Search
PNG
IHDR||$PLTEV4|W5}W6}X6~Y7~Y8Z9[:\;]<]=^>_>_?`@aAaBbBcCcDdEeFeFfGgHgIhIiJiKjLkMlNmOmPnQoQoRpSqTqUrUrVsWtXtYuYvZv[w\x]x]y^z_z`{a|a|b}c~d~eefghijklmmnpqrsttuvwxxyz{||}~±±òóijĴŵŵƶƷǷȸȹɺʻʻ˼˽̽̾ͿͿ¶÷÷ŹźƻǻǼȽɾɿʿךD NIDATx_wO8ċ}QuժU<hX[]WU*B=#`0Q*x#@?&$"1|%|s<I<ChoW^xD/O"8OW }&RWJ0OVt
#_5y>+l'[%:EOo-!9F|DLѢ4nJXSćOB
PNG
IHDRddgAMAa cHRMz&u0`:pQ<bKGDtIME 8TIDATxypUי9w}*=hEBA&/K;q&Il,==SSNWWԤfgzf;`c;!Wz<Ѓ$*{=w|(w'h; a݃=R-0+jK/i;h;?+֕~%E/u4:xda$B@`:|Kڧ';k;3/ai"N=ޒYl_uT{˥>/aϮƢBy}Oll\AL<"Up<LVtuk'`L »\`L&Gf.q@fDA6Y>sbxcb !4}rcwJLeY4e
!ymW- +9gy56t65!(,YlCՆ_;ێ5LB!&ĻE_Ǜvk 0!,ƃ'4M=tq1(!B ]A46Gu
M~*"hB DHA$?ιwD"&&oj;6-
,,*XySAi֎h" FF3jgӠ_.JCwOOYE0Y&NL T23R.H,bptܢo:k 3C9?'4Yi]6kڰb7~+;Yv<;ވc}
ý^ؕ[N*,
PNG
IHDRddgAMAa cHRMz&u0`:pQ<bKGDtIME 8TIDATxypUי9w}*=hEBA&/K;q&Il,==SSNWWԤfgzf;`c;!Wz<Ѓ$*{=w|(w'h; a݃=R-0+jK/i;h;?+֕~%E/u4:xda$B@`:|Kڧ';k;3/ai"N=ޒYl_uT{˥>/aϮƢBy}Oll\AL<"Up<LVtuk'`L »\`L&Gf.q@fDA6Y>sbxcb !4}rcwJLeY4e
!ymW- +9gy56t65!(,YlCՆ_;ێ5LB!&ĻE_Ǜvk 0!,ƃ'4M=tq1(!B ]A46Gu
M~*"hB DHA$?ιwD"&&oj;6-
,,*XySAi֎h" FF3jgӠ_.JCwOOYE0Y&NL T23R.H,bptܢo:k 3C9?'4Yi]6kڰb7~+;Yv<;ވc}
ý^ؕ[N*,
PNG
IHDRddgAMAa cHRMz&u0`:pQ<bKGDtIME 8TIDATxypUי9w}*=hEBA&/K;q&Il,==SSNWWԤfgzf;`c;!Wz<Ѓ$*{=w|(w'h; a݃=R-0+jK/i;h;?+֕~%E/u4:xda$B@`:|Kڧ';k;3/ai"N=ޒYl_uT{˥>/aϮƢBy}Oll\AL<"Up<LVtuk'`L »\`L&Gf.q@fDA6Y>sbxcb !4}rcwJLeY4e
!ymW- +9gy56t65!(,YlCՆ_;ێ5LB!&ĻE_Ǜvk 0!,ƃ'4M=tq1(!B ]A46Gu
M~*"hB DHA$?ιwD"&&oj;6-
,,*XySAi֎h" FF3jgӠ_.JCwOOYE0Y&NL T23R.H,bptܢo:k 3C9?'4Yi]6kڰb7~+;Yv<;ވc}
ý^ؕ[N*,
-------------------------------
- Ximin [updated his R patch](https://stat.ethz.ch/pipermail/r-devel/2017-May/074181.html) to fix a few FTBFS and now we have 463/478 reproducible R packages. For more details, see his <a href="posts/reproducing-r-packages">detailed write-up</a> on this blog.
- Holger rebuilt `dpkg`, `gcc-6` and `r-base` for our [experimental toolchain](https://wiki.debian.org/ReproducibleBuilds/ExperimentalToolchain) for `unstable` on `arm64`, `i386` and `armhf`.
With these changes, we are able to generate a [dynamically loaded HTML
diff](https://people.debian.org/~infinity0/repro/gcc-6-repro/gcc.diff.html/)
for GCC-6 that can be displayed in a normal web browser. For more details see
[this mailing list
post](https://lists.reproducible-builds.org/pipermail/rb-general/2017-July/000559.html).
* [#872729](https://bugs.debian.org/872729) filed against [gtk+2.0](https://tracker.debian.org/pkg/gtk+2.0), forwarded
[upstream](https://bugzilla.gnome.org/show_bug.cgi?id=786528), found via a
[reproducibility issue in Tails](https://labs.riseup.net/code/issues/13440).
* Federico Brega:
* [#872285](https://bugs.debian.org/872285) filed against [pyqt5](https://tracker.debian.org/pkg/pyqt5).
Forwarded upstream:
* Debian bug [#872728](https://bugs.debian.org/872728) filed against [desktop-file-utils](https://tracker.debian.org/pkg/desktop-file-utils). [Filed upstream](https://bugs.freedesktop.org/show_bug.cgi?id=102320). (lamby, via a [reproducibility issue in Tails](https://labs.riseup.net/code/issues/13439)).
* Debian bug [#872729](https://bugs.debian.org/872729) filed against [gtk+2.0](https://tracker.debian.org/pkg/gtk+2.0). [Filed upstream](https://bugzilla.gnome.org/show_bug.cgi?id=786528). (lamby, via a [reproducibility issue in Tails](https://labs.riseup.net/code/issues/13440)).
* [sawfish](https://github.com/SawfishWM/sawfish):
* [SOURCE\_DATE\_EPOCH](https://github.com/SawfishWM/sawfish/pull/29)
- `h01ger`:
+ [Don't update the stretch package sets anymore](https://anonscm.debian.org/git/qa/jenkins.debian.net.git/commit/?id=68f41865892c0758fd630991a79fde74617e87b9)
+ [Update URL for Tails packages list](https://anonscm.debian.org/git/qa/jenkins.debian.net.git/commit/?id=25b7dd5c10c0707ae94e92c337924bd942116857)
+ Disabled the [OpenWrt](https://openwrt.org/) at the request of `lynxis` as they were broken; if no-one shows up to fix them, we'll probably remove them in the future, as all current development happens within [LEDE](https://lede-project.org/).
+ Renewed the [Let's Encrypt](https://letsencrypt.org/) SSL certificates.
- [Add a test for fallback\_recognizes and improve the behaviour](https://salsa.debian.org/reproducible-builds/diffoscope/commit/27be3f4)
- [Add a fallback\_recognizes to work around file(1) #876316.](https://salsa.debian.org/reproducible-builds/diffoscope/commit/7b8b9ae) (Closes: [#875272](https://bugs.debian.org/875272))
- [If --force-details then don't skip files with identical md5sums either](https://salsa.debian.org/reproducible-builds/diffoscope/commit/9b87bd4)
- [Add a --force-details flag for debugging](https://salsa.debian.org/reproducible-builds/diffoscope/commit/8ab261e)
- ``presenters.html``:
- [Restore the previous more-detailed comment](https://salsa.debian.org/reproducible-builds/diffoscope/commit/21f931a)
Here's what happened in the [Reproducible Builds](https://reproducible-builds.org) effort between Sunday October 15 and Saturday October 21 2017:
* The [Tails](tails.boum.org) project published a [report on how they made their ISO images reproducible](https://lists.reproducible-builds.org/pipermail/rb-general/2017-October/000656.html).
* [dpkg](https://tracker.debian.org/pkg/dpkg) 1.19.0 was uploaded, including support for:
-----------------------------------
* [Tails](https://tails.boum.org) announced that they were proud to present Tails 3.3 as one of the "[world's first reproducible ISO images](https://tails.boum.org/news/reproducible_Tails/)".
* [Support for SOURCE\_DATE\_EPOCH in the \pdftrailerid command](http://tug.org/pipermail/tex-live/2017-November/040794.html) of [TeX Live](https://www.tug.org/texlive/) was merged.
* Reproducible builds were mentioned on an episode of a [Bryan Lunduke](http://lunduke.com/) interview with [Brendan Eich](https://brendaneich.com/), the creator of the Javascript programming language. ([link](https://player.fm/series/lunduke-hour/brendan-eich-interview-lunduke-show-special-jan-9th-2018))
* Julien (jvoisin) Voisin wrote a [short blog post detailing their success](https://dustri.org/b/tails-34-reproductible-build.html) in reproducing [the recent Tails ISO release](https://tails.boum.org/news/version_3.4/index.en.html).
Development and fixes in key packages
* [Isaac Z. Schlueter](http://izs.me/) updated the [npm](https://www.npmjs.com/) package manager for JavaScript applications to [use a fixed, deterministic modification time when creating archives](https://github.com/npm/npm/commit/58d2aa58d5f9c4db49f57a5f33952b3106778669). Due to a limitation in the ZIP archive format, they opted for [26th October 1985](http://backtothefuture.wikia.com/wiki/Back_to_the_Future_timeline) instead.
* The [latest release of Tails](https://tails.boum.org/news/version_3.6/index.en.html) (3.6) is no longer reproducible.
* Heise [reported on a trojaned version of a BitTorrent client that infected 400,000 computers](https://www.heise.de/security/meldung/Trojanisierte-Version-des-BitTorrent-Clients-MediaGet-infizierte-400-000-Computer-3995514.html) (German). We believe such attacks would be detected quicker with a combination of free software and reproducible builds.