[Git][reproducible-builds/reproducible-website][master] 2 commits: Tidy news page a bit.
Chris Lamb
gitlab at salsa.debian.org
Thu Jul 4 12:53:20 UTC 2019
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
acf34756 by Chris Lamb at 2019-07-04T12:48:02Z
Tidy news page a bit.
- - - - -
48442d83 by Chris Lamb at 2019-07-04T12:53:02Z
Misc cosmetic updates, re-orderings, etc.
- - - - -
2 changed files:
- _reports/2019-06.md
- news.md
Changes:
=====================================
_reports/2019-06.md
=====================================
@@ -14,27 +14,38 @@ As a quick recap, whilst anyone can inspect the source code of free software for
In this month's report, we will cover:
-* **Media coverage** — *Lego bricks, pizza and Reproducible Builds?*
+* **Media coverage** — *Lego bricks, pizza and... Reproducible Builds?!*
+* **Upstream news** — *Is Trusting Trust close to a "rebuttal"?*
* **Events** — *What happened at MiniDebConf Hamburg and the OpenWrt Summit, etc.*
-* **Upstream news** — *Is "Trusting Trust" close to a rebuttal? etc.*
-* **Distribution work** — *openSUSE updates and yet more Debian Installer progress*
* **Software development** — *Patches patches patches, etc.*
* **Misc news** — *From our mailing list...*
-* **Getting in touch** — *How to contribute*
+* **Getting in touch** — *... and how to contribute.*
---
## Media coverage
+* The [Prototype Fund](https://prototypefund.de/en/), an initiative to "aid software developers, hackers and creatives in furthering their ideas from concept to demo" produced a video featuring Holger Levsen explaining Reproducible Builds... using Lego bricks and pizza!
+
+[![]({{ "/images/reports/2019-06/prototypefund.png#center" | prepend: site.baseurl }})](https://www.youtube.com/watch?v=PSxm2DbDHG8)
+
* Joseph Devietti from [Cloudseal](https://www.cloudseal.io) published a post titled [*An introduction to reproducible builds*](https://www.cloudseal.io/blog/2019-05-15-introduction-to-reproducible-builds) on their blog, noting that:
> One key motivation for reproducible builds is to enable peak efficiency for the build caches used in modern build systems.
-* The [Prototype Fund](https://prototypefund.de/en/), an initiative to "aid software developers, hackers and creatives in furthering their ideas from concept to demo" produced a video featuring Holger Levsen explaining Reproducible Builds... using Lego bricks and pizzas!
+* Carl Dong gave a talk titled [*Bitcoin Build System Security*](https://www.youtube.com/watch?v=I2iShmUTEl8) at the [Breaking Bitcoin](https://breaking-bitcoin.com/) conference in Amsterdam, Netherlands.
-[![]({{ "/images/reports/2019-06/prototypefund.png#center" | prepend: site.baseurl }})](https://www.youtube.com/watch?v=PSxm2DbDHG8)
+---
-* Carl Dong gave a talk titled [*Bitcoin Build System Security*](https://www.youtube.com/watch?v=I2iShmUTEl8) at the [Breaking Bitcoin](https://breaking-bitcoin.com/) conference in Amsterdam, Netherlands.
+## Upstream news
+
+* The [Monero](https://www.getmonero.org/) cryptocurrency now offers [full reproducibility for all compiled binaries](https://github.com/monero-project/monero/pull/5633), a feature [first requested in October 2017](https://github.com/monero-project/monero/issues/2641).
+
+[![]({{ "/images/reports/2019-06/fedora.png#right" | prepend: site.baseurl }})](https://getfedora.org/)
+
+* The [Fedora project](https://getfedora.org/) debated setting [`SOURCE_DATE_EPOCH`](https://reproducible-builds.org/docs/source-date-epoch/) [in all builds via `rpm`](https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/57) which was accepted and merged on June 27th by Igor Gnatenko.
+
+* [Jeremiah Orians announced that version 1.0](https://lists.reproducible-builds.org/pipermail/rb-general/2019-June/001593.html) of the [`mescc-tools-seed`](https://github.com/oriansj/mescc-tools-seed) compiler has been released. For those not familiar with the project, it is the full bootstrap of a cross-platform compiler for the C programming language (written in C itself) from hex, the ultimate goal being able to demonstrate fully-bootstrapped compiler from hex to the [GCC GNU Compiler Collection](https://gcc.gnu.org/). This has many implications in and around [Ken Thompson](https://en.wikipedia.org/wiki/Ken_Thompson)'s [*Trusting Trust*](https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf) attack he outlined in 1983 [Turing Award Lecture](https://amturing.acm.org/lectures.cfm).
---
@@ -46,13 +57,11 @@ There were a number of events that included or incorporated members of the Repro
### MiniDebConf Hamburg 2019
-Holger Levsen, Jelle van der Waa, *kpcyrd* and Alexander Couzens attended [MiniDebConf Hamburg 2019](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg) and worked on Reproducible Builds.
-
-Holger gave a status update on the Project with a talk entitled [*Reproducible Builds aiming for bullseye*](https://www.youtube.com/watch?v=vQv4fxDMMPs), referring to the [next Debian release name](https://lists.debian.org/debian-devel-announce/2016/07/msg00002.html):
+Holger Levsen, Jelle van der Waa, *kpcyrd* and Alexander Couzens attended [MiniDebConf Hamburg 2019](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg) and worked on Reproducible Builds. As part of this, Holger gave a status update on the Project with a talk entitled [*Reproducible Builds aiming for bullseye*](https://www.youtube.com/watch?v=vQv4fxDMMPs), referring to the [next Debian release name](https://lists.debian.org/debian-devel-announce/2016/07/msg00002.html):
[![]({{ "/images/reports/2019-06/aimingforbullseye.png#center" | prepend: site.baseurl }})](https://www.youtube.com/watch?v=vQv4fxDMMPs)
-Jelle kindly gifted Holger with a [Reproducible Builds display](https://github.com/jelly/reproduciblebuilds-display):
+Jelle van der Waa kindly gifted Holger with a [Reproducible Builds display](https://github.com/jelly/reproduciblebuilds-display):
[![]({{ "/images/reports/2019-06/reprobuilds-display.jpeg#center" | prepend: site.baseurl }})](https://raw.githubusercontent.com/jelly/reproduciblebuilds-display/master/img/reprobuilds-display.jpeg)
@@ -79,50 +88,93 @@ As part of various hacking sessions:
* Migrated the OpenWrt package parser to use Python 3.x as [Python 2.x will be reaching end-of-life](https://pythonclock.org/) at the end of this year.
* Setup a test environment using a new `README.development` file.
-Holger Levsen was on hand to review and merge all the above commits, providing support and insight into the codebase. He additionally split out a `README.development` from the regular, more-generic `README` file.
+Holger Levsen was on-hand to review and merge all the above commits, providing support and insight into the codebase. He additionally split out a `README.development` from the regular, more-generic `README` file.
### OpenWrt summit
[![]({{ "/images/reports/2019-06/openwrt.png#right" | prepend: site.baseurl }})](https://openwrt.org/)
-The [OpenWrt](https://openwrt.org/) project, is a Linux operating system targeting embedded devices, particularly wireless network routers. In June, they [hosted a summit](http://lists.infradead.org/pipermail/openwrt-adm/2019-March/001021.html) that took place from [10th to 12th](http://lists.infradead.org/pipermail/openwrt-adm/2019-March/001012.html) of the month.
-
-Here, Holger participated in the discussions regarding `.buildinfo` build-attestation documents. As a result of this, Paul Spooren (*aparcar*) made [a pull request](https://github.com/openwrt/openwrt/pull/2121) to introduce/create a `feeds.buildinfo` (etc) for reproducibility in OpenWrt.
+The [OpenWrt](https://openwrt.org/) project is a Linux operating system targeting embedded devices, particularly wireless network routers. In June, they [hosted a summit](http://lists.infradead.org/pipermail/openwrt-adm/2019-March/001021.html) that [took place from 10th to 12th of the month](http://lists.infradead.org/pipermail/openwrt-adm/2019-March/001012.html).
+Here, Holger participated in the discussions regarding `.buildinfo` build-attestation documents. As a result of this, Paul Spooren (*aparcar*) made [a pull request](https://github.com/openwrt/openwrt/pull/2121) to introduce/create a `feeds.buildinfo` (etc) for reproducibility in OpenWrt.
---
-## Upstream news
+## Software development
-* The [Monero](https://www.getmonero.org/) cryptocurrency now offers [full reproducibility for all compiled binaries](https://github.com/monero-project/monero/pull/5633), a feature [first requested in October 2017](https://github.com/monero-project/monero/issues/2641).
+#### [`buildinfo.debian.net`](https://buildinfo.debian.net)
-[![]({{ "/images/reports/2019-06/fedora.png#right" | prepend: site.baseurl }})](https://getfedora.org/)
+[![]({{ "/images/reports/2019-06/buildinfo-debian-net.png#right" | prepend: site.baseurl }})](https://buildinfo.debian.net/)
-* The [Fedora project](https://getfedora.org/) debated setting [`SOURCE_DATE_EPOCH`](https://reproducible-builds.org/docs/source-date-epoch/) [in all builds via `rpm`](https://src.fedoraproject.org/rpms/redhat-rpm-config/pull-request/57) which was accepted and merged on June 27th by Igor Gnatenko.
+Chris Lamb spent significant time working on [`buildinfo.debian.net`](https://buildinfo.debian.net), his experiment into how to process, store and distribute `.buildinfo` files after the Debian archive software has processed them. This included:
-* [Jeremiah Orians announced that version 1.0](https://lists.reproducible-builds.org/pipermail/rb-general/2019-June/001593.html) of the [`mescc-tools-seed`](https://github.com/oriansj/mescc-tools-seed) compiler has been released. For those not familiar with the project, it is the full bootstrap of a cross-platform compiler for the C programming language (written in C itself) from hex, the ultimate goal being able to demonstrate fully-bootstrapped compiler from hex to the [GCC GNU Compiler Collection](https://gcc.gnu.org/). This has many implications in and around [Ken Thompson](https://en.wikipedia.org/wiki/Ken_Thompson)'s [*Trusting Trust*](https://www.archive.ece.cmu.edu/~ganger/712.fall02/papers/p761-thompson.pdf) attack he outlined in 1983 [Turing Award Lecture](https://amturing.acm.org/lectures.cfm).
+* Started making the move to Python 3.x (and [Django](https://www.djangoproject.com/) 2.x) [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ef866349fab43000abd6e6115b1120e035f33bf9)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c44c2eaf52defa599a67d1bc02e2e4a58a386e6e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/d27540daeedab116f09e52e4bb186b97861e5d0e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/9a68e9ab1aa13dd8550833dcab924c8818d3277f)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ec475c64274e88244661f3f76374f453b562276c)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c46e48bd52a89b0839a4a17728d6dd96be8a1bc5)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/0dcac1d682b151092bd2988b0bc442508c8bda17)], additionally performing a large number of adjacent cleanups including dropping the authentication framework [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/961be8b0b935f84f3c67804453c1508ff1751a5f)], fixing a number of [flake8](http://flake8.pycqa.org/) warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6f1257b82c89c639ec694c37d7aa6d76fcae38be)], adding a `setup.cfg` to silence some warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/fc7bbc25b163c05a8ef1e74b3a77bf94a40ab30c)], moving to `__str__` and `str.format(...)` over `%`-style interpolation and `u"Unicode"` strings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/afc77977fa2ad376f828009f532be2581e3bd9b7)], etc.
----
+* Adding a number of (as-yet unreleased…) features, including caching the expensive landing page queries. [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/79f5e03946b8550ed41bdee5d811ef6ae846ba52)]
-### Distribution work
+* Taking the opportunity to start migrating the hosting from [its current GitHub home](https://gitlab.com/lamby/buildinfo.debian.net) to a [more-centralised repository on salsa.debian.org](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net), moving from the [Travis](https://travis-ci.org/) to the [GitLab](https://docs.gitlab.com/ee/ci/) continuous integration platform, updating the URL to the source in the footer [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6648cc81fd6243019c8a6e51f828ddfa55dbd758)] and many other related changes [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/24f785113b63a0c2ef159ffd3162be1be72c7561)].
-[![]({{ "/images/reports/2019-06/opensuse.png#right" | prepend: site.baseurl }})](https://www.opensuse.org/)
+* Applying the [Black](https://black.readthedocs.io/en/stable/) "uncompromising code formatter" to the codebase. [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/7d19e69ca93b1ac31d492f9b13e97f9fbd80870c)]
-Bernhard M. Wiedemann posted his [monthly Reproducible Builds status update](https://lists.opensuse.org/opensuse-factory/2019-06/msg00429.html) for the [openSUSE](https://opensuse.org/) distribution.
-<br>
+#### Project website
-In [Debian](https://www.debian.org/), 39 reviews of packages were added, 3 were updated and 8 were removed this month, adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+[![]({{ "/images/reports/2019-06/website.png#right" | prepend: site.baseurl }})](https://reproducible-builds.org/)
-[![]({{ "/images/reports/2019-06/debian.png#left" | prepend: site.baseurl }})](https://debian.org/)
+There was a significant amount of effort on [our website](https://reproducible-builds.org/) this month.
-Chris Lamb also did more work testing of the reproducibility status of [Debian Installer](https://www.debian.org/devel/debian-installer/) images. In particular, he was working around and patching an issue stemming from us testing builds far into the "future". ([#926242](https://bugs.debian.org/926242#92))
+* Chris Lamb:
-In addition, following discussions at [MiniDebConf Hamburg](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg), Ivo De Decker reviewed the situation around Debian bug [#869184](https://bugs.debian.org/869184) again ("*dpkg: source uploads including `_amd64.buildinfo` cause problems*") and updated the bug with some recommendations for the next Debian release cycle.
+ * Move the remaining site to the newer website design. This was a long-outstanding task ([#2](https://salsa.debian.org/reproducible-builds/reproducible-website/issues/2)) and required a huge number of changes, including moving all the event and documentation pages to the new design [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/acf3c33)] and migrating/merging the old `_layouts/page.html` into the new design [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/3798f0a)] too. This could then allow for many cleanups including moving/deleting files into cleaner directories, dropping a bunch of example layouts [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/c87784a)] and dropping the old "home" layout. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/6862829)]
----
+ * Added reports to the homepage. ([#16](https://salsa.debian.org/reproducible-builds/reproducible-website/issues/16))
-## Software development
+ * Re-ordered and merged various top-level sections of the site to make the page easier to parse/navigate [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/0487cbb)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/22b6be0)] and updated the documentation for [`SOURCE_DATE_EPOCH`](https://reproducible-builds.org/docs/source-date-epoch/) to clarify that the alternative `-r` call to `date(1)` is for compatibility with [BSD](https://en.wikipedia.org/wiki/Berkeley_Software_Distribution) variants of UNIX [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/e54666a)].
+
+ * Made a large number of visual fixups, particularly to accommodate the principles of [responsive web design](https://en.wikipedia.org/wiki/Responsive_web_design). [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/80c0157)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/7fed3e5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/b1a90ca)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/db5d1b5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/4bbc4c2)]
+
+ * Updating the [lint](https://en.wikipedia.org/wiki/Lint_\(software\)) functionality of the build system to check for URIs that are not using `{{ "/foo/" | prepend: site.baseurl }}`-style relative URLs. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/ae43b80)]
+
+* Jelle van der Waa updated the [Events]({{ "/events/" | prepend: site.baseurl }}) page to correct invalid [Markdown](https://daringfireball.net/projects/markdown/) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/ce6fce8)] and fixed a typo of "distribution" on a previous event page [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/824434b)].
+
+* Thomas Vincent added a huge number of videos and slides to the [*Resources*]({{ "/resources/" | prepend: site.baseurl }}) page [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/816d66a)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/5ec6758)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/8efe14a)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/334a2cf)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/303ecdb)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/ad622a3)] etc. as well as added a button to link to subtitles [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/050a5f4)] and fixing a bug when displaying metadata links [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/5e00011)].
+
+In addition, Atharva Lele added the [Buildroot](https://buildroot.org/) embedded Linux project to the ["Who's involved"]({{ "/who/" | prepend: site.baseurl }}) page. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/34dc835)]
+
+#### Test framework
+
+We operate a comprehensive [Jenkins](https://jenkins.io/)-based testing framework that powers [tests.reproducible-builds.org](https://tests.reproducible-builds.org). The following changes were done in the last month:
+
+* Alexander Couzens ([OpenWrt](https://openwrt.org)):
+ * Rewrite the database interaction routines for [OpenWrt](https://openwrt.org/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/380d632b)]
+ * Migrated the OpenWrt package parser to use Python 3.x as [Python 2.x will be reaching end-of-life](https://pythonclock.org/) at the end of this year. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/23a2c60e)]
+ * Use `IGNORE_ERRORS=n y m` similar to [Buildbot](https://buildbot.net/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/961e44ec)]
+
+* Holger Levsen:
+ * Show [Alpine](https://alpinelinux.org/)-related jobs on the job health page. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f3d0a03a)]
+ * Alpine needs the [`jq`](https://stedolan.github.io/jq/) command-line JSON processor for the new scheduler. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/518f4005)]
+ * Start a dedicated `README.development` file. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/db7a2b8d)]
+ * Add support for some nodes running Debian *buster* already. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/33fc2245)]
+
+* Jelle van der Waa:
+ * Change [Arch Linux](https://www.archlinux.org/) and Alpine `BLACKLIST` status to `blacklist` [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/0ab61da0)] and `GOOD` to `reproducible` [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5c62ea9d)] respectfully.
+ * Add a Jenkins job to generate Arch Linux HTML pages. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2f9aa5ab)]
+ * Fix the Arch Linux suites in the `reproducible.ini` file. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/fa8e9192)]
+ * Add an Arch JSON export Jenkins job. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/033bc3e7)]
+ * Create per-distribution reproducible JSON files. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/20a7b86c)]
+
+* *kpcyrd* ([Alpine](https://alpinelinux.org/)):
+
+ * Start adding an Alpine theme. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/1f5baa4d)]
+ * Add an Alpine website. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/9a094dae)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ff75924c)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/8f59af7b)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/6f5b99c1)]
+ * Add `#alpine-reproducible` to the `KGB` chat bot. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/d4f27f79)]
+ * Use the `apk` version instead of `vercmp`. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/deb36b07)]
+ * Install/configure various parts of the chroot including passing in Git options [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/44a9116a)], adding the `abuild` group onto more servers [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/70b4466b)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/94e0e647)], installing [GnuPG](https://gnupg.org/) [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/c057af34)]
+ * Build packages using its own scheduler. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/da75876e)] [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a4639713)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a9debc77)]
+ * Misc maintenance and fixups. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/439af034)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/cc03efb5)]
+
+* Mattia Rizzolo:
+ * Adjust the `setup_pbuilder` script to use `[check-valid-until=no]` instead of `Acquire::Check-Valid-Until` (re. ([#926242](https://bugs.debian.org/926242#92))). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5a51e8af)]
#### Upstream patches
@@ -164,7 +216,6 @@ The Reproducible Builds project detects, dissects and attempts to fix as many cu
* Report [a parallelism race](https://gitlab.kitware.com/vtk/vtk/issues/17619) from an unspecified dependency in [CMake](https://cmake.org/)
* [wine](https://bugzilla.opensuse.org/show_bug.cgi?id=1062303) (Report the use of random file names)
-
* Chris Lamb:
* [#930768](https://bugs.debian.org/930768) filed against [node-d3-fetch](https://tracker.debian.org/pkg/node-d3-fetch).
* [#930769](https://bugs.debian.org/930769) filed against [node-d3-contour](https://tracker.debian.org/pkg/node-d3-contour).
@@ -175,80 +226,19 @@ The Reproducible Builds project detects, dissects and attempts to fix as many cu
* Morten Linderud submitted a patch for [libpod](https://github.com/containers/libpod/pull/3390), a library used to create container pods to [fix a date-related reproducibility issue](https://github.com/containers/libpod/pull/3390) which has subsequently been merged.
* Richard Biener submitted a patch for the [GCC GNU Compiler Collection](https://gcc.gnu.org/) to [fix differences in the runtime debugging info between builds](https://gcc.gnu.org/bugzilla/show_bug.cgi?id=90778) in its [D programming language](https://dlang.org/) support.
-#### Project website
-
-[![]({{ "/images/reports/2019-06/website.png#right" | prepend: site.baseurl }})](https://reproducible-builds.org/)
-
-There was a significant amount of effort on [our website](https://reproducible-builds.org/) this month.
-
-* Chris Lamb:
-
- * Move the remaining site to the newer website design. This was a long-outstanding task ([#2](https://salsa.debian.org/reproducible-builds/reproducible-website/issues/2)) and required a huge number of changes, including moving all the event and documentation pages to the new design [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/acf3c33)] and migrating/merging the old `_layouts/page.html` into the new design [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/3798f0a)] too. This could then allow for many cleanups including moving/deleting files into cleaner directories, dropping a bunch of example layouts [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/c87784a)] and dropping the old "home" layout. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/6862829)]
-
- * Added reports to the homepage. ([#16](https://salsa.debian.org/reproducible-builds/reproducible-website/issues/16))
-
- * Re-ordered and merged various top-level sections of the site to make the page easier to parse/navigate [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/0487cbb)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/22b6be0)] and updated the documentation for [`SOURCE_DATE_EPOCH`](https://reproducible-builds.org/docs/source-date-epoch/) to clarify that the alternative `-r` call to `date(1)` is for compatibility with [BSD](https://en.wikipedia.org/wiki/Berkeley_Software_Distribution) variants of UNIX [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/e54666a)].
-
- * Made a large number of visual fixups, particularly to accommodate the principles of [responsive web design](https://en.wikipedia.org/wiki/Responsive_web_design). [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/80c0157)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/7fed3e5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/b1a90ca)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/db5d1b5)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/4bbc4c2)]
-
- * Updating the [lint](https://en.wikipedia.org/wiki/Lint_\(software\)) functionality of the build system to check for URIs that are not using `{{ "/foo/" | prepend: site.baseurl }}`-style relative URLs. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/ae43b80)]
-
-* Jelle van der Waa updated the [Events]({{ "/events/" | prepend: site.baseurl }}) page to correct invalid [Markdown](https://daringfireball.net/projects/markdown/) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/ce6fce8)] and fixed a typo of "distribution" on a previous event page [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/824434b)].
-
-* Thomas Vincent added a huge number of videos and slides to the [*Resources*]({{ "/resources/" | prepend: site.baseurl }}) page [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/816d66a)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/5ec6758)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/8efe14a)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/334a2cf)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/303ecdb)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/ad622a3)] etc. as well as added a button to link to subtitles [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/050a5f4)] and fixing a bug when displaying metadata links [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/5e00011)].
-
-In addition, Atharva Lele added the [Buildroot](https://buildroot.org/) embedded Linux project to the ["Who's involved"]({{ "/who/" | prepend: site.baseurl }}) page. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/34dc835)]
-
-
-#### [`buildinfo.debian.net`](https://buildinfo.debian.net)
-
-[![]({{ "/images/reports/2019-06/buildinfo-debian-net.png#right" | prepend: site.baseurl }})](https://buildinfo.debian.net/)
-
-Chris Lamb spent significant time working on [`buildinfo.debian.net`](https://buildinfo.debian.net), his experiment into how to process, store and distribute `.buildinfo` files after the Debian archive software has processed them. This included:
-
-* Started making the move to Python 3.x (and [Django](https://www.djangoproject.com/) 2.x) [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ef866349fab43000abd6e6115b1120e035f33bf9)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c44c2eaf52defa599a67d1bc02e2e4a58a386e6e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/d27540daeedab116f09e52e4bb186b97861e5d0e)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/9a68e9ab1aa13dd8550833dcab924c8818d3277f)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/ec475c64274e88244661f3f76374f453b562276c)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/c46e48bd52a89b0839a4a17728d6dd96be8a1bc5)][[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/0dcac1d682b151092bd2988b0bc442508c8bda17)], additionally performing a large number of adjacent cleanups including dropping the authentication framework [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/961be8b0b935f84f3c67804453c1508ff1751a5f)], fixing a number of [flake8](http://flake8.pycqa.org/) warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6f1257b82c89c639ec694c37d7aa6d76fcae38be)], adding a `setup.cfg` to silence some warnings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/fc7bbc25b163c05a8ef1e74b3a77bf94a40ab30c)], moving to `__str__` and `str.format(...)` over `%`-style interpolation and `u"Unicode"` strings [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/afc77977fa2ad376f828009f532be2581e3bd9b7)], etc.
-
-* Adding a number of (as-yet unreleased…) features, including caching the expensive landing page queries. [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/79f5e03946b8550ed41bdee5d811ef6ae846ba52)]
-
-* Taking the opportunity to start migrating the hosting from [its current GitHub home](https://gitlab.com/lamby/buildinfo.debian.net) to a [more-centralised repository on salsa.debian.org](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net), moving from the [Travis](https://travis-ci.org/) to the [GitLab](https://docs.gitlab.com/ee/ci/) continuous integration platform, updating the URL to the source in the footer [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/6648cc81fd6243019c8a6e51f828ddfa55dbd758)] and many other related changes [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/24f785113b63a0c2ef159ffd3162be1be72c7561)].
-
-* Applying the [Black](https://black.readthedocs.io/en/stable/) "uncompromising code formatter" to the codebase. [[...](https://salsa.debian.org/reproducible-builds/buildinfo.debian.net/commit/7d19e69ca93b1ac31d492f9b13e97f9fbd80870c)]
+#### Distribution work
-#### Test framework
-
-We operate a comprehensive [Jenkins](https://jenkins.io/)-based testing framework that powers [tests.reproducible-builds.org](https://tests.reproducible-builds.org). The following changes were done in the last month:
-
-* Alexander Couzens ([OpenWrt](https://openwrt.org)):
- * Rewrite the database interaction routines for [OpenWrt](https://openwrt.org/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/380d632b)]
- * Migrated the OpenWrt package parser to use Python 3.x as [Python 2.x will be reaching end-of-life](https://pythonclock.org/) at the end of this year. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/23a2c60e)]
- * Use `IGNORE_ERRORS=n y m` similar to [Buildbot](https://buildbot.net/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/961e44ec)]
-
-* Holger Levsen:
- * Show [Alpine](https://alpinelinux.org/)-related jobs on the job health page. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f3d0a03a)]
- * Alpine needs the [`jq`](https://stedolan.github.io/jq/) command-line JSON processor for the new scheduler. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/518f4005)]
- * Start a dedicated `README.development` file. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/db7a2b8d)]
- * Add support for some nodes running Debian *buster* already. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/33fc2245)]
+[![]({{ "/images/reports/2019-06/debian.png#left" | prepend: site.baseurl }})](https://debian.org/)
-* Jelle van der Waa:
- * Change [Arch Linux](https://www.archlinux.org/) and Alpine `BLACKLIST` status to `blacklist` [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/0ab61da0)] and `GOOD` to `reproducible` [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5c62ea9d)] respectfully.
- * Add a Jenkins job to generate Arch Linux HTML pages. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2f9aa5ab)]
- * Fix the Arch Linux suites in the `reproducible.ini` file. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/fa8e9192)]
- * Add an Arch JSON export Jenkins job. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/033bc3e7)]
- * Create per-distribution reproducible JSON files. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/20a7b86c)]
+In [Debian](https://www.debian.org/), 39 reviews of packages were added, 3 were updated and 8 were removed this month, adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
-* *kpcyrd* ([Alpine](https://alpinelinux.org/)):
+Chris Lamb also did more work testing of the reproducibility status of [Debian Installer](https://www.debian.org/devel/debian-installer/) images. In particular, he was working around and patching an issue stemming from us testing builds far into the "future". ([#926242](https://bugs.debian.org/926242#92))
- * Start adding an Alpine theme. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/1f5baa4d)]
- * Add an Alpine website. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/9a094dae)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ff75924c)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/8f59af7b)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/6f5b99c1)]
- * Add `#alpine-reproducible` to the `KGB` chat bot. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/d4f27f79)]
- * Use the `apk` version instead of `vercmp`. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/deb36b07)]
- * Install/configure various parts of the chroot including passing in Git options [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/44a9116a)], adding the `abuild` group onto more servers [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/70b4466b)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/94e0e647)], installing [GnuPG](https://gnupg.org/) [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/c057af34)]
- * Build packages using its own scheduler. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/da75876e)] [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a4639713)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a9debc77)]
- * Misc maintenance and fixups. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/439af034)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/cc03efb5)]
+In addition, following discussions at [MiniDebConf Hamburg](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg), Ivo De Decker reviewed the situation around Debian bug [#869184](https://bugs.debian.org/869184) again ("*dpkg: source uploads including `_amd64.buildinfo` cause problems*") and updated the bug with some recommendations for the next Debian release cycle.
-* Mattia Rizzolo:
- * Adjust the `setup_pbuilder` script to use `[check-valid-until=no]` instead of `Acquire::Check-Valid-Until` (re. ([#926242](https://bugs.debian.org/926242#92))). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5a51e8af)]
+[![]({{ "/images/reports/2019-06/opensuse.png#right" | prepend: site.baseurl }})](https://www.opensuse.org/)
+Bernhard M. Wiedemann posted his [monthly Reproducible Builds status update](https://lists.opensuse.org/opensuse-factory/2019-06/msg00429.html) for the [openSUSE](https://opensuse.org/) distribution.
#### Other tools
@@ -270,7 +260,7 @@ If you are interested in contributing the Reproducible Builds project, please vi
* IRC: `#reproducible-builds` on `irc.oftc.net`.
- * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
+ * Twitter: [**@ReproBuilds**](https://twitter.com/ReproBuilds)
* Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
=====================================
news.md
=====================================
@@ -7,10 +7,8 @@ order: 1
# News
-<br>
-
<ul class="list-unstyled">
- {% for post in site.posts limit: 4 %}
+ {% for post in site.posts limit: 3 %}
<li>
<a href="{{ post.url | prepend: site.baseurl }}">{{ post.title }}</a>
<small class="text-muted">{{ post.date | date: "%b %-d, %Y" }}</small>
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/compare/77f35e4025f4c14f39607d6d30ff7191a285c052...48442d83adffa6f82c31d0c84a1a9e2cb0e876c1
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/compare/77f35e4025f4c14f39607d6d30ff7191a285c052...48442d83adffa6f82c31d0c84a1a9e2cb0e876c1
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20190704/5a9d1e53/attachment.html>
More information about the rb-commits
mailing list