). (h01ger)
The “currently scheduled” page has been split for
[amd64](https://reproducible.debian.net/index_amd64_scheduled.html) and
[armhf](https://reproducible.debian.net/index_armhf_scheduled.html). They now
give an overview (refreshed every minute, thanks to Chris Lamb) of the
packages currently being tested. (h01ger)
Several cleanup and bugfixes have been made, especially in the remote building
and maintenance scripts. They should now be more robust against network
problems. The automatic scheduler is now also run closer to when _schroots_
and _pbuilders_ are updated. (h01ger, mapreri)
## Package reviews
16 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 54 added and 55 updated this week.
Santiago Vila renamed `lc_messages_randomness` with the more descriptive
[different_pot_creation_date_in_gettext_mo_files](https://reproducible.debian.net/issues/unstable/different_pot_creation_date_in_gettext_mo_files_issue.html).
New issues added this week:
[timestamps_in_reports_generated_by_abi_compliance_checker](https://reproducible.debian.net/issues/unstable/timestamps_in_reports_generated_by_abi_compliance_checker_issue.html),
[umask_and_timestamp_variation_in_tgz_generated_by_abi_compliance_checker](https://reproducible.debian.net/issues/unstable/umask_and_timestamp_variation_in_tgz_generated_by_abi_compliance_checker_issue.html),
and
[timestamps_added_by_blast2](https://reproducible.debian.net/issues/unstable/timestamps_added_by_blast2_issue.html).
23 new FTBFS bugs have been filled by Chris Lamb, and Niko Tyni.
## Misc.
Red Hat developper Mike McLean had a talk at Flock 2015 about [reproducible
builds in
Koji](https://flock2015.sched.org/event/b536597132fdd3ffe72226c1972acc0d).
[Slides](https://mikem.fedorapeople.org/Talks/flock-2015-koji-
reproducibility/) and [video
recording](https://www.youtube.com/watch?v=wxzGdX5iMgw) are available.
[Koji](https://fedoraproject.org/wiki/Koji) is the build infrastructure used
by Fedora, Red Hat and other distributions. It already keeps track of the
environment used for a given build, so the required changes for handling the
environment are smaller than the ones in Debian. Fedora is still missing a
team effort to fix non-determinism in the package builds, but it is great to
see Fedora moving forward.
---
layout: blog
week: 21
published: 2015-09-21 17:33:23
---
[![If you see someone on the Debian ReproducibleBuilds project, buy him/her a
beer. This work is
awesome.]({{ "/images/blog/21/tweet_643904127936933889.png" | relative_url }})]({{ "/images/blog/21/tweet_643904127936933889.png" | relative_url }})
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Media coverage
Nathan Willis covered [our DebConf15 status
update](https://lwn.net/Articles/657479/) in Linux Weekly News. _Access to
non-LWN subscribers will be given on Thursday 24th._
Linux Journal published a [more general
piece](http://www.linuxjournal.com/content/debian-project-aims-keep-cia-our-
computers) last Tuesday.
Unexpected praise for reproducible builds appeared this week in the form of
several iOS applications identified as including spyware. The malware was
undetected by Apple screening. This actually happened because application
developers had simply [downloaded a trojaned version of XCode through an
unofficial source](http://researchcenter.paloaltonetworks.com/2015/09/novel-
malware-xcodeghost-modifies-xcode-infects-apple-ios-apps-and-hits-app-store/).
While reproducible builds can't really help users of non-free software, this
is exactly the kind of attacks that we are trying to prevent in our systems.
## Toolchain fixes
* Mathieu Malaterre uploaded [abi-compliance-checker](https://tracker.debian.org/abi-compliance-checker)/1.99.11-1 which [drops the timestamps from the generated HTML reports](https://bugs.debian.org/798470) and [makes the generated .abi.tar.gz files reproducible](https://bugs.debian.org/798481). Original patches by Chris Lamb.
Niko Tyni wrote and uploaded [a better patch](https://bugs.debian.org/798882)
for the source order problem in [libmodule-build-
perl](https://tracker.debian.org/libmodule-build-perl).
Tristan Seligmann [identified](https://bugs.debian.org/799278) how the code
generated by [python-cffi](https://tracker.debian.org/python-cffi) could be
emitted in random order in some cases. Upstream has already [fixed the
problem](https://bitbucket.org/cffi/cffi/commits/1cfe8c7a59e88186f1a07a9dde28e1787fd900d0).
## Packages fixed
The following 24 packages became reproducible due to changes in their build
dependencies: [apache-curator](https://tracker.debian.org/apache-curator),
[checkbox-ng](https://tracker.debian.org/checkbox-ng),
[gant](https://tracker.debian.org/gant), [gnome-
clocks](https://tracker.debian.org/gnome-clocks),
[hawtjni](https://tracker.debian.org/hawtjni),
[jackrabbit](https://tracker.debian.org/jackrabbit),
[jersey1](https://tracker.debian.org/jersey1),
[libjsr305-java](https://tracker.debian.org/libjsr305-java), [mathjax-
docs](https://tracker.debian.org/mathjax-docs),
[mlpy](https://tracker.debian.org/mlpy),
[moap](https://tracker.debian.org/moap), [octave-
geometry](https://tracker.debian.org/octave-geometry),
[paste](https://tracker.debian.org/paste),
[pdf.js](https://tracker.debian.org/pdf.js),
[pyinotify](https://tracker.debian.org/pyinotify),
[pytango](https://tracker.debian.org/pytango), [python-
asyncssh](https://tracker.debian.org/python-asyncssh), [python-
mock](https://tracker.debian.org/python-mock), [python-
openid](https://tracker.debian.org/python-openid), [python-
repoze.who](https://tracker.debian.org/python-repoze.who),
[shadow](https://tracker.debian.org/shadow),
[swift](https://tracker.debian.org/swift), [tcpwatch-
httpproxy](https://tracker.debian.org/tcpwatch-httpproxy),
[transfig](https://tracker.debian.org/transfig).
The following packages became reproducible after getting fixed:
* [apparmor](https://tracker.debian.org/apparmor)/2.10-2 uploaded by intrigeri, fixed upstream by Christian Boltz, with the same change [suggested](https://bugs.debian.org/797415) by Reiner Herrmann.
* [ardour](https://tracker.debian.org/ardour)/1:4.2~dfsg-2 by IOhannes m zmölnig.
* [dcmtk](https://tracker.debian.org/dcmtk)/3.6.1~20150629-1 uploaded by Andreas Tille, [original patch](https://bugs.debian.org/790133) by akira.
* [deap](https://tracker.debian.org/deap)/1.0.1-4 by Daniel Stender.
* [firebird2.5](https://tracker.debian.org/firebird2.5)/2.5.4.26856.ds4-2 by Damyan Ivanov.
* [gamera](https://tracker.debian.org/gamera)/3.4.2+svn1437-1 by Daniel Stender.
* [genometools](https://tracker.debian.org/genometools)/1.5.7-1 by Sascha Steinbiss.
* [golang-github-go-xorm-core](https://tracker.debian.org/golang-github-go-xorm-core)/0.4.4-1 by Alexandre Viau.
* [klibc](https://tracker.debian.org/klibc)/2.0.4-4 by Ben Hutchings.
* [libgtk2-perl](https://tracker.debian.org/libgtk2-perl)/2:1.2496-3 by intrigeri.
* [lsof](https://tracker.debian.org/lsof)/4.89+dfsg-0.1 uploaded by Laurent Bigonville, [original patch](https://bugs.debian.org/762433) by Lunar.
* [monotone](https://tracker.debian.org/monotone)/1.1-6 by Markus Wanner.
* [ndisc6](https://tracker.debian.org/ndisc6)/1.0.1-4 by Santiago Vila.
* [privoxy](https://tracker.debian.org/privoxy)/3.0.23-4 by Roland Rosenfeld.
* [ruby-flexmock](https://tracker.debian.org/ruby-flexmock)/2.0.0~rc1-1 by Antonio Terceiro.
* [ruby-html2haml](https://tracker.debian.org/ruby-html2haml)/2.0.0-1 by Lunar.
* [tunnelx](https://tracker.debian.org/tunnelx)/20140102-3 uploaded by Wookey, [original patch](https://bugs.debian.org/799221) by Chris Lamb.
* [wtforms](https://tracker.debian.org/wtforms)/2.0.2-1 by Orestis Ioannou, [original patch](https://bugs.debian.org/788599) by Juan Picca.
Some uploads fixed some reproducibility issues but not all of them:
* [maxima](https://tracker.debian.org/maxima)/5.37-1 by Camm Maguire, [report](https://bugs.debian.org/795056) by akira.
Patches submitted which have not made their way to the archive yet:
* [#783152](https://bugs.debian.org/783152) on [kmod](https://tracker.debian.org/kmod) by Lunar: export `SOURCE_DATE_EPOCH` in `debian/rules`.
* [#799010](https://bugs.debian.org/799010) on [389-ds-base](https://tracker.debian.org/389-ds-base) by Chris Lamb: use `SOURCE_DATE_EPOCH` value as the build date.
* [#799206](https://bugs.debian.org/799206) on [python-sqlalchemy-utils](https://tracker.debian.org/python-sqlalchemy-utils) by Chris Lamb: sort the list of extra requirement.
* [#799330](https://bugs.debian.org/799330) on [cappuccino](https://tracker.debian.org/cappuccino) by Chris Lamb: pass a fixed seed to polygen.
* [#799410](https://bugs.debian.org/799410) on [segment](https://tracker.debian.org/segment) by Chris Lamb: use date of the latest `debian/changelog` entry as build date.
## reproducible.debian.net
Tests for [Coreboot](https://reproducible.debian.net/coreboot/),
[OpenWrt](https://reproducible.debian.net/openwrt/),
[NetBSD](https://reproducible.debian.net/netbsd), and
[FreeBSD](https://reproducible.debian.net/freebsd/) now runs weekly (instead
of monthly).
## diffoscope development
Python 3 offers new features (namely `yield from` and `concurrent.futures`)
that could help implement parallel processing. The clear separation of bytes
and unicode strings is also likely to reduce encoding related issues.
Mattia Rizolo thus kicked the effort of porting diffoscope to Python 3.
[tlsh](https://tracker.debian.org/pkg/tlsh) was the only dependency missing a
Python 3 module. This got quickly fixed by a [new
upload](https://tracker.debian.org/news/713714).
The rest of the code has been [moved to the
point](https://anonscm.debian.org/cgit/reproducible/diffoscope.git/log/?h=pu/py3)
where only incompatibilities between Python 2.7 and Pyhon 3.4 had to be
changed. The commit stream still require some cleanups but all tests are now
passing under Python 3.
## Documentation update
The documentation on [how to assemble the weekly
reports](https://anonscm.debian.org/cgit/reproducible/misc.git/tree/reports/README)
has been updated. (Lunar)
The example on how to use
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal)
with CMake has been improved. (Ben Beockel, Daniel Kahn Gillmor)
The solution for [timestamps in man pages generated by
Sphinx](https://wiki.debian.org/ReproducibleBuilds/TimestampsInManpagesGeneratedBySphinx)
now uses SOURCE_DATE_EPOCH. (Mattia Rizzolo)
## Package reviews
45 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 141 added and 62 updated this week.
67 new FTBFS reports have been filled by Chris Lamb, Niko Tyni, and Lisandro
Damián Nicanor Pérez Meyer.
New issues added this week:
[randomness_in_r_rdb_rds_databases](https://reproducible.debian.net/issues/unstable/randomness_in_r_rdb_rds_databases_issue.html),
[python-
ply_compiled_parse_tables](https://reproducible.debian.net/issues/unstable/python-
ply_compiled_parse_tables_issue.html).
## Misc.
The
[prebuilder](https://anonscm.debian.org/cgit/reproducible/misc.git/tree/prebuilder)
script is now properly testing umask variations again.
Santiago Villa started a [discussion on debian-
devel](https://lists.debian.org/debian-devel/2015/09/msg00366.html) on how
binNMUs would work for reproducible builds.
---
layout: blog
week: 22
published: 2015-09-27 15:06:32
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Ben Hutchings uploaded [linux-tools](https://tracker.debian.org/linux-tools)/4.2-1 which makes the tarball generated by `genorig.py` reproducible.
## Packages fixed
The following 22 packages became reproducible due to changes in their build
dependencies: [breathe](https://tracker.debian.org/breathe), [cdi-
api](https://tracker.debian.org/cdi-api), [geronimo-
jpa-2.0-spec](https://tracker.debian.org/geronimo-jpa-2.0-spec), [geronimo-
validation-1.0-spec](https://tracker.debian.org/geronimo-validation-1.0-spec),
[gradle-propdeps-plugin](https://tracker.debian.org/gradle-propdeps-plugin),
[jansi](https://tracker.debian.org/jansi),
[javaparser](https://tracker.debian.org/javaparser), [libjsr311-api-
java](https://tracker.debian.org/libjsr311-api-java), [mac-
widgets](https://tracker.debian.org/mac-widgets),
[mockito](https://tracker.debian.org/mockito),
[mojarra](https://tracker.debian.org/mojarra),
[pastescript](https://tracker.debian.org/pastescript), [plexus-
utils2](https://tracker.debian.org/plexus-utils2),
[powerline](https://tracker.debian.org/powerline), [python-
psutil](https://tracker.debian.org/python-psutil), [python-
sfml](https://tracker.debian.org/python-sfml), [python-
tldap](https://tracker.debian.org/python-tldap),
[pythondialog](https://tracker.debian.org/pythondialog),
[tox](https://tracker.debian.org/tox),
[trident](https://tracker.debian.org/trident),
[truffle](https://tracker.debian.org/truffle),
[zookeeper](https://tracker.debian.org/zookeeper).
The following packages became reproducible after getting fixed:
* [cloudprint](https://tracker.debian.org/cloudprint)/0.14-1 uploaded by David Steele, [original patch](https://bugs.debian.org/797505) by Chris Lamb.
* [cpl-plugin-sinfo](https://tracker.debian.org/cpl-plugin-sinfo)/2.6.5+dfsg-2 by Ole Streicher.
* [fonts-stix](https://tracker.debian.org/fonts-stix)/1.1.1-4 uploaded by Hugo Lefeuvre, [original patch](https://bugs.debian.org/792602) by Dhole.
* [gstreamermm-1.0](https://tracker.debian.org/gstreamermm-1.0)/1.4.3+dfsg-5 by Philip Rinn.
* [hspell](https://tracker.debian.org/hspell)/1.2-3 uploaded by Tzafrir Cohen, [original patch](https://bugs.debian.org/796275) by Reiner Herrmann.
* [libmodule-extractuse-perl](https://tracker.debian.org/libmodule-extractuse-perl)/0.33-2 by gregor herrmann.
* [mariadb-10.0](https://tracker.debian.org/mariadb-10.0)/10.0.21-1 by Otto Kekäläinen.
* [mkvtoolnix](https://tracker.debian.org/mkvtoolnix)/8.4.0-1 uploaded by Christian Marillat, fixed upstream.
* [mlpack](https://tracker.debian.org/mlpack)/1.0.12-5 by Barak A. Pearlmutter.
* [module-assistant](https://tracker.debian.org/module-assistant)/0.11.8 by Andreas Beckmann.
* [pitivi](https://tracker.debian.org/pitivi)/0.94-4 uploaded by Sebastian Dröge, [reported](https://bugs.debian.org/799677) by Scott Kitterman.
* [privoxy](https://tracker.debian.org/privoxy)/3.0.23-4 by Roland Rosenfeld.
* [qtop](https://tracker.debian.org/qtop)/2.3.1-1 uploaded by Hugo Lefeuvre, fixed upstream.
* [seyon](https://tracker.debian.org/seyon)/2.20c-32 by Santiago Vila.
* [subvertpy](https://tracker.debian.org/subvertpy)/0.9.3-2 by Jelmer Vernooij.
* [twitter-bootstrap](https://tracker.debian.org/twitter-bootstrap)/2.0.2+dfsg-8 by Santiago Vila, [reported](https://bugs.debian.org/776299) by Chris Lamb.
* [vdr-plugin-remote](https://tracker.debian.org/vdr-plugin-remote)/0.7.0-1 by Tobias Grimm.
Some uploads fixed some reproducibility issues but not all of them:
* [fldigi](https://tracker.debian.org/fldigi)/3.23.01-1 by Kamal Mostafa.
Patches submitted which have not made their way to the archive yet:
* [#799871](https://bugs.debian.org/799871) on [console-data](https://tracker.debian.org/console-data) by Chris Lamb: grep all keymap files as text.
* [#800007](https://bugs.debian.org/800007) on [anarchism](https://tracker.debian.org/anarchism) by Holger Levsen: use C locale when converting HTML to text files.
* [#800107](https://bugs.debian.org/800107) on [dutch](https://tracker.debian.org/dutch) by Chris Lamb: grep wordlist files as text.
## diffoscope development
The changes to make [diffoscope](http://diffoscope.org/) run under Python 3,
along with many small fixes, entered the archive with [version
35](https://tracker.debian.org/news/714774) on September 21th.
[Another release](https://tracker.debian.org/news/714817) was made the very
next day fixed two encoding-related issues discovered when running diffoscope
on more Debian packages.
## strip-nondeterminism development
[Version 0.12.0](https://tracker.debian.org/news/714866) now [preserves file
permissions on modified zip files](https://bugs.debian.org/798384) and
`dh_strip_nondeterminism` has been made [compatible with older
debhelper](https://bugs.debian.org/799732).
## disorderfs development
[Version 0.3.0](https://tracker.debian.org/news/714861) implemented a “multi-
user” mode that was required to build Debian packages using
[disorderfs](https://tracker.debian.org/disorderfs). It also added command
line options to control the ordering of files in directory (either shuffled or
reversed) and another to do arbitrary changes to the reported space used by
files on disk.
A couple days later, [version 0.4.0](https://tracker.debian.org/news/715182)
was released to support locks, `flush`, `fsync`, `fsyncdir`, `read_buf`, and
`write_buf`. Almost all known issues have now been fixed.
## reproducible.debian.net
disorderfs is now used during the second build. This makes file ordering issue
very easy to identify as such. (h01ger)
Work has been done on making the distributed build setup more reliable.
(h01ger)
## Documentation update
Matt Kraii fixed the example on [how to fix issues related to dates in
Sphinx](https://wiki.debian.org/ReproducibleBuilds/TimestampsInManpagesGeneratedBySphinx).
Recent Sphinx versions should also be compatible with
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal).
## Package reviews
53 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 85 added and 13 updated this week.
46 packages failing to build from source has been identified by Chris Lamb,
Chris West, and Niko Tyni. Chris Lamb was the lucky reporter of bug
[#800000](https://bugs.debian.org/800000) on [vdr-plugin-
prefermenu](https://tracker.debian.org/vdr-plugin-prefermenu).
Issues related to disorderfs are being [tracked with a new
issue](https://reproducible.debian.net/issues/unstable/ftbfs_due_to_disorderfs_issue.html).
---
layout: blog
week: 23
published: 2015-10-04 13:07:17
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Barry Warsaw uploaded [wheel](https://tracker.debian.org/wheel)/0.26.0-1 which now uses [SOURCE_DATE_EPOCH instead of WHEEL_FORCE_TIMESTAMP](https://bugs.debian.org/795942) and [uses time.gmtime() to avoid timezone issues](https://bugs.debian.org/789981). Patches by Chris Lamb and Reiner Herrmann.
Andreas Metzler uploaded
[autogen](https://tracker.debian.org/autogen)/1:5.18.6-1 in _experimental_
with [several patches](https://bugs.debian.org/794892) for reproducibility
issues written by Valentin Lorentz.
Groovy upstream has merged a [change](https://github.com/apache/incubator-
groovy/pull/121) proposed by Emmanuel Bourg to remove timestamps generated by
`groovydoc`.
Ben Hutchings submitted a patch to [add support for
SOURCE_DATE_EPOCH](http://www.spinics.net/lists/linux-kbuild/msg11728.html) in
`linux-kbuild` as an alternate way to specify the build timestamp.
Reiner Herrman has sent a [patch](https://bugs.debian.org/800797) adding
support for
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal)
in [docbook-utils](https://tracker.debian.org/docbook-utils).
## Packages fixed
The following packages became reproducible due to changes in their build
dependencies: [commons-csv](https://tracker.debian.org/commons-csv). [fest-
reflect](https://tracker.debian.org/fest-reflect), [sunxi-
tools](https://tracker.debian.org/sunxi-tools),
[xfce4-terminal](https://tracker.debian.org/xfce4-terminal),
The following packages became reproducible after getting fixed:
* [httpcomponents-client](https://tracker.debian.org/httpcomponents-client)/4.5.1-1 by Emmanuel Bourg.
* [jhead](https://tracker.debian.org/jhead)/1:3.00-2 by Ludovic Rousseau.
* [libvigraimpex](https://tracker.debian.org/libvigraimpex)/1.10.0+dfsg-10 by Daniel Stender.
* [linux](https://tracker.debian.org/linux)/4.2-1~exp1 by Ben Hutchings.
* [maelstrom](https://tracker.debian.org/maelstrom)/1.4.3-L3.0.6+main-7 by Santiago Vila.
* [nedit](https://tracker.debian.org/nedit)/1:5.6a-3 by Paul Gevers.
* [pitivi](https://tracker.debian.org/pitivi)/0.94-4 by Sebastian Dröge, [reported](https://bugs.debian.org/799677) by Scott Kitterman.
* [procenv](https://tracker.debian.org/procenv)/0.40-2 by James Hunt.
* [seyon](https://tracker.debian.org/seyon)/2.20c-32 by Santiago Vila.
* [slib](https://tracker.debian.org/slib)/3b1-5 by Santiago Vila.
* [spock](https://tracker.debian.org/spock)/0.7-groovy-2.0-1 by Emmanuel Bourg.
* [u-boot](https://tracker.debian.org/u-boot)/2015.10~rc4+dfsg1-1 by Vagrant Cascadian.
* [vdr-plugin-remote](https://tracker.debian.org/vdr-plugin-remote)/0.7.0-1 by Tobias Grimm.
Some uploads fixed some reproducibility issues but not all of them:
* [dutch](https://tracker.debian.org/dutch)/1:2.10-4 uploaded by Thijs Kinkhorst, [original patch](https://bugs.debian.org/800107) by Chris Lamb.
Patches submitted which have not made their way to the archive yet:
* [#800776](https://bugs.debian.org/800776) on [cluster-glue](https://tracker.debian.org/cluster-glue): exports `SOURCE_DATE_EPOCH` in `debian/rules`.
Tomasz Rybak uploaded [pycuda](https://tracker.debian.org/pycuda)/2015.1.3-1
which should fix reproducibility issues. The package has not been tested as it
is in _contrib_.
akira found an [embedded code copy of
texi2html](https://bugs.debian.org/800653) in
[fftw](https://tracker.debian.org/fftw).
## reproducible.debian.net
Email notifications are now only sent once a day per package, instead of on
each status change. (h01ger)
[disorderfs](https://tracker.debian.org/disorderfs) has been temporarily
disabled to see if it had any impact on the disk space issues. (h01ger)
When running out of disk space, build nodes will now automatically detect the
problem. This means test results will not be recorded as “FTBFS” and the
problem will be reported to Jenkins maintainers. (h01ger)
The navigation menu of package pages has been improved. (h01ger)
The two `amd64` builders now use two different kernel versions: 3.16 from
stable and 4.1 from backports on the other. (h01ger)
We now [graph the number of packages which needs to be
fixed](https://reproducible.debian.net/unstable/amd64/stats_pkgs_to_fix.png).
(h01ger)
Munin now creates graphs on how many builds were performed by build nodes
([example](https://jenkins.debian.net/munin/debian.net/profitbricks-
build1-amd64.debian.net/jenkins_reproducible_builds.html)). (h01ger)
A migration plan has been agreed with [DSA](https://dsa.debian.org/) on how to
turn Jenkins into an official Debian service. A backport of [jenkins-job-
builder](https://tracker.debian.org/jenkins-job-builder) for Jessie is
currently missing. (h01ger)
## Package reviews
119 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 103 added and 45 updated this week.
16 “fail to build from source” issues were reported by Chris Lamb and Mattia
Rizzolo.
New issue this week:
[timestamps_in_manpages_generated_by_docbook_utils](https://reproducible.debian.net/issues/unstable/timestamps_in_manpages_generated_by_docbook_utils_issue.html).
## Misc.
Allan McRae has submitted a patch to make [ArchLinux
pacman](https://wiki.archlinux.org/index.php/Pacman) [record a .BUILDINFO
file](https://lists.archlinux.org/pipermail/pacman-
dev/2015-October/020357.html).
---
layout: blog
week: 24
published: 2015-10-14 12:37:33
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Niels Thykier uploaded [debhelper](https://tracker.debian.org/debhelper)/9.20151004 which exports [SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal) when running `dh_auto_*` ([patch](https://bugs.debian.org/791823) by Dhole). `dh` now also calls `dh_strip_nondeterminism` during build ([patch](https://bugs.debian.org/759895) by Andrew Ayer). The only remaining change regarding reproducibility in the [custom](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain) debhelper is related to [mtimes in data.tar](https://bugs.debian.org/759886) which might be fixed directly in [dpkg](https://tracker.debian.org/dpkg) instead.
* Niels Thykier made another upload of [debhelper](https://tracker.debian.org/debhelper)/9.20151005 the next day to sort Build IDs added by `dh_strip` in control files.
Scott Kitterman [fixed](https://alioth.debian.org/scm/loggerhead/pkg-
python/python3-defaults-debian/revision/331#debian/py3versions.py) an
[issue](https://lists.alioth.debian.org/pipermail/reproducible-builds/Week-of-
Mon-20151005/003555.html) with non-deterministic Depends generated by [dh-
python](https://tracker.debian.org/dh-python) identified by Santiago Vila and
Chris Lamb.
Lunar [updated the patch](https://bugs.debian.org/719845#81) against
[dpkg](https://tracker.debian.org/dpkg) which makes the order of files in
`control.tar.gz` deterministic using the new `--sort=name` option available in
GNU Tar 1.28.
josch released sbuild version 0.66.0-1 with several fixes and improvements.
The most notable one for _reproducible builds_ is the new `--build-path`
option and `$build_path` configuration variable added by akira which allows to
[explicitly chose a given build path](https://bugs.debian.org/790868).
Reiner Herrmann wrote a new [patch](https://bugs.debian.org/801470) for [dh-
systemd](https://tracker.debian.org/init-system-helpers) to sort the list of
unit files in the generated maintainer scripts.
## Packages fixed
The following packages became reproducible due to changes in their build
dependencies: [aoeui](https://tracker.debian.org/aoeui),
[apron](https://tracker.debian.org/apron),
[camlmix](https://tracker.debian.org/camlmix),
[cudf](https://tracker.debian.org/cudf),
[findlib](https://tracker.debian.org/findlib), [glpk-
java](https://tracker.debian.org/glpk-java),
[hawtjni](https://tracker.debian.org/hawtjni),
[haxe](https://tracker.debian.org/haxe), [java-atk-
wrapper](https://tracker.debian.org/java-atk-wrapper), [llvm-
py](https://tracker.debian.org/llvm-py),
[misery](https://tracker.debian.org/misery),
[mtasc](https://tracker.debian.org/mtasc),
[ocamldsort](https://tracker.debian.org/ocamldsort),
[optcomp](https://tracker.debian.org/optcomp),
[spamoracle](https://tracker.debian.org/spamoracle).
The following packages became reproducible after getting fixed:
* [classified-ads](https://tracker.debian.org/classified-ads)/0.08-1 uploaded by Antti Järvinen, [fix merged upstream](https://github.com/operatornormal/classified-ads/commit/db7cbe561e1ea9b657698f61308441fc2cf26df9), [original patch](https://bugs.debian.org/794395) by Reiner Herrmann.
* [criu](https://tracker.debian.org/criu)/1.7-3 uploaded by Salvatore Bonaccorso, [original patch](https://bugs.debian.org/801211) by Chris Lamb.
* [doomsday](https://tracker.debian.org/doomsday)/1.15.4-1 by Michael Gilbert.
* [ejabberd](https://tracker.debian.org/ejabberd)/15.07-1~exp1 by Philipp Huebner.
* [libxbean-java](https://tracker.debian.org/libxbean-java)/4.4-1 by Emmanuel Bourg.
* [markdown](https://tracker.debian.org/markdown)/1.0.1-8 uploaded by Matt Kraai, original patches by Chris Lamb ([#776925](https://bugs.debian.org/776925)) and akira ([#793701](https://bugs.debian.org/793701)).
* [nedit](https://tracker.debian.org/nedit)/1:5.6a-3 by Paul Gevers.
* [nvidia-settings](https://tracker.debian.org/nvidia-settings)/340.93-1 uploaded by Andreas Beckmann, [original patch](https://bugs.debian.org/786637) by Lunar.
* [ocaml](https://tracker.debian.org/ocaml)/4.02.3-2 by Stéphane Glondu.
* [polygen](https://tracker.debian.org/polygen)/1.0.6.ds2-14 uploaded by Mehdi Dogguy, [original patch](https://bugs.debian.org/776576) by Chris Lamb.
* [stsci.distutils](https://tracker.debian.org/stsci.distutils)/0.3.7-4 by Aurelien Jarno.
* [vdr](https://tracker.debian.org/vdr)/2.2.0-4 by Tobias Grimm.
* [vdr-plugin-xineliboutput](https://tracker.debian.org/vdr-plugin-xineliboutput)/1.1.0+cvs20150907-3 by Tobias Grimm.
* [w3c-markup-validator](https://tracker.debian.org/w3c-markup-validator)/1.3+dfsg-3 by Santiago Vila.
* [xcolorsel](https://tracker.debian.org/xcolorsel)/1.1a-19 by Santiago Vila.
* [xmoto](https://tracker.debian.org/xmoto)/0.5.11+dfsg-3 by Stephen Kitt.
Some uploads fixed some reproducibility issues but not all of them:
* [ognl](https://tracker.debian.org/ognl)/2.7.3-6 by Emmanuel Bourg.
* [enblend-enfuse](https://tracker.debian.org/enblend-enfuse)/4.1.4+dfsg-2 by Andreas Metzler.
Untested
* [nvidia-xconfig](https://tracker.debian.org/nvidia-xconfig)/340.93-1 by Andreas Beckmann.
* [nvidia-settings-legacy-304xx](https://tracker.debian.org/nvidia-settings-legacy-304xx)/304.128-1 by Andreas Beckmann.
Patches submitted which have not made their way to the archive yet:
* [#801212](https://bugs.debian.org/801212) on [unicode-data](https://tracker.debian.org/unicode-data) by Esa Peuha: set `TZ=UTC` when calling `unzip`.
## reproducible.debian.net
[ProfitBricks](https://www.profitbricks.com/) once again increased their
support for reproducible builds in Debian and in other free software projects
by adding 58 new cores and 138 GiB of RAM to the already existing setup. Two
new `amd64` build nodes and 16 new `amd64` build jobs have been added which
doubles the build capacity per day and allows us to spot many kind of problems
earlier. The size of the `tmpfs` where builds are performed has also been
increased from 70 to 200 GiB on all `amd64` build nodes. Huge
[thanks](https://jenkins.debian.net/userContent/thanks.html)!
When examining a package, a link now points to a table listing all previous
recorded tests for the same package. (Mattia) The menu on the package pages
has also been improved. (h01ger)
Packages in the
[depwait](https://reproducible.debian.net/unstable/amd64/index_depwait.html)
state are now rescheduled automatically after five days. (h01ger)
Links to documentation and other projects being tested have been made more
visible on the [landing
page](https://reproducible.debian.net/reproducible.html). (h01ger)
To reduce noise on the team IRC channel five different types of notifications
have been turned into mail notifications. The remaining ones have been
shortened and the status changes have been limited to _unstable_ and
_experimental_. (h01ger)
Maintainer notifications about status changes in a package will only be sent
out once per day, and not on each status change. (h01ger)
## diffoscope development
Some more experiments of concurrent processing have been made. None were good
and reliable enough to be shared, though.
## Package reviews
48 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 189 added and 23 updated this week.
9 FTBFS bugs were reported by Chris Lamb.
## Misc.
h01ger met with Levente Polyak to discuss testing Arch Linux on Debian
continuous test system with an easily extensible framework. The idea is to
also allow testing of other distributions, and provide a nice package based
view like the one for Debian.
---
layout: blog
week: 25
published: 2015-10-18 20:51:25
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Scott Kitterman uploaded [python3-defaults](https://tracker.debian.org/python3-defaults)/3.4.3-7 which changes `py3versions to list versions in a consistent order`. Issue [reported](https://bugs.debian.org/801376) by Santiago Vila with a tentative patch by Chris Lamb. Sadly, it appears the problem is not entirely solved.
* Martin Pitt uploaded [init-system-helpers](https://tracker.debian.org/init-system-helpers)/1.24 which makes the order of unit files in maintainer scripts stable. [Original patch](https://bugs.debian.org/801470) by Reiner Herrmann.
* Niko Tyni uploaded [libextutils-xsbuilder-perl](https://tracker.debian.org/libextutils-xsbuilder-perl)/0.28-3 which [makes the generated XS code reproducible](https://bugs.debian.org/802078).
Niko Tyni wrote a new [patch](https://bugs.debian.org/801621) adding support
for
[SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal)
in `Pod::Man`. This would complement or replace the previously implemented
`POD_MAN_DATE` environment variable in a more generic way.
Niko Tyni [proposed a fix](http://bugs.debian.org/802005) to prevent [mtime
variation in
directories](https://reproducible.debian.net/issues/unstable/timestamps_in_directories_issue.html)
due to [debhelper](https://tracker.debian.org/debhelper) usage of `cp
--parents -p`.
## Packages fixed
The following 119 packages became reproducible due to changes in their build
dependencies: [aac-tactics](https://tracker.debian.org/aac-tactics),
[aafigure](https://tracker.debian.org/aafigure),
[apgdiff](https://tracker.debian.org/apgdiff), [bin-
prot](https://tracker.debian.org/bin-prot),
[boxbackup](https://tracker.debian.org/boxbackup),
[calendar](https://tracker.debian.org/calendar),
[camlmix](https://tracker.debian.org/camlmix),
[cconv](https://tracker.debian.org/cconv),
[cdist](https://tracker.debian.org/cdist), [cl-
asdf](https://tracker.debian.org/cl-asdf), [cli-
common](https://tracker.debian.org/cli-common), [cluster-
glue](https://tracker.debian.org/cluster-glue),
[cppo](https://tracker.debian.org/cppo),
[cvs](https://tracker.debian.org/cvs),
[esdl](https://tracker.debian.org/esdl),
[ess](https://tracker.debian.org/ess),
[faucc](https://tracker.debian.org/faucc),
[fauhdlc](https://tracker.debian.org/fauhdlc),
[fbcat](https://tracker.debian.org/fbcat), [flex-
old](https://tracker.debian.org/flex-old),
[freetennis](https://tracker.debian.org/freetennis),
[ftgl](https://tracker.debian.org/ftgl),
[gap](https://tracker.debian.org/gap), [ghc](https://tracker.debian.org/ghc),
[git-cola](https://tracker.debian.org/git-cola), [globus-authz-callout-
error](https://tracker.debian.org/globus-authz-callout-error), [globus-
authz](https://tracker.debian.org/globus-authz), [globus-
callout](https://tracker.debian.org/globus-callout), [globus-
common](https://tracker.debian.org/globus-common), [globus-ftp-
client](https://tracker.debian.org/globus-ftp-client), [globus-ftp-
control](https://tracker.debian.org/globus-ftp-control), [globus-gass-
cache](https://tracker.debian.org/globus-gass-cache), [globus-gass-
copy](https://tracker.debian.org/globus-gass-copy), [globus-gass-
transfer](https://tracker.debian.org/globus-gass-transfer), [globus-gram-
client](https://tracker.debian.org/globus-gram-client), [globus-gram-job-
manager-callout-error](https://tracker.debian.org/globus-gram-job-manager-
callout-error), [globus-gram-protocol](https://tracker.debian.org/globus-gram-
protocol), [globus-gridmap-callout-error](https://tracker.debian.org/globus-
gridmap-callout-error), [globus-gsi-
callback](https://tracker.debian.org/globus-gsi-callback), [globus-gsi-cert-
utils](https://tracker.debian.org/globus-gsi-cert-utils), [globus-gsi-
credential](https://tracker.debian.org/globus-gsi-credential), [globus-gsi-
openssl-error](https://tracker.debian.org/globus-gsi-openssl-error), [globus-
gsi-proxy-core](https://tracker.debian.org/globus-gsi-proxy-core), [globus-
gsi-proxy-ssl](https://tracker.debian.org/globus-gsi-proxy-ssl), [globus-gsi-
sysconfig](https://tracker.debian.org/globus-gsi-sysconfig), [globus-gss-
assist](https://tracker.debian.org/globus-gss-assist), [globus-gssapi-
error](https://tracker.debian.org/globus-gssapi-error), [globus-gssapi-
gsi](https://tracker.debian.org/globus-gssapi-gsi), [globus-net-
manager](https://tracker.debian.org/globus-net-manager), [globus-openssl-
module](https://tracker.debian.org/globus-openssl-module), [globus-
rsl](https://tracker.debian.org/globus-rsl), [globus-scheduler-event-
generator](https://tracker.debian.org/globus-scheduler-event-generator),
[globus-xio-gridftp-driver](https://tracker.debian.org/globus-xio-gridftp-
driver), [globus-xio-gsi-driver](https://tracker.debian.org/globus-xio-gsi-
driver), [globus-xio](https://tracker.debian.org/globus-xio), [gnome-control-
center](https://tracker.debian.org/gnome-control-center),
[grml2usb](https://tracker.debian.org/grml2usb),
[grub](https://tracker.debian.org/grub),
[guilt](https://tracker.debian.org/guilt),
[hgview](https://tracker.debian.org/hgview),
[htmlcxx](https://tracker.debian.org/htmlcxx),
[hwloc](https://tracker.debian.org/hwloc),
[imms](https://tracker.debian.org/imms),
[kde-l10n](https://tracker.debian.org/kde-l10n),
[keystone](https://tracker.debian.org/keystone),
[kimwitu++](https://tracker.debian.org/kimwitu++), [kimwitu-
doc](https://tracker.debian.org/kimwitu-doc),
[kmod](https://tracker.debian.org/kmod),
[krb5](https://tracker.debian.org/krb5),
[laby](https://tracker.debian.org/laby),
[ledger](https://tracker.debian.org/ledger),
[libcrypto++](https://tracker.debian.org/libcrypto++),
[libopendbx](https://tracker.debian.org/libopendbx),
[libsyncml](https://tracker.debian.org/libsyncml),
[libwps](https://tracker.debian.org/libwps), [lprng-
doc](https://tracker.debian.org/lprng-doc),
[madwimax](https://tracker.debian.org/madwimax),
[maria](https://tracker.debian.org/maria), [mediawiki-
math](https://tracker.debian.org/mediawiki-math),
[menhir](https://tracker.debian.org/menhir),
[misery](https://tracker.debian.org/misery), [monotone-
viz](https://tracker.debian.org/monotone-viz),
[morse](https://tracker.debian.org/morse),
[mpfr4](https://tracker.debian.org/mpfr4),
[obus](https://tracker.debian.org/obus), [ocaml-
csv](https://tracker.debian.org/ocaml-csv), [ocaml-
reins](https://tracker.debian.org/ocaml-reins),
[ocamldsort](https://tracker.debian.org/ocamldsort), [ocp-
indent](https://tracker.debian.org/ocp-indent),
[openscenegraph](https://tracker.debian.org/openscenegraph),
[opensp](https://tracker.debian.org/opensp),
[optcomp](https://tracker.debian.org/optcomp),
[opus](https://tracker.debian.org/opus),
[otags](https://tracker.debian.org/otags), [pa-
bench](https://tracker.debian.org/pa-bench), [pa-
ounit](https://tracker.debian.org/pa-ounit), [pa-
test](https://tracker.debian.org/pa-test),
[parmap](https://tracker.debian.org/parmap),
[pcaputils](https://tracker.debian.org/pcaputils), [perl-cross-
debian](https://tracker.debian.org/perl-cross-debian),
[prooftree](https://tracker.debian.org/prooftree),
[pyfits](https://tracker.debian.org/pyfits),
[pywavelets](https://tracker.debian.org/pywavelets),
[pywbem](https://tracker.debian.org/pywbem),
[rpy](https://tracker.debian.org/rpy),
[signify](https://tracker.debian.org/signify),
[siscone](https://tracker.debian.org/siscone),
[swtchart](https://tracker.debian.org/swtchart),
[tipa](https://tracker.debian.org/tipa),
[typerep](https://tracker.debian.org/typerep),
[tyxml](https://tracker.debian.org/tyxml),
[unison2.32.52](https://tracker.debian.org/unison2.32.52),
[unison2.40.102](https://tracker.debian.org/unison2.40.102),
[unison](https://tracker.debian.org/unison),
[uuidm](https://tracker.debian.org/uuidm),
[variantslib](https://tracker.debian.org/variantslib),
[zipios++](https://tracker.debian.org/zipios++),
[zlibc](https://tracker.debian.org/zlibc), [zope-
maildrophost](https://tracker.debian.org/zope-maildrophost).
The following packages became reproducible after getting fixed:
* [autoconf2.13](https://tracker.debian.org/autoconf2.13)/2.13-67 uploaded by Ben Pfaff, [original patch](https://bugs.debian.org/801885) by Santiago Vila.
* [ding](https://tracker.debian.org/ding)/1.8-3 by Roland Rosenfeld.
* [dropbear](https://tracker.debian.org/dropbear)/2015.68-1 by Guilhem Moulin. First set of patches ([#777324](https://bugs.debian.org/777324), [#793006](https://bugs.debian.org/793006)) by Chris Lamb and akira.
* [nvram-wakeup](https://tracker.debian.org/nvram-wakeup)/1.1-3 by Tobias Grimm.
* [original-awk](https://tracker.debian.org/original-awk)/2012-12-20-5 by Santiago Vila.
* [resiprocate](https://tracker.debian.org/resiprocate)/1:1.10.0-1 uploaded by Daniel Pocock, [patch](https://bugs.debian.org/797419) by Reiner Herrmann merged upstream.
* [sbuild](https://tracker.debian.org/sbuild)/0.66.0-5 by Johannes Schauer, [reported](https://bugs.debian.org/801882) by Jakub Wilk.
* [scribus](https://tracker.debian.org/scribus)/1.4.5+dfsg1-4 by Mattia Rizzolo.
* [sgmltools-lite](https://tracker.debian.org/sgmltools-lite)/3.0.3.0.cvs.20010909-19 by Santiago Vila.
* [unicode-data](https://tracker.debian.org/unicode-data)/8.0-2 uploaded by Alastair McKinstry, [original patch](https://bugs.debian.org/801212) by Esa Peuha.
* [xmoto](https://tracker.debian.org/xmoto)/0.5.11+dfsg-3 by Stephen Kitt.
Packages which could not be tested:
* [mp4h](https://tracker.debian.org/mp4h)/1.3.1-11 by Axel Beckert (_shared memory issue on`reproducible.debian.net`_).
* [nvidia-graphics-drivers-legacy-304xx](https://tracker.debian.org/nvidia-graphics-drivers-legacy-304xx)/304.128-5 by Andreas Beckmann (_non-free_).
Some uploads fixed some reproducibility issues but not all of them:
* [libvirt](https://tracker.debian.org/libvirt)/1.2.20-1 by Guido Günther.
* [libgpars-groovy-java](https://tracker.debian.org/libgpars-groovy-java)/1.2.1-4 by Emmanuel Bourg.
Patches submitted which have not made their way to the archive yet:
* [#801520](https://bugs.debian.org/801520) on [libapache2-mod-perl2](https://tracker.debian.org/libapache2-mod-perl2) by Niko Tyni: sort the list of files used to build the documentation.
* [#801523](https://bugs.debian.org/801523) on [perl](https://tracker.debian.org/perl) by Niko Tyni: sort the list of input files in `PPPort_xs.PL`. [Forwarded upstream](https://github.com/mhx/Devel-PPPort/pull/28).
* [#801864](https://bugs.debian.org/801864) on [ncurses](https://tracker.debian.org/ncurses) by Esa Peuha: use C locale when sorting the list of keys.
* [#802042](https://bugs.debian.org/802042) on [libchado-perl](https://tracker.debian.org/libchado-perl) by Niko Tyni: sort keys in installed configuration file.
Lunar reported that [test strings depend on default character encoding of the
build system](https://bugs.debian.org/801855) in
[ongl](https://tracker.debian.org/ongl).
## reproducible.debian.net
The 189 packages composing the Arch Linux “core” repository are [now being
tested](https://reproducible.debian.net/archlinux/). No packages are currently
reproducible, but most of the time the difference is limited to metadata. This
has already gained some interest in the Arch Linux community.
An explicit log message is now visible when a build has been killed due to the
12 hours timeout. (h01ger)
Remote build setup has been made more robust and self maintenance has been
further improved. (h01ger)
The minimum age for rescheduling of already tested `amd64` packages has been
lowered from 14 to 7 days, thanks to the increase of hardware resources
sponsored by [ProfitBricks](https://www.profitbricks.co.uk/) last week.
(h01ger)
## diffoscope development
[diffoscope](http://diffoscope.org/) version 37 has been released on October
15th. It adds support for two new file formats (CBFS images and Debian `.dsc`
files). After proposing the required changes to
[TLSH](https://github.com/trendmicro/tlsh), fuzzy hashes are now computed
incrementally. This will avoid reading entire files in memory which caused
problems for large packages.
New tests have been added for the command-line interface. More character
encoding issues have been fixed. Malformed `md5sums` will now be compared as
binary files instead of making diffoscope crash amongst several other minor
fixes.
Version 38 was released two days later to fix the versioned dependency on
[python3-tlsh](https://tracker.debian.org/tlsh).
## strip-nondeterminism development
[strip-nondeterminism](https://tracker.debian.org/strip-nondeterminism)
version 0.013-1 has been uploaded to the archive. It fixes an [issue with
nonconformant PNG files with trailing garbage](https://bugs.debian.org/802057)
reported by Roland Rosenfeld.
## disorderfs development
[disorderfs](https://tracker.debian.org/disorderfs) version 0.4.1-1 is a stop-
gap release that will [disable lock
propagation](https://bugs.debian.org/800063), unless `--share-locks=yes` is
specified, as it still is affected by unidentified issues.
## Documentation update
Lunar has been busy creating a proper website for `reproducible-builds.org`
that would be a common location for news, documentation, and tools for all
free software projects working on reproducible builds. It's not yet ready to
be published, but it's surely getting there.
![Homepage of the future reproducible-builds.org website]({{ "/images/blog/25/rbwww1.png" | relative_url }})
![“Who's involved?” page of the future reproducible-builds.org
website]({{ "/images/blog/25/rbwww2.png" | relative_url }})
## Package reviews
103 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 394 added and 29 updated this week.
72 FTBFS issues were reported by Chris West and Niko Tyni.
New issues:
[random_order_in_static_libraries](https://reproducible.debian.net/issues/unstable/random_order_in_static_libraries_issue.html),
[random_order_in_md5sums](https://reproducible.debian.net/issues/unstable/random_order_in_md5sums_issue.html).
---
layout: blog
week: 26
published: 2015-10-27 10:21:27
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Stefano Rivera uploaded [python-cffi](https://tracker.debian.org/python-cffi)/1.3.0-1 which makes the generated code order deterministic for anonymous unions and anonymous structs. [Reported](https://bugs.debian.org/799278) by Tristan Seligmann, and [fixed uptream](https://bitbucket.org/cffi/cffi/commits/1cfe8c7a59e88186f1a07a9dde28e1787fd900d0).
Mattia Rizzolo created a [bug report](https://bugs.debian.org/802241) to
continue the discussion on storing cryptographic checksums of the installed
`.deb` in dpkg database. This follows the [discussion that happened in
June](https://lists.debian.org/debian-dpkg/2015/06/msg00011.html) and is a
pre-requisite to add checksums to [.buildinfo
files](https://wiki.debian.org/ReproducibleBuilds/BuildinfoSpecification).
Niko Tyni [identified](https://bugs.debian.org/802528) why the [Vala
compiler](https://tracker.debian.org/vala) would generate code in varying
order. A better patch than his initial attempt still needs to be written.
## Packages fixed
The following 15 packages became reproducible due to changes in their build
dependencies: [alt-ergo](https://tracker.debian.org/alt-ergo),
[approx](https://tracker.debian.org/approx), [bin-
prot](https://tracker.debian.org/bin-prot),
[caml2html](https://tracker.debian.org/caml2html),
[coinst](https://tracker.debian.org/coinst),
[dokujclient](https://tracker.debian.org/dokujclient),
[libapreq2](https://tracker.debian.org/libapreq2),
[mwparserfromhell](https://tracker.debian.org/mwparserfromhell),
[ocsigenserver](https://tracker.debian.org/ocsigenserver), [python-
cryptography](https://tracker.debian.org/python-cryptography), [python-
watchdog](https://tracker.debian.org/python-watchdog), [slurm-
llnl](https://tracker.debian.org/slurm-llnl),
[tyxml](https://tracker.debian.org/tyxml),
[unison2.40.102](https://tracker.debian.org/unison2.40.102),
[yojson](https://tracker.debian.org/yojson).
The following packages became reproducible after getting fixed:
* [389-ds-base](https://tracker.debian.org/389-ds-base)/1.3.3.13-1 uploaded by Timo Aaltonen, [original patch](https://bugs.debian.org/799010) by Chris Lamb.
* [apache2](https://tracker.debian.org/apache2)/2.4.17-1 by Stefan Fritsch.
* [ben](https://tracker.debian.org/ben)/0.7.3 by Mehdi Dogguy.
* [cdo](https://tracker.debian.org/cdo)/1.6.9+dfsg.1-3 by Alastair McKinstry.
* [epubcheck](https://tracker.debian.org/epubcheck)/4.0.0-2 by Eugene Zhukov.
* [grads](https://tracker.debian.org/grads)/2:2.0.2-8 by Alastair McKinstry.
* [litl](https://tracker.debian.org/litl)/0.1.7+dfsg-1 uploaded by Samuel Thibault, [original patch](https://bugs.debian.org/797508) by Chris Lamb.
* [mia](https://tracker.debian.org/mia)/2.2.5-1 by Gert Wollny.
* [powerline](https://tracker.debian.org/powerline)/2.2-2 by Jerome Charaoui.
* [python-oslotest](https://tracker.debian.org/python-oslotest)/1:1.11.0-2 by Thomas Goirand.
* [tth](https://tracker.debian.org/tth)/4.05+ds-2 uploaded by Jerome Benoit, [original patch](https://bugs.debian.org/792181) by Reiner Herrmann.
* [xbae](https://tracker.debian.org/xbae)/4.60.4-7 uploaded by Nicholas Breen, [original patch](https://bugs.debian.org/797871) by Chris Lamb.
* [xdmf](https://tracker.debian.org/xdmf)/2.1.dfsg.1-13 by Alastair McKinstry.
Some uploads fixed some reproducibility issues but not all of them:
* [foxeye](https://tracker.debian.org/foxeye)/0.10.2-1 by Andriy Grytsenko.
* [jaxe](https://tracker.debian.org/jaxe)/3.5-6 by Samuel Thibault.
* [ncurses](https://tracker.debian.org/ncurses)/6.0+20151017-1 by Sven Joachim, [original patch](https://bugs.debian.org/801864) by Esa Peuha.
* [olap4j](https://tracker.debian.org/olap4j)/1.2.0-1 by Emmanuel Bourg.
* [tomcat8](https://tracker.debian.org/tomcat8)/8.0.28-1 by Emmanuel Bourg.
## reproducible.debian.net
[pbuilder](https://tracker.debian.org/pbuilder) has been updated to version
0.219~bpo8+1 on all eight build nodes. (Mattia Rizzolo, h01ger)
Packages that FTBFS but for which no open bugs have been recorded are now
tested again after 3 days. Likewise for “depwait” packages. (h01ger)
Out of disk situations will not cause IRC notifications anymore. (h01ger)
## Documentation update
Lunar continued to work on writing documentation for the future `reproducible-
builds.org` website.
## Package reviews
44 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 81 added and 48 updated this week.
Chris West and Chris Lamb identified 70 “fail to build from source” issues.
## Misc.
h01ger presented the project in Mexico City at the [3er Congreso de Seguridad
de la Información](http://congresoseguridad.org/index.php?page=programa) where
it became clear that we lack academic papers related to reproducible builds.
Bryan has been doing hard work to improve reproducibility for
[OpenWrt](https://www.openwrt.org/). He wrote a
[report](https://lists.openwrt.org/pipermail/openwrt-
devel/2015-October/036688.html) linking to the
[patches](https://github.com/bnewbold/openwrt-repro/compare/master...repro)
and [test results](http://repro.bnewbold.the-nsa.org/openwrt-results/) he
published.
---
layout: blog
week: 27
published: 2015-11-02 18:10:52
---
What happened in the [reproducible
builds](https://wiki.debian.org/ReproducibleBuilds) effort this week:
## Toolchain fixes
* Robert Luberda uploaded [ispell](https://tracker.debian.org/ispell)/3.4.00-4 which fixes another issue with uninitialized memory in ispell hashes. [Original patch](https://bugs.debian.org/795606) by Valentin Lorentz.
* Robert Luberda uploaded [man2html](https://tracker.debian.org/man2html)/1.6g-8 which adds support for [SOURCE_DATE_EPOCH](https://wiki.debian.org/ReproducibleBuilds/TimestampsProposal). [Original patch](https://bugs.debian.org/796130) by akira.
* gregor herrmann uploaded [libdebian-copyright-perl](https://tracker.debian.org/libdebian-copyright-perl)/0.2-3 which sorts copyright files for deterministic ordering. [Original patch](https://bugs.debian.org/803340) by Reiner Herrmann.
* Rafael Laboissiere uploaded [octave-pkg-dev](https://tracker.debian.org/octave-pkg-dev)/1.3.2 which normalizes the name of the temporary build directory. This doesn't seem to be enough to make Octave packages reproducible just yet, though.
* Nicolas Boulenguez uploaded [gprbuild](https://tracker.debian.org/gprbuild)/2015-1 which sets a deterministic date to the generated source.
## Packages fixed
The following packages became reproducible due to changes in their build
dependencies: [maven-plugin-tools](https://tracker.debian.org/maven-plugin-
tools), [norwegian](https://tracker.debian.org/norwegian), [ocaml-
melt](https://tracker.debian.org/ocaml-melt), [python-biom-
format](https://tracker.debian.org/python-biom-format),
[rivet](https://tracker.debian.org/rivet).
The following packages became reproducible after getting fixed:
* [apache2](https://tracker.debian.org/apache2)/2.4.17-1 by Stefan Fritsch.
* [autogen](https://tracker.debian.org/autogen)/1:5.18.6-3 by Andreas Metzler.
* [debian-timeline](https://tracker.debian.org/debian-timeline)/37 by Chris Lamb.
* [fonty-rg](https://tracker.debian.org/fonty-rg)/0.6 uploaded by Radovan Garabík, [original patch](https://bugs.debian.org/777061) by Chris Lamb.
* [foxeye](https://tracker.debian.org/foxeye)/0.10.2-2 by Andriy Grytsenko.
* [hsqldb](https://tracker.debian.org/hsqldb)/2.3.3+dfsg2-1 by Markus Koschany.
* [jasperreports](https://tracker.debian.org/jasperreports)/6.1.1+dfsg-1 uploaded by Markus Koschany, fix by Emmanuel Bourg.
* [libmath-base-convert-perl](https://tracker.debian.org/libmath-base-convert-perl)/0.11-2 uploaded by Salvatore Bonaccorso, [original patch](https://bugs.debian.org/803067) by Reiner Herrmann.
* [libsdl2-gfx](https://tracker.debian.org/libsdl2-gfx)/1.0.1+dfsg-2 uploaded by Manuel A. Fernandez Montecelo, [original patch](https://bugs.debian.org/803578) by Reiner Herrmann.
* [libsdl2](https://tracker.debian.org/libsdl2)/2.0.2+dfsg1-8 uploaded by Gianfranco Costamagna, [patch](https://bugs.debian.org/803576) by Reiner Herrmann.
* [linux](https://tracker.debian.org/linux)/4.2.5-1 by Ben Hutchings.
* [litl](https://tracker.debian.org/litl)/0.1.7+dfsg-1 by Samuel Thibault, [original patch](https://bugs.debian.org/797508) by Chris Lamb.
* [python-keystoneclient](https://tracker.debian.org/python-keystoneclient)/1:1.7.1-4 by Thomas Goirand.
* [sphinxbase](https://tracker.debian.org/sphinxbase)/0.8+5prealpha-1 by Samuel Thibault.
* [tatan](https://tracker.debian.org/tatan)/1.0.dfsg1-6 uploaded by Markus Koschany, [original patch](https://bugs.debian.org/797431) by Reiner Herrmann.
* [v4l2loopback](https://tracker.debian.org/v4l2loopback)/0.9.1-4 uploaded by IOhannes m zmölnig, [original patch](https://bugs.debian.org/803183).
* [yadifa](https://tracker.debian.org/yadifa)/2.1.4-2 uploaded by Markus Schade, [original patch](https://bugs.debian.org/803139) by Reiner Herrmann.
Some uploads fixed some reproducibility issues but not all of them:
* [lcov](https://tracker.debian.org/lcov)/1.12-2 by Alastair McKinstry, [original patch](https://bugs.debian.org/803412) by Reiner Herrmann.
* [libsdl1.2](https://tracker.debian.org/libsdl1.2)/1.2.15-12 uploaded by Manuel A. Fernandez Montecelo, [original patch](https://tracker.debian.org/803579) by Reiner Herrmann.
* [metview](https://tracker.debian.org/metview)/4.5.7-1 by Alastair McKinstry.
* [mumble](https://tracker.debian.org/mumble)/1.2.10-2 by Christopher Knadle.
The following package is currently failing to build from source but should now
be reproducible:
* [p4vasp](https://tracker.debian.org/p4vasp)/0.3.29+dfsg-2 uploaded by Graham Inggs, [original patch](https://bugs.debian.org/803140) by Reiner Herrmann.
Patches submitted which have not made their way to the archive yet:
* [#803501](https://bugs.debian.org/803501) on [fdroidserver](https://tracker.debian.org/fdroidserver) by Reiner Herrmann: add support for `SOURCE_DATE_EPOCH` to `docs/gendocs.sh` and normalizes tarball permissions. [Sent upstream](https://gitlab.com/fdroid/fdroidserver/merge_requests/84/).
* [#803547](https://bugs.debian.org/803547) on [bbswitch](https://tracker.debian.org/bbswitch) by Reiner Herrmann: tell tar to normalize the permissions.
* [#803583](https://bugs.debian.org/803583) on [ndiswrapper](https://tracker.debian.org/ndiswrapper) by Reiner Herrmann: tell tar to normalize the permissions.
* [#803601](https://bugs.debian.org/803601) on [xtables-addons](https://tracker.debian.org/xtables-addons) by Reiner Herrmann: tell tar to normalize the permissions.
* [#803603](https://bugs.debian.org/803603) on [usb-modeswitch-data](https://tracker.debian.org/usb-modeswitch-data) by Reiner Herrmann: tell tar to normalize the permissions.
## reproducible.debian.net
A quick update on current statistics: _testing_ is at 85% of packages tested
reproducible with [our modified
packages](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain),
_unstable_ on `armhf` caught up with `amd64` with 80%.
The _schroot_ name used for running [diffoscope](http://diffoscope.org/) when
testing OpenWrt, NetBSD, Coreboot, and Arch Linux has been fixed. (h01ger,
Mattia Rizzolo)
## Documentation update
Paul Gevers documented [timestamps in unit files created by the Free Pascal
Compiler](https://wiki.debian.org/ReproducibleBuilds/TimestampsInPPUGeneratedByFPC).
[reproducible-builds.org](https://reproducible-builds.org/) is now live. It
contains a comprehensive documentation on all aspects that have been
identified so far of what we call “reproducible builds”. It makes room for
pointers to projects working on reproducible builds, news, dedicated tools,
and community events.
## Package reviews
206 [reviews](https://reproducible.debian.net/unstable/amd64/index_notes.html)
have been removed, 171 added and 196 updated this week.
Chris Lamb reported 28 failing to build from source issues.
New issues identified this week:
[timestamps_in_pdf_content](https://reproducible.debian.net/issues/unstable/timestamps_in_pdf_content_issue.html),
[different_encoding_in_html_by_docbook_xsl](https://reproducible.debian.net/issues/unstable/different_encoding_in_html_by_docbook_xsl_issue.html),
[timestamps_in_ppu_generated_by_fpc](https://reproducible.debian.net/issues/unstable/timestamps_in_ppu_generated_by_fpc_issue.html),
[method_may_never_be_called_in_documentation_generated_by_javadoc](https://reproducible.debian.net/issues/unstable/method_may_never_be_called_in_documentation_generated_by_javadoc_issue.html).
## Misc.
Andrei Borzenkov has proposed a [fix for uninitialized memory in GRUB's
mkimage](https://lists.gnu.org/archive/html/grub-devel/2015-10/msg00157.html).
Uninitialized memory is one source of hard to track down reproducibility
errors.
Holger Levsen presented the efforts on reproduible builds [at Festival de
Software Libre](http://fsl.mx/2015/en/node/203) in Puerto Vallarta, Mexico.
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment