[Git][reproducible-builds/reproducible-website][master] 2019-06: initial commit

[Jelle van der Waa]

Jelle van der Waa pushed to branch master at Reproducible Builds / reproducible-website


Commits:
24cfbf09 by Jelle van der Waa at 2019-06-08T21:12:43Z
2019-06: initial commit

Add progress during mini debconf Hamburg

- - - - -


1 changed file:

- + _reports/2019-06.md


Changes:

=====================================
_reports/2019-06.md
=====================================
@@ -0,0 +1,23 @@
+---
+layout: new/report
+year: "2019"
+month: "06"
+title: "Reproducible Builds in June 2019"
+draft: true
+---
+
+## Mini DebConf Hamburg Sprint
+
+kpcyrd, lynxis, Holger Levsen and Jelle van der Waa attended [mini DebConf Hamburg](https://wiki.debian.org/DebianEvents/de/2019/MiniDebConfHamburg) and worked on reproducible builds.
+
+* Jelle van der Waa
+    * Improved the [reproducible_json.py script](https://salsa.debian.org/qa/jenkins.debian.net/commit/20a7b86ce0a26bd8f8718478c8e8a1612c0af87e) to generate distro specific JSON which lead to the availability of an [Arch Linux JSON](https://tests.reproducible-builds.org/archlinux/reproducible.json) file.
+    * Investigated why the Arch Linux kernel package is not reproducible and found out that ```KBUILD_BUILD_HOST```, ```KGBUILD_BUILD_TIMESTAMP``` should be set. The enabling of ```CONFIG_MODULE_SIG_ALL``` causes the kernel modules to be signed with an at build time created key if non is provided which leads to unreproducibility.
+    * [keyutils](https://www.archlinux.org/packages/core/x86_64/keyutils/) was fixed for embedding the build date in it's binary with this [patch](https://pkgbuild.com/~jelle/0001-Make-keyutils-reproducible.patch)
+    * [nspr](https://www.archlinux.org/packages/core/x86_64/nspr/) has been made reproducible in Arch Linux with the follow  ing [change](https://git.archlinux.org/svntogit/packages.git/commit/trunk?h=packages/nspr&id=3696d15bba92ea14931f842b27654e318055e532)
+
+* kpcyrd
+    * Created a Jenkins [job](https://jenkins.debian.net/view/All/job/reproducible_setup_schroot_alpine_jenkins/) to generate an Alpine build chroot
+    * Created a Jenkins [job](https://jenkins.debian.net/view/All/job/reproducible_alpine_scheduler/) to schedule new Alpine packages
+    * Created a Jenkins [job](https://jenkins.debian.net/job/reproducible_builder_alpine_1/) for building Alpine packages
+    * Provided a proof of concept [patch](https://gitlab.com/kpcyrd/abuild/commit/ea1c11811eaf0a98b5b8ab9c57574a9895d56454.patch) to make abuild respect SOURCE_DATE_EPOCH when creating Alpine packages files.



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/24cfbf09065412e49709b2bf9c8ca3eb507177c0

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/commit/24cfbf09065412e49709b2bf9c8ca3eb507177c0
You're receiving this email because of your account on salsa.debian.org.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20190608/cc6f7ed1/attachment.html>