[Git][reproducible-builds/reproducible-website][master] 4 commits: 2023-07-12: Add Debiam live images update.

Chris Lamb (@lamby) gitlab at salsa.debian.org
Wed Jul 12 13:18:18 UTC 2023



Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
fd7fe021 by Chris Lamb at 2023-07-12T09:40:45+01:00
2023-07-12: Add Debiam live images update.

- - - - -
e5eb2140 by Chris Lamb at 2023-07-12T09:43:54+01:00
2023-07-12: Fix a FIXME.

- - - - -
d0773029 by Chris Lamb at 2023-07-12T14:16:49+01:00
2023-07-12: Misc cosmetic changes.

- - - - -
4d80e552 by Chris Lamb at 2023-07-12T14:17:16+01:00
published as https://reproducible-builds.org/reports/2023-06/

- - - - -


1 changed file:

- _reports/2023-06.md


Changes:

=====================================
_reports/2023-06.md
=====================================
@@ -3,7 +3,8 @@ layout: report
 year: "2023"
 month: "06"
 title: "Reproducible Builds in June 2023"
-draft: true
+draft: false
+date: 2023-07-12 13:17:16
 ---
 
 **Welcome to the June 2023 report from the [Reproducible Builds]({{ "/" | relative_url }}) project**
@@ -53,10 +54,9 @@ On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/
 
 * Martin Monperrus asked whether there are "[any project[s] where reproducibility is checked in a continuous integration pipeline?](https://lists.reproducible-builds.org/pipermail/rb-general/2023-June/003007.html) which received [a number of replies](https://lists.reproducible-builds.org/pipermail/rb-general/2023-June/thread.html#3007) from various projects.
 
-* Vagrant Cascadian mentioned that [Packaging Con 2023](https://packaging-con.org/) is being held in Berlin, the weekend before the Reproducible Builds summit later this year.
-In particular, Vagrant noticed that the [Call for Proposals](https://cfp.packaging-con.org/2023/cfp) (CFP) closes at the end of July.
+* Vagrant Cascadian mentioned that [Packaging Con 2023](https://packaging-con.org/) is being held in Berlin, the weekend before the Reproducible Builds summit later this year. In particular, Vagrant noticed that the [Call for Proposals](https://cfp.packaging-con.org/2023/cfp) (CFP) closes at the end of July.
 
-* Larry Doolittle was searching the Usenet archives and discovered a thread from December 1999 titled "[*Time independent checksum(cksum)*](https://www.usenetarchives.com/view.php?id=comp.unix.programmer&mid=PDgyaDhsMyR2ZWYkMUBubnJwMS5kZWphLmNvbT4) on `comp.unix.programming`. Larry notes that "it starts with Jayan asking about comparing binaries that might have difference in their embedded timestamps" (that is, perhaps, "Foreshadowing diffoscope, amiright?") and goes on to observe that:
+* Larry Doolittle was searching Usenet archives and discovered a thread from December 1999 titled "[*Time independent checksum(cksum)*](https://www.usenetarchives.com/view.php?id=comp.unix.programmer&mid=PDgyaDhsMyR2ZWYkMUBubnJwMS5kZWphLmNvbT4) on `comp.unix.programming`. Larry notes that "it starts with Jayan asking about comparing binaries that might have difference in their embedded timestamps" (that is, perhaps, "Foreshadowing diffoscope, amiright?") and goes on to observe that:
 
 > The antagonist is David Schwartz, who correctly says "There are dozens of complex reasons why what seems to be the same sequence of operations might produce different end results," but goes on to say "I totally disagree with your general viewpoint that compilers must provide for reproducability [sic]."
 >
@@ -64,7 +64,7 @@ In particular, Vagrant noticed that the [Call for Proposals](https://cfp.packagi
 
 ---
 
-Lastly, there were a few changes to our website this month too, including Bernhard M. Wiedemann adding a simplified Rust example to our [documentation about the `SOURCE_DATE_EPOCH` environment variable]({{ "/docs/source-date-epoch/" | relative_url }}) [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f4b89e17)], Chris Lamb made it easier to parse our [summit announcement]({{ "/news/2023/07/05/reproducible-builds-hamburg-meeting/" | relative_url }}") at a glance [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b0d7a607)], Mattia Rizzolo added the [summit announcement]({{ "/news/2023/07/05/reproducible-builds-hamburg-meeting/" | relative_url }}") at a glance [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b0d7a607)] itself [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/60a4e16e)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/57d62ce6)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/811c13fa)] and Rahul Bajaj added a [taxonomy of variations in build environments]({{ "/docs/plans/" | relative_url }}) [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/0dbb8ed4)].
+Lastly, there were a few changes to our website this month too, including Bernhard M. Wiedemann adding a simplified Rust example to our [documentation about the `SOURCE_DATE_EPOCH` environment variable]({{ "/docs/source-date-epoch/" | relative_url }}) [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f4b89e17)], Chris Lamb made it easier to parse our [summit announcement]({{ "/news/2023/07/05/reproducible-builds-hamburg-meeting/" | relative_url }}") at a glance [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b0d7a607)], Mattia Rizzolo added the [summit announcement]({{ "/news/2023/07/05/reproducible-builds-hamburg-meeting/" | relative_url }}") at a glance [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b0d7a607)] itself [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/60a4e16e)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/57d62ce6)][[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/811c13fa)] and Rahul Bajaj added a [taxonomy of variations in build environments]({{ "/docs/plans/" | relative_url }}) [[…](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/0dbb8ed4)].
 
 ---
 
@@ -72,17 +72,21 @@ Lastly, there were a few changes to our website this month too, including Bernha
 
 [![]({{ "/images/reports/2023-06/debian.png#right" | relative_url }})](https://debian.org/)
 
-27 reviews of Debian packages were added, 40 were updated and 8 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). A new `randomness_in_documentation_generated_by_mkdocs` toolchain issue was added by Chris Lamb [[…](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/5b86ed84)], and the `deterministic` flag on the `paths_vary_due_to_usrmerge` issue as we are not currently testing [`usrmerge`](https://wiki.debian.org/UsrMerge) issues [[…](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/8dc078ff)] issues.
+27 reviews of Debian packages were added, 40 were updated and 8 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). A new `randomness_in_documentation_generated_by_mkdocs` toolchain issue was added by Chris Lamb [[…](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/5b86ed84)], and the `deterministic` flag on the `paths_vary_due_to_usrmerge` issue as we are not currently testing [`usrmerge`](https://wiki.debian.org/UsrMerge) issues [[…](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/8dc078ff)] issues.
 
 <br>
 
-Jan-Benedict Glaw noticed a problem when building [NetBSD](https://www.netbsd.org/) for the [VAX](https://en.wikipedia.org/wiki/VAX) architecture. Noting that "Reproducible builds [are] probably not as reproducible as we thought", Jan-Benedict goes on to describe that when "two builds from different source directories won't produce the same result" and adds various notes about sub-optimal handling of the `CFLAGS` environment variable. [[…](http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=57466)]
+Roland Clobus posted his [18th update of the status of reproducible Debian ISO images](https://lists.reproducible-builds.org/pipermail/rb-general/2023-July/003021.html) on our mailing list. Roland reported that "all major desktops build reproducibly with `bullseye`, `bookworm`, `trixie` and `sid`", but he also mentioned amongst many changes that not only are the `non-free` images being built (and are reproducible) but that the live images are "generated officially by Debian" itself. [[...](https://lists.reproducible-builds.org/pipermail/rb-general/2023-July/003021.html)]
+
+<br>
+
+Jan-Benedict Glaw noticed a problem when building [NetBSD](https://www.netbsd.org/) for the [VAX](https://en.wikipedia.org/wiki/VAX) architecture. Noting that "Reproducible builds [are] probably not as reproducible as we thought", Jan-Benedict goes on to describe that when "two builds from different source directories won't produce the same result" and adds various notes about sub-optimal handling of the `CFLAGS` environment variable. [[…](http://gnats.netbsd.org/cgi-bin/query-pr-single.pl?number=57466)]
 
 <br>
 
 [![]({{ "/images/reports/2023-06/fdroid.png#right" | relative_url }})](https://f-droid.org/en/)
 
-F-Droid added 21 new reproducible apps in June, resulting in a new record of 145 reproducible apps in total. [[…](https://gitlab.com/obfusk/fdroid-misc-scripts/-/blob/master/reproducible/overview.md)]. (This page now sports missing data for March—May 2023.) F-Droid contributors also reported an issue with broken resources in APKs making some builds unreproducible. [[…](https://issuetracker.google.com/issues/287967713)]
+F-Droid added 21 new reproducible apps in June, resulting in a new record of 145 reproducible apps in total. [[…](https://gitlab.com/obfusk/fdroid-misc-scripts/-/blob/master/reproducible/overview.md)]. (This page now sports missing data for March—May 2023.) F-Droid contributors also reported an issue with broken resources in APKs making some builds unreproducible. [[…](https://issuetracker.google.com/issues/287967713)]
 
 <br>
 
@@ -160,13 +164,11 @@ Bernhard M. Wiedemann published another [monthly report about reproducibility wi
 
 The Reproducible Builds project operates a comprehensive testing framework (available at [tests.reproducible-builds.org](https://tests.reproducible-builds.org)) in order to check packages and other artifacts for reproducibility. In June, a number of changes were made by Holger Levsen, including:
 
-* Additions to a (relatively) new Documented Jenkins Maintenance (*djm*) script to automatically shrink a cache & save a backup of old data [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/340e50e42)], automatically split out previous months data from logfiles into specially-named files [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/2e384f30f)], prevent concurrent remote logfile fetches by using a lock file [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/dc3e58086)] and to add/remove various debugging statements [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/6bc60be7f)].
-
-* Updates to the automated system health checks to, for example, to correctly detect new kernel warnings due to a wording change [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/610fc16a6)] and to explicitly observe which old/unused kernels should be removed [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/54e401f47)]. This was related to an improvement so that various kernel issues on Ubuntu-based nodes are automatically fixed. [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/a61ed3ca3)]
+* Additions to a (relatively) new Documented Jenkins Maintenance (*djm*) script to automatically shrink a cache & save a backup of old data [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/340e50e42)], automatically split out previous months data from logfiles into specially-named files [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/2e384f30f)], prevent concurrent remote logfile fetches by using a lock file [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/dc3e58086)] and to add/remove various debugging statements [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/6bc60be7f)].
 
-In addition, Mattia Rizzolo updated the email configuration for the `@reproducible-builds.org` domain to correctly accept incoming mails from `jenkins.debian.net`. [[…](https://salsa.debian.org/reproducible-builds/rb-mailx-ansible/commit/0256761)] as well as to set up [DomainKeys Identified Mail](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail) (DKIM) signing [[…](https://salsa.debian.org/reproducible-builds/rb-mailx-ansible/commit/249b009)].
+* Updates to the automated system health checks to, for example, to correctly detect new kernel warnings due to a wording change [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/610fc16a6)] and to explicitly observe which old/unused kernels should be removed [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/54e401f47)]. This was related to an improvement so that various kernel issues on Ubuntu-based nodes are automatically fixed. [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/a61ed3ca3)]
 
-FIXME: Jan-Benedict Glaw also contributed patches for improved NetBSD testing; Mattia and Holger updated the configurations to start testing trixie etc, basically stopped testing buster; Holger and Vagrant updated all of our 35 hosts running Debian amd64|armhf|i386 to bookworm (with the exception of jenkins itself, which will be upgraded after 12.1).
+Holger and Vagrant Cascadian updated all thirty-five hosts running Debian on the `amd64`, `armhf`, and `i386` architectures to Debian *bookworm*, with the exception of the Jenkins host itself which will be upgraded after the release of Debian 12.1. In addition, Mattia Rizzolo updated the email configuration for the `@reproducible-builds.org` domain to correctly accept incoming mails from `jenkins.debian.net` [[…](https://salsa.debian.org/reproducible-builds/rb-mailx-ansible/commit/0256761)] as well as to set up [DomainKeys Identified Mail](https://en.wikipedia.org/wiki/DomainKeys_Identified_Mail) (DKIM) signing [[…](https://salsa.debian.org/reproducible-builds/rb-mailx-ansible/commit/249b009)]. And working together with Holger, Mattia also updated the Jenkins configuration to start testing Debian *trixie* which resulted in stopped testing Debian *buster*. And, finally, Jan-Benedict Glaw contributed patches for improved NetBSD testing.
 
 <br>
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/ef564eba7dd9107b0e59c696326cec788c91d6d7...4d80e5523f66fd089c169fbc2ff693e81be27eb6

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/ef564eba7dd9107b0e59c696326cec788c91d6d7...4d80e5523f66fd089c169fbc2ff693e81be27eb6
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20230712/529197b1/attachment.htm>


More information about the rb-commits mailing list