<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=US-ASCII" http-equiv="Content-Type">
<title>
GitLab
</title>



<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">

<h3>
Chris Lamb pushed to branch master
at <a href="https://salsa.debian.org/reproducible-builds/reproducible-website">Reproducible Builds / reproducible-website</a>
</h3>
<h4>
Commits:
</h4>
<ul>
<li>
<strong><a href="https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/83a5deccb11669fc425151e24d3f1626db0a7ca5">83a5decc</a></strong>
<div>
<span>by Chris Lamb</span>
<i>at 2021-04-07T17:25:59+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">2021-03: Misc aesthetic changes.
</pre>
</li>
<li>
<strong><a href="https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/9385e780c4d932b509261569593eb4d1eac248ec">9385e780</a></strong>
<div>
<span>by Chris Lamb</span>
<i>at 2021-04-07T17:26:16+01:00</i>
</div>
<pre class="commit-message" style="white-space: pre-wrap; margin: 0;">published as https://reproducible-builds.org/reports/2021-03/
</pre>
</li>
</ul>
<h4>1 changed file:</h4>
<ul>
<li class="file-stats">
<a href="#3393d43faf4de0e437a4a2d103125a64a3076911">
_reports/2021-03.md
</a>
</li>
</ul>
<h4>Changes:</h4>
<li id="3393d43faf4de0e437a4a2d103125a64a3076911">
<a href="https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/82f54676756ea378a17455f1338c166b362512d6...9385e780c4d932b509261569593eb4d1eac248ec#3393d43faf4de0e437a4a2d103125a64a3076911"><strong>_reports/2021-03.md</strong></a>
<hr>
<table class="code white" style="font-family: monospace; font-size: 90%;" bgcolor="#fff" width="100%" cellpadding="0" cellspacing="0">
<tr class="line_holder match" id="" style="line-height: 1.6;">
<td class="diff-line-num unfold js-unfold old_line" data-linenumber="3" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="diff-line-num unfold js-unfold new_line" data-linenumber="3" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="line_content match " style="padding-left: 0.5em; padding-right: 0.5em; color: rgba(0,0,0,0.3);" bgcolor="#fafafa">@@ -3,7 +3,8 @@ layout: report</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="3" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
3
</td>
<td class="new_line diff-line-num" data-linenumber="3" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
3
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC3" class="line" lang="markdown"><span class="na" style="color: #008080;">year</span><span class="pi">:</span> <span class="s2" style="color: #d14;">"</span><span class="s" style="color: #d14;">2021"</span></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="4" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
4
</td>
<td class="new_line diff-line-num" data-linenumber="4" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
4
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC4" class="line" lang="markdown"><span class="na" style="color: #008080;">month</span><span class="pi">:</span> <span class="s2" style="color: #d14;">"</span><span class="s" style="color: #d14;">03"</span></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="5" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
5
</td>
<td class="new_line diff-line-num" data-linenumber="5" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
5
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC5" class="line" lang="markdown"><span class="na" style="color: #008080;">title</span><span class="pi">:</span> <span class="s2" style="color: #d14;">"</span><span class="s" style="color: #d14;">Reproducible</span><span class="nv" style="color: #008080;"> </span><span class="s" style="color: #d14;">Builds</span><span class="nv" style="color: #008080;"> </span><span class="s" style="color: #d14;">in</span><span class="nv" style="color: #008080;"> </span><span class="s" style="color: #d14;">March</span><span class="nv" style="color: #008080;"> </span><span class="s" style="color: #d14;">2021"</span></span>
</pre>
</td>
</tr>
<tr class="line_holder old" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num old" data-linenumber="6" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
6
</td>
<td class="new_line diff-line-num old" data-linenumber="6" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
 
</td>
<td class="line_content old" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#fbe9eb">
<pre style="margin: 0;">-<span id="LC6" class="line" lang="markdown"><span class="na" style="color: #008080;">draft</span><span class="pi">:</span> <span class="no" style="color: #008080;">true</span></span>
</pre>
</td>
</tr>
<tr class="line_holder new" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num new" data-linenumber="7" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
 
</td>
<td class="new_line diff-line-num new" data-linenumber="6" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
6
</td>
<td class="line_content new" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#ecfdf0">
<pre style="margin: 0;">+<span id="LC6" class="line" lang="markdown"><span class="na" style="color: #008080;">draft</span><span class="pi">:</span> <span class="no" style="color: #008080;">false</span></span>
</pre>
</td>
</tr>
<tr class="line_holder new" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num new" data-linenumber="7" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
 
</td>
<td class="new_line diff-line-num new" data-linenumber="7" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
7
</td>
<td class="line_content new" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#ecfdf0">
<pre style="margin: 0;">+<span id="LC7" class="line" lang="markdown"><span class="na" style="color: #008080;">date</span><span class="pi">:</span> <span class="s" style="color: #d14;">2021-04-07 16:26:15</span></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="7" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
7
</td>
<td class="new_line diff-line-num" data-linenumber="8" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
8
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC8" class="line" lang="markdown"><span class="nn" style="color: #555;">---</span></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="8" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
8
</td>
<td class="new_line diff-line-num" data-linenumber="9" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
9
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC9" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="9" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
9
</td>
<td class="new_line diff-line-num" data-linenumber="10" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
10
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC10" class="line" lang="markdown"><span class="p">[</span><span class="nv" style="color: #008080;">![</span><span class="p">](</span><span class="sx" style="color: #d14;">{{</span> <span class="nn" style="color: #555;">"/images/reports/2021-03/reproducible-builds.png#right"</span> | relative_url }})](https://reproducible-builds.org/)</span>
</pre>
</td>
</tr>
<tr class="line_holder match" id="" style="line-height: 1.6;">
<td class="diff-line-num unfold js-unfold old_line" data-linenumber="16" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="diff-line-num unfold js-unfold new_line" data-linenumber="17" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="line_content match " style="padding-left: 0.5em; padding-right: 0.5em; color: rgba(0,0,0,0.3);" bgcolor="#fafafa">@@ -16,9 +17,9 @@ In our monthly reports, we try to outline the most important things that have ha</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="16" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
16
</td>
<td class="new_line diff-line-num" data-linenumber="17" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
17
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC17" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="17" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
17
</td>
<td class="new_line diff-line-num" data-linenumber="18" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
18
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC18" class="line" lang="markdown"><span class="p">[</span><span class="nv" style="color: #008080;">![</span><span class="p">](</span><span class="sx" style="color: #d14;">{{</span> <span class="nn" style="color: #555;">"/images/reports/2021-03/fdroid.png#right"</span> | relative_url }})](https://www.f-droid.org)</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="18" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
18
</td>
<td class="new_line diff-line-num" data-linenumber="19" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
19
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC19" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder old" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num old" data-linenumber="19" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
19
</td>
<td class="new_line diff-line-num old" data-linenumber="20" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
 
</td>
<td class="line_content old" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#fbe9eb">
<pre style="margin: 0;">-<span id="LC19" class="line" lang="markdown"><span class="p">[</span><span class="nv" style="color: #008080;">F-Droid</span><span class="p">](</span><span class="sx" style="color: #d14;">https://www.f-droid.org/</span><span class="p">)</span> is a large repository of open source applications for the Google Android platform. This month, Felix C. Stegerman announced <span class="p">[</span><span class="nv" style="color: #008080;">*apksigcopier*</span><span class="p">](</span><span class="sx" style="color: #d14;">https://github.com/obfusk/apksigcopier</span><span class="p">)</span>, a new tool for copying signatures for <span class="sb" style="color: #d14;">`.apk`</span> files from a signed <span class="sb" style="color: #d14;">`.apk`</span> file to an unsigned one which is necessary in order to verify reproducibly of F-Droid components. Felix <span class="idiff left"> </span>filed an <span class="p">[</span><span class="nv" style="color: #008080;">Intent to Package (ITP)</span><span class="p">](</span><span class="sx" style="color: #d14;">https://wiki.debian.org/ITP</span><span class="p">)</span> bug in Debian to include it in that distribution<span class="idiff right">, too</span> (<span class="p">[</span><span class="nv" style="color: #008080;">#986179</span><span class="p">](</span><span class="sx" style="color: #d14;">https://bugs.debian.org/986179</span><span class="p">)</span>).</span>
</pre>
</td>
</tr>
<tr class="line_holder new" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num new" data-linenumber="20" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
 
</td>
<td class="new_line diff-line-num new" data-linenumber="20" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
20
</td>
<td class="line_content new" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#ecfdf0">
<pre style="margin: 0;">+<span id="LC20" class="line" lang="markdown"><span class="p">[</span><span class="nv" style="color: #008080;">F-Droid</span><span class="p">](</span><span class="sx" style="color: #d14;">https://www.f-droid.org/</span><span class="p">)</span> is a large repository of open source applications for the Google Android platform. This month, Felix C. Stegerman announced <span class="p">[</span><span class="nv" style="color: #008080;">*apksigcopier*</span><span class="p">](</span><span class="sx" style="color: #d14;">https://github.com/obfusk/apksigcopier</span><span class="p">)</span>, a new tool for copying signatures for <span class="sb" style="color: #d14;">`.apk`</span> files from a signed <span class="sb" style="color: #d14;">`.apk`</span> file to an unsigned one which is necessary in order to verify reproducibly of F-Droid components. Felix filed an <span class="p">[</span><span class="nv" style="color: #008080;">Intent to Package (ITP)</span><span class="p">](</span><span class="sx" style="color: #d14;">https://wiki.debian.org/ITP</span><span class="p">)</span> bug in Debian to include it in that distribution<span class="idiff left right"> as well</span> (<span class="p">[</span><span class="nv" style="color: #008080;">#986179</span><span class="p">](</span><span class="sx" style="color: #d14;">https://bugs.debian.org/986179</span><span class="p">)</span>).</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="20" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
20
</td>
<td class="new_line diff-line-num" data-linenumber="21" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
21
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC21" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder old" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num old" data-linenumber="21" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
21
</td>
<td class="new_line diff-line-num old" data-linenumber="22" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
 
</td>
<td class="line_content old" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#fbe9eb">
<pre style="margin: 0;">-<span id="LC21" class="line" lang="markdown">On 9th March, the Linux Foundation <span class="p">[</span><span class="nv" style="color: #008080;">announced</span><span class="p">](</span><span class="sx" style="color: #d14;">https://linuxfoundation.org/en/press-release/linux-foundation-announces-free-sigstore-signing-service-to-confirm-origin-and-authenticity-of-software/</span><span class="p">)</span> the <span class="p">[</span><span class="nv" style="color: #008080;">*sigstore*</span><span class="p">](</span><span class="sx" style="color: #d14;">https://sigstore.dev/what_is_sigstore/#what-is-sigstore</span><span class="p">)</span> project, which is a centrali<span class="idiff left">z</span>ed service that allows developers to cryptographically sign and store signatures for release artifacts. <span class="idiff">It also</span> attempts to help developers who don't wish to manage their own signing keypairs<span class="idiff right"> simplify signing their releases</span>.</span>
</pre>
</td>
</tr>
<tr class="line_holder new" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num new" data-linenumber="22" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
 
</td>
<td class="new_line diff-line-num new" data-linenumber="22" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
22
</td>
<td class="line_content new" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#ecfdf0">
<pre style="margin: 0;">+<span id="LC22" class="line" lang="markdown">On 9th March, the Linux Foundation <span class="p">[</span><span class="nv" style="color: #008080;">announced</span><span class="p">](</span><span class="sx" style="color: #d14;">https://linuxfoundation.org/en/press-release/linux-foundation-announces-free-sigstore-signing-service-to-confirm-origin-and-authenticity-of-software/</span><span class="p">)</span> the <span class="p">[</span><span class="nv" style="color: #008080;">*sigstore*</span><span class="p">](</span><span class="sx" style="color: #d14;">https://sigstore.dev/what_is_sigstore/#what-is-sigstore</span><span class="p">)</span> project, which is a centrali<span class="idiff left">s</span>ed service that allows developers to cryptographically sign and store signatures for release artifacts. <span class="ge" style="font-style: italic;"><span class="idiff right">*sigstore*</span></span> attempts to help developers who don't wish to manage their own signing keypairs.</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="22" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
22
</td>
<td class="new_line diff-line-num" data-linenumber="23" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
23
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC23" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="23" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
23
</td>
<td class="new_line diff-line-num" data-linenumber="24" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
24
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC24" class="line" lang="markdown"><span class="p">[</span><span class="nv" style="color: #008080;">![</span><span class="p">](</span><span class="sx" style="color: #d14;">{{</span> <span class="nn" style="color: #555;">"/images/reports/2021-03/openssf.png#right"</span> | relative_url }})](https://openssf.org/)</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="24" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
24
</td>
<td class="new_line diff-line-num" data-linenumber="25" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
25
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC25" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder match" id="" style="line-height: 1.6;">
<td class="diff-line-num unfold js-unfold old_line" data-linenumber="46" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="diff-line-num unfold js-unfold new_line" data-linenumber="47" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">...</td>
<td class="line_content match " style="padding-left: 0.5em; padding-right: 0.5em; color: rgba(0,0,0,0.3);" bgcolor="#fafafa">@@ -46,7 +47,7 @@ This month, Alexander "*lynxis*" Couzens worked on improving support for Coreboo</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="46" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
46
</td>
<td class="new_line diff-line-num" data-linenumber="47" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
47
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC47" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="47" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
47
</td>
<td class="new_line diff-line-num" data-linenumber="48" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
48
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC48" class="line" lang="markdown">When building Debian packages, <span class="sb" style="color: #d14;">`dpkg`</span> currently passes options to the underlying build system to strip out the build path from generated binaries. However, many binaries still end up including the build path because they embed the entire compiler command-line which includes, ironically, the very flags that specify the build path to facilitate stripping it out. Vagrant Cascadian therefore <span class="p">[</span><span class="nv" style="color: #008080;">filed a bug against the Debian `dpkg` package</span><span class="p">](</span><span class="sx" style="color: #d14;">https://bugs.debian.org/985553</span><span class="p">)</span> to use <span class="p">[</span><span class="nv" style="color: #008080;">GCC</span><span class="p">](</span><span class="sx" style="color: #d14;">https://gcc.gnu.org/</span><span class="p">)</span>'s <span class="sb" style="color: #d14;">`.spec`</span> files to specify the <span class="sb" style="color: #d14;">`fixfilepath`</span> and <span class="sb" style="color: #d14;">`fixdebugpath`</span> options. This supplies the build path to GCC via the <span class="sb" style="color: #d14;">`DEB_BUILD_PATH`</span> environment variable, thus avoid passing the path on the command-line itself. Related to this, it was noticed that <span class="p">[</span><span class="nv" style="color: #008080;">Debian unstable reached 85% reproducibility</span><span class="p">](</span><span class="sx" style="color: #d14;">https://tests.reproducible-builds.org/debian/unstable/index_suite_amd64_stats.html</span><span class="p">)</span> for the first time since enabling variations in the build path.</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="48" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
48
</td>
<td class="new_line diff-line-num" data-linenumber="49" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
49
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC49" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder old" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num old" data-linenumber="49" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
49
</td>
<td class="new_line diff-line-num old" data-linenumber="50" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #fac5cd; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#f9d7dc">
 
</td>
<td class="line_content old" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#fbe9eb">
<pre style="margin: 0;">-<span id="LC49" class="line" lang="markdown">Frédéric Pierret has been working on a partial copy of the <span class="p">[</span><span class="nv" style="color: #008080;">`snapshot.debian.org`</span><span class="p">](</span><span class="sx" style="color: #d14;">https://snapshot.debian.org/</span><span class="p">)</span> "wayback machine" service limited <span class="idiff left">solely </span>to the packages needed to rebuild Debian <span class="ge" style="font-style: italic;">*bullseye*</span> on the <span class="sb" style="color: #d14;">`amd64`</span> architecture. This is to workaround <span class="idiff">the bandwidth and other perceived</span> limitations of <span class="sb" style="color: #d14;">`snapshot.debian.org`</span>. Whilst the mirror itself is reachable at <span class="p">[</span><span class="nv" style="color: #008080;">`debian.notset.fr`</span><span class="p">](</span><span class="sx" style="color: #d14;">https://debian.notset.fr/snapshot/</span><span class="p">)</span>, the software <span class="idiff">for</span> creating <span class="idiff">that partial mirror </span><span class="p"><span class="idiff">[</span></span><span class="nv" style="color: #008080;"><span class="idiff">is </span>available in Frédéric's Git repository</span><span class="p">](</span><span class="sx" style="color: #d14;">https://github.com/fepitre/snapshot-mirror</span><span class="p">)</span>. Currently, Frédéric's service has mirrored 4 months <span class="idiff">in 2</span> weeks, but needs approximately 3-5 years of content in order to fully rebuild <span class="ge" style="font-style: italic;">*bullseye*</span>. To that end, <span class="p"><span class="idiff">[</span></span><span class="nv" style="color: #008080;">a request was made to the Debian system administrators</span><span class="p">](</span><span class="sx" style="color: #d14;">https://rt.debian.org/Ticket/Display.html?id=8547</span><span class="p">)</span> to obtain better access to <span class="sb" style="color: #d14;">`snapshot.debian.org`</span> <span class="idiff right">for this mirror in order </span>to accelerate the initial seeding.</span>
</pre>
</td>
</tr>
<tr class="line_holder new" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num new" data-linenumber="50" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
 
</td>
<td class="new_line diff-line-num new" data-linenumber="50" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #c7f0d2; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#ddfbe6">
50
</td>
<td class="line_content new" style="padding-left: 0.5em; padding-right: 0.5em;" bgcolor="#ecfdf0">
<pre style="margin: 0;">+<span id="LC50" class="line" lang="markdown">Frédéric Pierret has been working on a partial copy of the <span class="p">[</span><span class="nv" style="color: #008080;">`snapshot.debian.org`</span><span class="p">](</span><span class="sx" style="color: #d14;">https://snapshot.debian.org/</span><span class="p">)</span> "wayback machine" service<span class="idiff left">,</span> limited to the packages needed to rebuild Debian <span class="ge" style="font-style: italic;">*bullseye*</span> on the <span class="sb" style="color: #d14;">`amd64`</span> architecture. This is to workaround <span class="idiff">some</span> limitations of <span class="sb" style="color: #d14;">`snapshot.debian.org`</span>. Whilst the mirror itself is reachable at <span class="p">[</span><span class="nv" style="color: #008080;">`debian.notset.fr`</span><span class="p">](</span><span class="sx" style="color: #d14;">https://debian.notset.fr/snapshot/</span><span class="p">)</span>, the software <span class="idiff">to</span> creating <span class="idiff">it is </span><span class="p"><span class="idiff">[</span></span><span class="nv" style="color: #008080;">available in Frédéric's Git repository</span><span class="p">](</span><span class="sx" style="color: #d14;">https://github.com/fepitre/snapshot-mirror</span><span class="p">)</span>. Currently, Frédéric's service has mirrored 4 months <span class="idiff">of the archive over two</span> weeks, but needs approximately 3-5 years of content in order to fully rebuild <span class="ge" style="font-style: italic;">*bullseye*</span>. To that end, a <span class="p"><span class="idiff right">[</span></span><span class="nv" style="color: #008080;">request was made to the Debian system administrators</span><span class="p">](</span><span class="sx" style="color: #d14;">https://rt.debian.org/Ticket/Display.html?id=8547</span><span class="p">)</span> to obtain better access to <span class="sb" style="color: #d14;">`snapshot.debian.org`</span> to accelerate the initial seeding.</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="50" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
50
</td>
<td class="new_line diff-line-num" data-linenumber="51" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
51
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC51" class="line" lang="markdown"></span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="51" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
51
</td>
<td class="new_line diff-line-num" data-linenumber="52" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
52
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC52" class="line" lang="markdown">53 reviews of Debian packages were added, 25 were updated and 22 were removed this month adding to our <span class="p">[</span><span class="nv" style="color: #008080;">extensive knowledge of identified issues</span><span class="p">](</span><span class="sx" style="color: #d14;">https://tests.reproducible-builds.org/debian/index_issues.html</span><span class="p">)</span>.</span>
</pre>
</td>
</tr>
<tr class="line_holder" id="" style="line-height: 1.6;">
<td class="old_line diff-line-num" data-linenumber="52" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
52
</td>
<td class="new_line diff-line-num" data-linenumber="53" style="width: 35px; color: rgba(0,0,0,0.3); border-right-width: 1px; border-right-color: #f0f0f0; border-right-style: solid; padding: 0 5px;" align="right" bgcolor="#fafafa">
53
</td>
<td class="line_content" style="padding-left: 0.5em; padding-right: 0.5em;">
<pre style="margin: 0;"> <span id="LC53" class="line" lang="markdown"></span>
</pre>
</td>
</tr>

</table>
<br>
</li>

</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #666;">

<br>
<a href="https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/82f54676756ea378a17455f1338c166b362512d6...9385e780c4d932b509261569593eb4d1eac248ec">View it on GitLab</a>.
<br>
You're receiving this email because of your account on salsa.debian.org.
If you'd like to receive fewer emails, you can
adjust your notification settings.



</p>
</div>
</body>
</html>