[Git][reproducible-builds/reproducible-website][master] Add mapping for Hamburg 2023 notes

Chris Lamb (@lamby) gitlab at salsa.debian.org
Thu Nov 2 13:40:48 UTC 2023



Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
42580bdf by Daan De Meyer at 2023-11-02T13:39:51+00:00
Add mapping for Hamburg 2023 notes

- - - - -


1 changed file:

- + _events/hamburg2023/mapping-projectsinfra.md


Changes:

=====================================
_events/hamburg2023/mapping-projectsinfra.md
=====================================
@@ -0,0 +1,76 @@
+# RB Summit 2023 Mapping
+
+## Projects practicing reproducibility
+
+- Arch Linux
+- Distrust Toolchain
+- Buildroot
+- Coreboot
+- GNU Guix
+- NixOS
+- Warpforge
+- ElectroBSD
+- OpenWRT
+- Fedora Linux
+- OpenSUSE
+- F-Droid
+- Java jar Archives
+- Debian
+- TOR
+- TAILS
+- so toolchain
+- Apache Maven
+- Qubes OS
+- Scala+sbt
+
+## What projects/platforms/libraries do we *want*/need to be reproducible?
+
+- Maven (artifacts without sources)
+- NPM
+- Rust crates
+- PyPI
+- Docker Directory Timestamps
+- ElectroBSD, FreeBSD Ports/Packages
+- Binutils
+- Qt
+- Python sphinx
+- ar (static .a libraries)
+- Gradle
+- DPkg database
+- PureOS/Mobian
+- R-B in Ubuntu
+- Compilers for embedded systems
+    - Aurix (Infineon)
+    - ARM/KEIL
+- GCC (its own build and the binaries it builds)
+- Python 3.9
+- Filesystems
+- Clojure
+    - Build Tools
+    - Lein
+- Flatpack
+- Docker Images
+
+## Missing RB infrastructure we need to create
+
+- The N commandments of reproducible builds
+- Alpine pkg archive
+- Recording Diversity
+- Debian debuginfod.debian.net should also provide sources (stripped paths seems to be part of the problem)
+- Rebuild infra for custom projects
+- Standard for build location like we have for SOURCE_DATE_EPOCH for time
+- Debian Snapshot server
+- PyPI Repository
+- Firmware hashes
+- Cross target reproducibility
+- Guix QA testing reproducibility
+- Shared tooling for reporting
+- Sharing + reporting on build results
+- Comparing reproducibility stats Guix packages with other projects
+- Crowd sourced reproducibility status information
+- Diffoscope but I can install it (fewer deps)
+- Merkle tree of upstream source releases
+- Reproducible vs PGO
+- Build infrastructure for ElectroBSD
+- Standard BUILDINFO file format
+- GCC 4.7.4 bootstrapped on more arches for bootstrappable builds



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/42580bdfedc5127ed0e5aecc3231bac582602b2f

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/42580bdfedc5127ed0e5aecc3231bac582602b2f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20231102/94a16674/attachment.htm>


More information about the rb-commits mailing list