[Git][reproducible-builds/reproducible-website][master] 4 commits: Update template.
Chris Lamb
gitlab at salsa.debian.org
Thu Oct 3 10:19:05 UTC 2019
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
db5e8086 by Chris Lamb at 2019-10-03T10:17:48Z
Update template.
- - - - -
137e4bd5 by Chris Lamb at 2019-10-03T10:17:48Z
Tidy the new "testing framework" links.
- - - - -
4594e05a by Chris Lamb at 2019-10-03T10:17:48Z
Improve the formatting of our reports.
- - - - -
313ab390 by Chris Lamb at 2019-10-03T10:17:48Z
2019-09: Initial draft.
- - - - -
20 changed files:
- _includes/nav_buttons.html
- _includes/navbar.html
- _includes/navbar_side.html
- _reports/2019-09.md
- assets/styles/custom.scss
- bin/generate-draft.template
- + images/reports/2019-09/56nRFxA7lPY.jpg
- + images/reports/2019-09/archlinux.png
- + images/reports/2019-09/coreboot.png
- + images/reports/2019-09/debian.png
- + images/reports/2019-09/diffoscope.svg
- + images/reports/2019-09/gnu.png
- + images/reports/2019-09/opensuse.png
- + images/reports/2019-09/openwrt.png
- + images/reports/2019-09/reproducible-builds.png
- + images/reports/2019-09/seagl.png
- + images/reports/2019-09/summit.jpg
- + images/reports/2019-09/testframework.png
- + images/reports/2019-09/webmin.png
- + images/reports/2019-09/website.png
Changes:
=====================================
_includes/nav_buttons.html
=====================================
@@ -1,5 +1,5 @@
{% assign sorted_pages = site.pages | sort:"order" %}
<p class="text-center">
{% for page in sorted_pages %}{% if page.title and page.order > 0 %}<a class="btn btn-outline-primary m-2" href="{{ page.url | prepend: site.baseurl }}">{{ page.title }}</a>{% endif %}{% endfor %}
-<a class="btn btn-outline-primary m-2" href="https://tests.reproducible-builds.org/" target="_new">Testing framework</a>
+<a class="btn btn-outline-primary btn-sm m-2" href="https://tests.reproducible-builds.org/" target="_new">Testing framework</a>
</p>
=====================================
_includes/navbar.html
=====================================
@@ -17,8 +17,8 @@
{% endif %}
{% endfor %}
<li class="nav-item">
- <a class="nav-link" href="https://tests.reproducible-builds.org/" target="_new">Testing framework</a>
- </li>
+ <a class="nav-link" href="https://tests.reproducible-builds.org/" target="_new">Testing framework</a>
+ </li>
</ul>
</div>
</nav>
=====================================
_includes/navbar_side.html
=====================================
@@ -10,7 +10,7 @@
{% endfor %}
<li class="list-group-item rb-main-sidebar">
- <a href="https://tests.reproducible-builds.org/" target="_new" class="sidebar__link__darkGray">Testing framework</a>
+ <a href="https://tests.reproducible-builds.org/" target="_new" class="sidebar__link__darkGray btn btn-outline-primary btn-sm">Testing framework</a>
</li>
</ul>
</div>
=====================================
_reports/2019-09.md
=====================================
@@ -2,110 +2,255 @@
layout: report
year: "2019"
month: "09"
-month_name: "September"
-title: "Reproducible builds in September 2019"
+title: "Reproducible Builds in September 2019"
draft: true
---
+
+**Welcome to the September 2019 report from the [Reproducible Builds]({{ "/" | prepend: site.baseurl }}) project!**
+{: .lead}
+
+[![]({{ "/images/reports/2019-09/reproducible-builds.png#right" | prepend: site.baseurl }})]({{ "/" | prepend: site.baseurl }})
+
+In these reports we outline the most important things that we have been up over the past month. As a quick refresher of what our project is about, whilst anyone can inspect the source code of free software for malicious flaws, most software is distributed to end users or server systems as precompiled binaries. The motivation behind the reproducible builds effort is to ensure zero changes have been introduced during these compilation processes. This is achieved by promising identical results are always generated from a given source thus allowing multiple third-parties to come to a consensus on whether a build was changed or even compromised.
+
+In September's report, we cover:
+
+* **Media coverage & events** — *More presentations, preventing Stuxnet, etc.*
+* **** — *More presentations, preventing Stuxnet, etc.*
+* **Upstream news** — *kernel reproducibility, grafana, systemd, etc.*
+* **Distribution work** — *reproducible images in Arch Linux, policy changes in Debian, etc.*
+* **Software development** — *yet more work on diffoscope, upstream patches, etc.*
+* **Misc news** — *From our mailing list, etc.*
+* **Getting in touch** — *How to contribute, etc*
+
+If you are interested in contributing to our project, please visit our [*Contribute*]({{ "/contribute/" | prepend: site.baseurl }}) page on our website.
+
+---
+
+## Media coverage & events
+
+[![]({{ "/images/reports/2019-09/56nRFxA7lPY.jpg#right" | prepend: site.baseurl }})](https://www.youtube.com/watch?v=56nRFxA7lPY)
+
+This month Vagrant Cascadian attended the [2019 GNU Tools Cauldron](https://gcc.gnu.org/wiki/cauldron2019) in Montréal, Canada and gave a presentation entitled [*Reproducible Toolchains for the Win*](https://gcc.gnu.org/wiki/cauldron2019#cauldron2019talks.Reproducible_Toolchains_For_The_Win) ([video](https://www.youtube.com/watch?v=56nRFxA7lPY)).
+
+In addition, our project [was highlighted as part of a presentation](https://media.ccc.de/v/ASG2019-146-rootless-reproducible-hermetic-secure-container-build-showdown#t=407) by [Andrew Martin](https://twitter.com/sublimino) at the [All Systems Go](https://all-systems-go.io/) conference in Berlin titled [*Rootless, Reproducible & Hermetic: Secure Container Build Showdown*](https://cfp.all-systems-go.io/ASG2019/talk/PVYETJ/)
+and [Björn Michaelsen](https://en.wikipedia.org/wiki/Bj%C3%B6rn_Michaelsen) from the [Document Foundation](https://www.documentfoundation.org/) presented at the [2019 LibreOffice Conference](https://libocon.org/) in AlmerÃa, Spain on the status of reproducible builds in the [Libreoffice office suite](https://www.libreoffice.org/).
+
+Anastasis Keliris and Michail Maniatakos from the [New York University Tandon School of Engineering](https://engineering.nyu.edu/) published a paper titled *ICSREF: A Framework for Automated Reverse Engineering of Industrial Control Systems Binaries* ([PDF](https://arxiv.org/pdf/1812.03478.pdf)) that speaks to concerns regarding the security of Industrial Control Systems (ICS) such as those attacked via [Stuxnet](https://en.wikipedia.org/wiki/Stuxnet) that outlines their [ICSREF](https://github.com/momalab/ICSREF) tool for reverse-engineering binaries from such systems and furthermore demonstrating a scenario whereby a commercial smartphone could be easily used to compromise this infrastructure.
+
+[![]({{ "/images/reports/2019-09/seagl.png#right" | prepend: site.baseurl }})](https://seagl.org/)
+
+It was announced that Vagrant Cascadian will present a talk at [SeaGL](https://seagl.org) in Seattle, Washington during November titled [*There and Back Again, Reproducibly*](https://osem.seagl.org/conferences/seagl2019/program/proposals/671).
+
+---
+
+## 2019 Summit
+
+[![]({{ "/images/reports/2019-09/summit.jpg#right" | prepend: site.baseurl }})]({{ "/events/Marrakesh2019/" | prepend: site.baseurl }})
+
+Registration for [our fourth annual Reproducible Builds summit]({{ "/events/Marrakesh2019/" | prepend: site.baseurl }}) that will take place between 1st → 8th December in Marrakech, Morocco has opened and [personal invitation](https://lists.reproducible-builds.org/pipermail/rb-general/2019-September/001651.html) have been sent out.
+
+Similar to previous incarnations of the event, the heart of the workshop will be three days of moderated sessions with surrounding "hacking" days and will include a huge diversity of participants from Arch Linux, coreboot, Debian, F-Droid, GNU Guix, Google, Huawei, in-toto, MirageOS, NYU, OpenWrt, Tails, Tor Project and many more. If you would like to learn more about the event and how to register, please visit our [our dedicated event page](https://reproducible-builds.org/events/Marrakesh2019/).
+
+
+---
+
+## Upstream news
+
+Ben Hutchings [added documentation to the Linux kernel](https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=fe013f8bc160d79c6e33bb66d9bb0cd24949274c) regarding how to make reproducible builds. As he mentioned in the commit message, the kernel is actually reproducible but the solution was not previously documented in one place and thus Ben listed the workflow and environment needed to ensure a reproducible build.
+
+[Daniel Edgecumbe](https://esotericnonsense.com) kindly [submitted a pull request](https://github.com/systemd/systemd/pull/13482) that was subsequently merged to the logging/journalling component of [systemd](https://www.freedesktop.org/wiki/Software/systemd/) in order that the output of eg. `journalctl --update-catalog` does not differ between subsequent runs despite there being no changes in the input files.
+
+Jelle van der Waa noticed that if the [grafana](https://grafana.com/) monitoring tool was built within a source tree devoid of [Git](https://git-scm.com/) metadata then the current timestamp was used, leading to an unreproducible build. To avoid this, Jelle [submitted a pull request](https://github.com/grafana/grafana/pull/18953) in order that it use [`SOURCE_DATE_EPOCH`]({{ "/docs/source-date-epoch/" | prepend: site.baseurl }}) if available.
+
+[Mes](https://gitlab.com/janneke/mes) (a Scheme-based compiler for our "sister" [bootstrappable builds](http://bootstrappable.org) effort) [announced their 0.20 release](https://lists.reproducible-builds.org/pipermail/rb-general/2019-September/001649.html).
+
+
+---
+
+### Distribution work
+
+[![]({{ "/images/reports/2019-09/opensuse.png#right" | prepend: site.baseurl }})](https://www.opensuse.org/)
+
+Bernhard M. Wiedemann posted [his monthly Reproducible Builds status update](https://lists.opensuse.org/opensuse-factory/2019-09/msg00244.html) for the [openSUSE](https://opensuse.org/) distribution. [Thunderbird](https://www.thunderbird.net/) and `kernel-vanilla` packages are among the larger ones to become reproducible soon, and Python patches to help reproducibility issues of builds of Python modules with C bindings.
+
+[![]({{ "/images/reports/2019-09/openwrt.png#right" | prepend: site.baseurl }})](https://openwrt.org/)
+
+[OpenWrt](https://openwrt.org/) is a Linux-based operating system targeting embedded devices such as wireless network routers. This month, Paul Spooren (*aparcar*) switched the toolchain the use the [GCC](https://gcc.gnu.org/) version 8 by default in order to support the `-ffile-prefix-map=` which permits a varying build path without affecting the binary result of the build. [[...](https://lists.infradead.org/pipermail/openwrt-devel/2019-September/019156.html)] In addition, Paul [updated the `kernel-defaults` package](https://lists.infradead.org/pipermail/openwrt-devel/2019-September/019166.html) to ensure that the [`SOURCE_DATE_EPOCH` environment variable]({{ "/docs/source-date-epoch/" | prepend: site.baseurl }}) is considered when creating the the `/init` directory.
+
+[![]({{ "/images/reports/2019-09/coreboot.png#right" | prepend: site.baseurl }})](https://www.coreboot.org/)
+
+Alexander "*lynxis*" Couzens began work on working on [a set of build scripts](https://github.com/system-transparency/build.git) for creating firmware and operating system artifacts in the [Coreboot](https://www.coreboot.org/) distribution.
+
+#### Arch Linux
+
+[![]({{ "/images/reports/2019-09/archlinux.png#right" | prepend: site.baseurl }})](https://archlinux.org)
+
+The `mkinitcpio` component of [Arch Linux](https://www.archlinux.org/) was updated by [Daniel Edgecumbe](https://esotericnonsense.com) in order that it generates reproducible [initramfs images](https://en.wikipedia.org/wiki/Initial_ramdisk) by default, meaning that two subsequent runs of `mkinitcpio` produces two files that are identical at the binary level. The [commit message](https://github.com/archlinux/mkinitcpio/pull/1/files) elaborates on its methodology:
+
+> Timestamps within the initramfs are set to the Unix epoch of 1970-01-01. Note that in order for the build to be fully reproducible, the compressor specified (e.g. gzip, xz) must also produce reproducible archives. At the time of writing, as an inexhaustive example, the lzop compressor is incapable of producing reproducible archives due to the insertion of a runtime timestamp.
+
+In addition, a bug was created to [track progress on making the Arch Linux ISO images reproducible](https://bugs.archlinux.org/task/63683?project=6).
+
+#### Debian
+
+[![]({{ "/images/reports/2019-09/debian.png#right" | prepend: site.baseurl }})](https://debian.org/)
+
+In July, Holger Levsen [filed a bug against the underlying tool](https://bugs.debian.org/932849) that maintains the Debian archive ("[dak](https://wiki.debian.org/DebianDak)") after he noticed that `.buildinfo` metadata files were not being automatically propagated in the case that packages had to be manually approved in "[`NEW` queue](https://ftp-master.debian.org/new.html)". After it was pointed out that the files were being retained in a separate location, [Benjamin Hof proposed a patch](https://bugs.debian.org/932849#22) for the issue [that was merged and deployed this month](https://salsa.debian.org/ftp-team/dak/commit/e29d4c4dca77aea5555aac7a5ea7f665efec688f).
+
+[Aurélien Jarno](https://www.aurel32.net/) filed a bug against the [Debian Policy](https://www.debian.org/doc/debian-policy/) ([#940234](https://bugs.debian.org/940234)) to request a section be added regarding the reproducibility of source packages. Whilst there is already a section about reproducibility in the Policy, it only mentions binary packages. Aurélien suggest that it:
+
+> ... might be a good idea to add a new requirement that repeatedly building the source package in the same environment produces identical `.dsc` files.
+
+In addition, 51 reviews of Debian packages were added, 22 were updated and 47 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). Many issue types were added by Chris Lamb including [`buildpath_in_code_generated_by_bison`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/c0d9481b), [`buildpath_in_postgres_opcodes`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/6aacfd67) and [`ghc_captures_build_path_via_tempdir`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/5677943d).
+
+## Software development
+
#### Upstream patches
-The Reproducible Builds project detects, dissects and attempts to fix as many currently-unreproducible packages as possible. We endeavour to send all of our patches upstream where appropriate. In September we wrote a large number of such patches, including:
+The Reproducible Builds project detects, dissects and attempts to fix as many currently-unreproducible packages as possible. We endeavour to send all of our patches upstream where appropriate. This month, we wrote a large number of such patches, including:
* Bernhard M. Wiedemann:
- * [`python-keystoneauth1`](https://review.opendev.org/681103) (fix FTBFS in 2020)
- * [`python-iminuit`](https://github.com/scikit-hep/iminuit/pull/355) (merged ; sort python glob/readdir)
- * [`blender`](https://developer.blender.org/D5756) (python date)
- * [`wget2`](https://gitlab.com/gnuwget/wget2/merge_requests/450) (build date was dropped)
+ * [`blender`](https://developer.blender.org/D5756) (Python date)
* [`buzztrax`](https://github.com/Buzztrax/buzztrax/pull/88) (shell date)
- * [`gmsh`](https://build.opensuse.org/request/show/731075) (hostname+username)
- * [`enblend-enfuse`](https://build.opensuse.org/request/show/731759) (date+host+user ; partially upstream)
- * [`MozillaThunderbird`](https://build.opensuse.org/request/show/732106) (python date)
- * [`python-openstackdocstheme`](https://build.opensuse.org/request/show/732328) (date, toolchain)
+ * [`colobot-data`](https://build.opensuse.org/request/show/733640) (sort Python `readdir`, [forwarded upstream](https://github.com/colobot/colobot-data/pull/41))
+ * [`enblend-enfuse`](https://build.opensuse.org/request/show/731759) (date/host/user)
+ * [`gmsh`](https://build.opensuse.org/request/show/731075) (hostname/username)
+ * [`griefly`](https://build.opensuse.org/request/show/733637) (sort Python `readdir`, [forwarded upstream](https://github.com/griefly/griefly/pull/508))
* [`guile`](https://build.opensuse.org/request/show/732638) (disable parallelism)
- * [`MozillaFirefox`](https://build.opensuse.org/request/show/733089) (make PGO optional)
- * [`latex2html`](https://build.opensuse.org/request/show/733232) (drop latex log file with date)
- * [`griefly`](https://build.opensuse.org/request/show/733637) (sort python readdir ; [submitted upstream](https://github.com/griefly/griefly/pull/508))
- * [`colobot-data`](https://build.opensuse.org/request/show/733640) (sort python readdir ; [submitted upstream](https://github.com/colobot/colobot-data/pull/41))
- * [`python3`](https://build.opensuse.org/request/show/733152) and [`python`](https://build.opensuse.org/request/show/733188) (toolchain, sort readdir)
- * [`python-holidays`](https://github.com/dr-prodigy/python-holidays/pull/235) (merged, fix FTBFS-2020)
- * [`python-ioflo`](https://github.com/ioflo/ioflo/pull/41) (fix FTBFS via cert renewal)
- * [`python-futures`](https://github.com/agronholm/pythonfutures/pull/92) (fix FTBFS)
- * [`ninja`](https://github.com/ninja-build/ninja/pull/1651) (merged, fix FTBFS-j1)
+ * [`latex2html`](https://build.opensuse.org/request/show/733232) (drop LaTeX log file with date)
+ * [`MozillaFirefox`](https://build.opensuse.org/request/show/733089) (make [Profile-Guided Optimisation](https://en.wikipedia.org/wiki/Profile-guided_optimization) optional)
+ * [`MozillaThunderbird`](https://build.opensuse.org/request/show/732106) (Python date)
+ * [`ninja`](https://github.com/ninja-build/ninja/pull/1651) (build failure when build without parallelism)
+ * [`python-futures`](https://github.com/agronholm/pythonfutures/pull/92) (fix build failure)
+ * [`python-holidays`](https://github.com/dr-prodigy/python-holidays/pull/235) (fix build failure in 2020)
+ * [`python-iminuit`](https://github.com/scikit-hep/iminuit/pull/355) (sort Python [glob](https://docs.python.org/3/library/glob.html))
+ * [`python-ioflo`](https://github.com/ioflo/ioflo/pull/41) (fix build failure via security certificate renewal)
+ * [`python-keystoneauth1`](https://review.opendev.org/681103) (fix build failure in 2020)
+ * [`python-openstackdocstheme`](https://build.opensuse.org/request/show/732328) (date issue)
+ * [`python3`](https://build.opensuse.org/request/show/733152)/[`python`](https://build.opensuse.org/request/show/733188) (toolchain, sort `readdir`)
* [`volk`](https://bugzilla.opensuse.org/show_bug.cgi?id=1152001) (report compile-time CPU-detection)
+ * [`wget2`](https://gitlab.com/gnuwget/wget2/merge_requests/450) (drop build date)
+
+* Chris Lamb ("*lamby*"):
+ * [#939546](https://bugs.debian.org/939546) filed against [libnbd](https://tracker.debian.org/pkg/libnbd) ([forwarded upstream](https://github.com/libguestfs/libnbd/pull/2))
+ * [#939547](https://bugs.debian.org/939547) filed against [libubootenv](https://tracker.debian.org/pkg/libubootenv) ([forwarded upstream](https://github.com/sbabic/libubootenv/pull/3))
+ * [#939548](https://bugs.debian.org/939548) filed against [dsdp](https://tracker.debian.org/pkg/dsdp).
+ * [#939549](https://bugs.debian.org/939549) filed against [sdaps](https://tracker.debian.org/pkg/sdaps) ([forwarded upstream](https://github.com/sdaps/sdaps/pull/182))
+ * [#939650](https://bugs.debian.org/939650) filed against [libvdpau](https://tracker.debian.org/pkg/libvdpau).
+ * [#940013](https://bugs.debian.org/940013) filed against [apophenia](https://tracker.debian.org/pkg/apophenia).
+ * [#940156](https://bugs.debian.org/940156) filed against [pydantic](https://tracker.debian.org/pkg/pydantic) ([forwarded upstream](https://github.com/samuelcolvin/pydantic/pull/805))
+ * [#940639](https://bugs.debian.org/940639) filed against [vala-panel](https://tracker.debian.org/pkg/vala-panel).
+ * [#941072](https://bugs.debian.org/941072) filed against [kivy](https://tracker.debian.org/pkg/kivy).
+ * [#941116](https://bugs.debian.org/941116) filed against [fathom](https://tracker.debian.org/pkg/fathom).
+ * Several [libguestfs](http://libguestfs.org/) components [have received a patch](https://www.redhat.com/archives/libguestfs/2019-September/msg00037.html) to support [`SOURCE_DATE_EPOCH`]({{ "/docs/source-date-epoch/" | prepend: site.baseurl }}).
+
+* Rebecca N. Palmer:
+ * [#941309](https://bugs.debian.org/941309) filed against [node-browserify-lite](https://tracker.debian.org/pkg/node-browserify-lite).
+
+#### [Diffoscope](https://diffoscope.org)
+
+[![]({{ "/images/reports/2019-09/diffoscope.svg#right" | prepend: site.baseurl }})](https://diffoscope.org)
+
+[`diffoscope`](https://diffoscope.org) is our in-depth and content-aware diff utility that can locate and diagnose reproducibility issues. It is run countless times a day on [our testing infrastructure](https://tests.reproducible-builds.org/debian/reproducible.html) and is essential for identifying fixes and causes of non-deterministic behaviour.
+
+This month, Chris Lamb uploaded versions `123`, `124` and `125` and made the following changes:
+
+* New features:
+
+ * Add `/srv/diffoscope/bin` to the Docker image path. ([#70](https://salsa.debian.org/reproducible-builds/diffoscope/issues/70))
+ * When skipping tests due to the lack of installed tool, print the package that might provide it. [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/e5b8268)]
+ * Update the "no progressbar" logging message to match the parallel `missing tlsh module` warnings. [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/c381c4a)]
+ * Update "requires foo" messages to clarify that they are referring to Python modules. [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/73ffcdc)]
+
+* Testsuite updates:
+
+ * The `test_libmix_differences` ELF binary test requires the `xxd` tool. ([#940645](https://bugs.debian.org/940645))
+ * Build the OCaml test input files on-demand rather than shipping them with the package in order to prevent test failures with OCaml 4.08. ([#67](https://salsa.debian.org/reproducible-builds/diffoscope/issues/67))
+ * Also conditionally skip the identification and "no differences" tests as we require the [Ocaml](https://ocaml.org/) compiler to be present when building the test files themselves. ([#940471](https://bugs.debian.org/940471))
+ * Rebuild our test [squashfs images](https://en.wikipedia.org/wiki/SquashFS) to exclude the character device as they requires root or [fakeroot](https://wiki.debian.org/FakeRoot) to extract. ([#65](https://salsa.debian.org/reproducible-builds/diffoscope/issues/65))
+
+* Many code cleanups, including dropping some unnecessary control flow [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/ff57b86)], dropping unnecessary `pass` statements [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/e066e77)] and dropping explicitly inheriting from `object` class as it unnecessary in Python 3 [[...](https://salsa.debian.org/reproducible-builds/diffoscope.git/commit/7c21ed3)].
+
+In addition, Marc Herbert completely overhauled the handling of ELF binaries particularly around many assumptions that were previously being made via file extensions, etc. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ce6c03f)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ec7b3ae)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/bee2a11)] and updated the testsuite to support a never version of the [Coreboot](https://www.coreboot.org/) utilities. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/29da4e4)]. Mattia Rizzolo then ensured that *diffoscope* does not crash when the progress bar module is missing but the functionality was requested [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/7294ff9)] and made our version checking code more lenient [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e07dfbe)]. Lastly, Vagrant Cascadian not only updated *diffoscope* to versions [123](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3ec8c0ca942409da6ce06c38f6d8b6ccfc2a943a) and [125](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3fb581ca9f18fe61e070195f4f8d1a670931b722), he enabled a more complete test suite in the [GNU Guix](https://guix.gnu.org/) distribution. [[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3eb4adc2c41896c202f3d9131c36160c0a1311e6)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=68620d62f5cd49d6455c351f3a68e3c41dc6ce22)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=6ec872231fdf746bd6e11b97f8a6b3a23498806c)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=af760990e9651be865ccd20b935863d85f605f2e)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=4d83157cd806aeb864664ebb380c19f6be04648c)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=f315673d9e56f4f2398098590ebdc080b63ce8b1)]
+
+#### Project website
+
+[![]({{ "/images/reports/2019-09/website.png#right" | prepend: site.baseurl }})](https://reproducible-builds.org/)
+
+There was yet more effort put into our [our website](https://reproducible-builds.org/) this month, including:
+
* Chris Lamb:
- * [#939549](https://bugs.debian.org/939549) filed against [`sdaps`](https://tracker.debian.org/pkg/sdaps) [forwarded](https://github.com/sdaps/sdaps/pull/182) (merged, sort python dictionary)
- * [#939547](https://bugs.debian.org/939547) filed against [`libubootenv`](https://tracker.debian.org/pkg/libubootenv) [forwarded](https://github.com/sbabic/libubootenv/pull/3) (merged, drop absolute path)
+ * Add missing image for [in-toto](https://in-toto.io/) on the "[Who is Involved?](https://reproducible-builds.org/who/)" page. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/70696b6)]
+ * Don't align images when on "extra small" (ie. mobile) devices as they make the text wrapping look suboptimal. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/cdc12ae)]
+ * Use `{% raw %}{% raw %}{% endraw %}` to escape Markdown in templated [Jinja](https://palletsprojects.com/p/jinja/) code. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website.git/commit/ec7c692)]
-#### FIXME
+* Holger Levsen:
+ * Add a link to [our style guide](https://reproducible-builds.org/style/) on our "[tools]({{ "/tools/" | prepend: site.baseurl }})" page. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/9a6975f)]
+ * Rework the handling of news/events, including adding a [news archive page]({{ "/news-archive/" | prepend: site.baseurl }}) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f64c772)] and differentiating between news and reports on the homepage [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/40a6371)].
+ * Large number of changes to the "[Who is Involved?]({{ "/who/" | prepend: site.baseurl }})" page, including adding a link to [F-Droid](https://f-droid.org/)'s [verification server](https://verification.f-droid.org/) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/50d4240)] and their verification tool for end-users [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/84d17e4)] as well as adding the [Civil Infrastructure Project](https://www.cip-project.org/) (CIP) as a sponsor [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/a431302)]
+ * Include a link to our [testing framework](https://tests.reproducible-builds.org/) in all navigation elements. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/692cd67)]
+ * Add/improve a number of presentation entries on our [*Talks & Resources*]({{ "/resources/" | prepend: site.baseurl }}) page. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/32c861f)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f9b4d8a)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/dbd7c7d)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/872cb04)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/37fd2c6)]
-Bernhard M. Wiedemann posted his [monthly Reproducible Builds status update](https://lists.opensuse.org/opensuse-factory/2019-09/msg00244.html) for the [openSUSE](https://opensuse.org/) distribution. Thunderbird and kernel-vanilla packages are among the larger ones to soon become reproducible. Python toolchain patches help with reproducibility of all builds of python modules with C bindings.
+In addition, Cindy Kim added [in-toto](https://in-toto.io/) to our "[Who is Involved?]({{ "/who/" | prepend: site.baseurl }})" page, James Fenn updated [our homepage]({{ "/" | prepend: site.baseurl }}) to fix a number of spelling and grammar issues [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f7e9228)] and Peter Conrad added [BitShares](https://bitshares.org/) to our [list of projects interested in Reproducible Builds]({{ "/who/" | prepend: site.baseurl }}) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/d16af27)].
-* [939546 https://github.com/libguestfs/libnbd/pull/2](forwarded)
+#### strip-nondeterminism
-* [FIXME](https://www.redhat.com/archives/libguestfs/2019-September/msg00037.html) several libguestfs components got a perl patch to support `SOURCE_DATE_EPOCH` ; by lamby
+[strip-nondeterminism](https://tracker.debian.org/pkg/strip-nondeterminism) is our tool to remove specific non-deterministic results from successful builds. This month, Marc Herbert made a huge number of changes including:
-* [FIXME](https://github.com/redhotpenguin/perl-Archive-Zip/issues/26#issuecomment-529170764) new release 1.65 of the Archive-Zip perl module contains a fix for processing of bzip2 files that will benefit strip-nondeterminism ; via lamby
+* GNU [ar](https://en.wikipedia.org/wiki/Ar_(Unix)) handler:
+ * Don't corrupt the pseudo-filemode of the symbols table `/`.
+ * Add test files for symtab (`/`) and long names (`//`).
+ * Stop corrupting the SystemV/GNU table of long filenames.
-* [FIXME](https://github.com/systemd/systemd/pull/13482) ; journalctl to use ordered hash ; by Daniel Edgecumbe
+* Add a new `$File::StripNondeterminism::verbose` global and, if enabled, tell the user that `ar(1)` could not set the symbol table's [mtime](https://en.wikipedia.org/wiki/Mtime).
-* [support SOURCE_DATE_EPOCH in grafana](https://github.com/grafana/grafana/pull/18953)
+In addition, Chris Lamb performed some issue investigation with the [Debian Perl Team](https://wiki.debian.org/Teams/DebianPerlGroup) regarding issues in the [`Archive::Zip`](https://metacpan.org/pod/Archive::Zip) module including a problem with [corruption of members that use `bzip` compression](https://github.com/redhotpenguin/perl-Archive-Zip/issues/26) as well as a regression whereby [various metadata fields were not being updated](https://github.com/redhotpenguin/perl-Archive-Zip/issues/51) that was reported in/around Debian bug [#940973](https://bugs.debian.org/940973).
-* [mkinitcpio reproducible](https://github.com/archlinux/mkinitcpio/pull/1/files)
+#### Test framework
-* [A bug was created to track progress on making the Arch Linux iso reproducible](https://bugs.archlinux.org/task/63683?project=6)
+[![]({{ "/images/reports/2019-09/testframework.png#right" | prepend: site.baseurl }})](https://tests.reproducible-builds.org/)
-* FIXME: [GNU Mes 0.20 released](https://lists.reproducible-builds.org/pipermail/rb-general/2019-September/001649.html)
+We operate a comprehensive [Jenkins](https://jenkins.io/)-based testing framework that powers [tests.reproducible-builds.org](https://tests.reproducible-builds.org).
-* [940156 https://github.com/samuelcolvin/pydantic/pull/805](forwarded)
+* Alexander "*lynxis*" Couzens:
+ * Fix missing `.xcompile` in the build system. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/8b9bc6ba)]
+ * Install the [GNAT](https://www.gnu.org/software/gnat/) Ada compiler on all builders. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/dd31f47c)]
+ * Don't install the *iasl* [ACPI](https://en.wikipedia.org/wiki/Advanced_Configuration_and_Power_Interface) power management compiler/decompiler. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/54aa6650)]
-* [#]32849](https://bugs.debian.org/932849) fixed by e29d4c4dca77aea5555aac7a5ea7f665efec688f in dak.git
+* Holger Levsen:
+ * Correctly handle the `$DEBUG` variable in [OpenWrt](https://openwrt.org) builds. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/e8342fda)]
+ * Fefactor and notify the `#archlinux-reproducible` IRC channel for problems in this distribution. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/7d94cf15)]
+ * Ensure that only one mail is sent when rebooting nodes. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2d836061)]
+ * Unclutter the output of a Debian maintenance job. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/afc2e2fe)]
+ * Drop a "todo" entry as we vary on [a merged `/usr`](https://wiki.debian.org/UsrMerge) for some time now. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a489b705)]
-* [#940234 debian-policy: add a section about source reproducibility](https://bugs.debian.org/940234)
+In addition, Paul Spooren added an [OpenWrt](https://openwrt.org) snapshot build script which downloads `.buildinfo` and related checksums from the relevant download server and attempts to rebuild and then validate them for reproducibility. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/034491ea)]
-* [LibOCon Björn](https://libocon.org/assets/Conference/Almeria/schedule-almeria.pdf)
+The usual node maintenance was performed by Holger Levsen [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/e7eb5714)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/764d6ce9)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/1625e63b)], Mattia Rizzolo [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/47c6ee51)] and Vagrant Cascadian [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/1f1c7218)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/1036c5f3)].
-* [FIXME](https://lists.reproducible-builds.org/pipermail/rb-general/2019-September/001651.html) invitations for the Reproducible Builds summit in December 2019 in Marrakesh were sent.
+---
-* [FIXME](https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/?id=fe013f8bc160d79c6e33bb66d9bb0cd24949274c) Ben Hutchings added documentation to the Linux kernel about how to make reproducible builds.
+## Misc news
-* [FIXME](https://media.ccc.de/v/ASG2019-146-rootless-reproducible-hermetic-secure-container-build-showdown#t=407) reproducible builds was part of a presentation by Andrew Martin on the all systems go conference
-* [FIXME](https://media.ccc.de/v/ASG2019-155-purely-functional-package-management#t=370) reproducible builds was part of a presentation titled "Purely Functional Package Management" about Nix by Franz Pletz on the all systems go conference
+On [our mailing list](https://lists.reproducible-builds.org/pipermail/rb-general/) this month Rebecca N. Palmer started a thread titled [Addresses in (I)Python output](https://lists.reproducible-builds.org/pipermail/rb-general/2019-September/001657.html) which point out and attempts to find a solutio to a problem whereby in in Python, objects that don't have an explicit string representation have a default one that includes their memory address. This causes problems with reproducible builds if/when such output appears in documentation.
-* Vagrant Cascadian will present [There and Back Again, Reproducibly!](https://osem.seagl.org/conferences/seagl2019/program/proposals/671) at [SeaGL](https://seagl.org) in November.
+`reprotest` is our end-user tool to build same source code twice in different environments and then check the binaries produced by each build for differences. This month, a change by Dmitry Shachnev was merged to not use the `faketime` wrapper at all when asked to not vary time [[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/034efd8) and Holger Levsen subsequently released this as version `0.7.9` as dramatically overhauling the packaging [[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/d768b04)][[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/da33646)].
-* Vagrant Cascadian presented [Reproducible Toolchains For the Win!](https://gcc.gnu.org/wiki/cauldron2019#cauldron2019talks.Reproducible_Toolchains_For_The_Win) at [GNU Tools Cauldron](https://gcc.gnu.org/wiki/cauldron2019). [video](https://www.youtube.com/watch?v=56nRFxA7lPY).
+---
-* Registration for https://reproducible-builds.org/events/Marrakesh2019/ has been openened. Please mail holger at layer-acht.org if you want to attend.
+## Getting in touch
-* [FIXME](https://bugs.debian.org/940973)
+If you are interested in contributing the Reproducible Builds project, please visit our [*Contribute*]({{ "/contribute/" | prepend: site.baseurl }}) page on our website. However, you can get in touch with us via:
-* FIXME: https://github.com/bitshares/bitshares-gitian added to r-b.o/who
+ * IRC: `#reproducible-builds` on `irc.oftc.net`.
-* FIXME: lynxis started working on github.com/system-transparency/build.git
+ * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
-* [FIXME](https://github.com/momalab/ICSREF)
+ * Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
-* [FIXME](https://lists.infradead.org/pipermail/openwrt-devel/2019-September/019156.html) Paul Spooren patch for OpenWrt to toolchain/gcc: switch to version 8 by default. Main motivation for this commit is the introduction of `-ffile-prefix-map=` which alows reproducible build path.
+<br>
-* [FIXME](https://lists.infradead.org/pipermail/openwrt-devel/2019-September/019166.html) Paul Spooren patch for OpenWrt to kernel-defaults: ensure SOURCE_DATE_EPOCH on /init.
+---
-* Vagrant Cascadian updated diffoscope to versions
-[123](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3ec8c0ca942409da6ce06c38f6d8b6ccfc2a943a)
-and
-[125](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3fb581ca9f18fe61e070195f4f8d1a670931b722),
-as well as enabling a more complete test suite
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3eb4adc2c41896c202f3d9131c36160c0a1311e6)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=68620d62f5cd49d6455c351f3a68e3c41dc6ce22)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=6ec872231fdf746bd6e11b97f8a6b3a23498806c)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=af760990e9651be865ccd20b935863d85f605f2e)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=4d83157cd806aeb864664ebb380c19f6be04648c)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=f315673d9e56f4f2398098590ebdc080b63ce8b1)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3244b64f708a5b3161bfada2043718c004f199a4)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=30696ea2b27747e047589527572ef39e60555047)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=ba7bd6c62ddaab4d5623fb149b47579e13a9e5f5)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=bc5aa386675cb39aaf034d73af406c3ddffb4cb0)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=d54ca1cd4d77a945ad07dba34a69c23a3e57b3f1)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=68fea604b06a6d1d461fa856a6379bb49500fb3b)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=37ecf2d905e6afc555150ffe51095415a0d27b89)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=3dd20da0cbdd8b273b5b76b6b8f95aed28c8d0e9)
-[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=9f74bd317f00c55ab1fa30683c1668a19bf17eab)
-in the [GNU Guix](https://guix.gnu.org/) distribution.
+This month's report was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Jelle van der Waa, Mattia Rizzolo and Vagrant Cascadian. It was subsequently reviewed by a bunch of Reproducible Builds folks on IRC and the mailing list.
=====================================
assets/styles/custom.scss
=====================================
@@ -1,5 +1,10 @@
main {
+ hr {
+ clear: both;
+ }
+
h1, h2, h3, h4, h5, h6 {
+ clear: both;
margin-top: 2.5rem;
}
@@ -17,6 +22,13 @@ main {
padding-bottom: 0.5rem;
}
+ .blog-post-content {
+ li > p {
+ margin-top: 0;
+ margin-bottom: 0;
+ }
+ }
+
@media (min-width: 750px) {
img[src$="#left"] {
float: left;
=====================================
bin/generate-draft.template
=====================================
@@ -9,7 +9,9 @@ draft: true
**Welcome to the {{ month_year }} report from the [Reproducible Builds](https://reproducible-builds.org) project!**
{: .lead}
+{% raw %}
[![]({{ "/images/reports/{{ title_year }}-{{ title_month }}/reproducible-builds.png#right" | prepend: site.baseurl }})](https://reproducible-builds.org/)
+{% endraw %}
In these reports we outline the most important things that we have been up over the past month. As a quick recap, whilst anyone can inspect the source code of free software for malicious flaws, almost all software is distributed to end users as pre-compiled binaries.
@@ -44,13 +46,15 @@ If you are interested in contributing to our project, please visit our [*Contrib
### Distribution work
+{% raw %}
[![]({{ "/images/reports/{{ title_year }}-{{ title_month }}/opensuse.png#right" | prepend: site.baseurl }})](https://www.opensuse.org/)
[![]({{ "/images/reports/{{ title_year }}-{{ title_month }}/debian.png#center" | prepend: site.baseurl }})](https://debian.org/)
+{% endraw %}
-In Debian, ...
+In Debian:
-* {{ packages_stats['added'] }} reviews of Debian packages were added, {{ packages_stats['updated'] }} were updated and {{ packages_stats['removed'] }} were removed this month, adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). FIXME issue types have been updated: {% for _, xs in issues_yml.items()|sort %}{% for x in xs %}[{{ x['title'] }}](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/{{ x['sha'] }}), {% endfor %}{% endfor %}
+* {{ packages_stats['added'] }} reviews of Debian packages were added, {{ packages_stats['updated'] }} were updated and {{ packages_stats['removed'] }} were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). FIXME issue types have been updated: {% for _, xs in issues_yml.items()|sort %}{% for x in xs %}[{{ x['title'] }}](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/{{ x['sha'] }}), {% endfor %}{% endfor %}
---
=====================================
images/reports/2019-09/56nRFxA7lPY.jpg
=====================================
Binary files /dev/null and b/images/reports/2019-09/56nRFxA7lPY.jpg differ
=====================================
images/reports/2019-09/archlinux.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/archlinux.png differ
=====================================
images/reports/2019-09/coreboot.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/coreboot.png differ
=====================================
images/reports/2019-09/debian.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/debian.png differ
=====================================
images/reports/2019-09/diffoscope.svg
=====================================
@@ -0,0 +1,110 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ version="1.1"
+ width="128"
+ height="128"
+ id="svg2">
+ <defs
+ id="defs4" />
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ transform="matrix(1.0692573,0,0,1.0692573,-328.34726,-503.5515)"
+ id="layer1">
+ <g
+ id="g5409">
+ <g
+ transform="translate(5.418238,0)"
+ id="g5386">
+ <rect
+ width="90.304001"
+ height="50.999996"
+ x="316.36414"
+ y="472.80621"
+ id="rect4667-3"
+ style="fill:none;stroke:none" />
+ <g
+ id="text4673-8"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 316.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5371"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 348.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5373"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 380.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5375"
+ style="fill:#c00000;fill-opacity:1" />
+ </g>
+ <g
+ id="text5366"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 327.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5378" />
+ <path
+ d="m 359.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5380" />
+ <path
+ d="m 391.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5382" />
+ </g>
+ </g>
+ <use
+ id="use5399"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.8,0,0,0.8,82.417275,133.65028)"
+ id="use5401"
+ style="opacity:0.85"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.6,0,0,0.6,164.83455,260.05454)"
+ id="use5403"
+ style="opacity:0.7"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.4,0,0,0.4,247.25182,379.25208)"
+ id="use5405"
+ style="opacity:0.55"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ </g>
+ </g>
+</svg>
=====================================
images/reports/2019-09/gnu.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/gnu.png differ
=====================================
images/reports/2019-09/opensuse.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/opensuse.png differ
=====================================
images/reports/2019-09/openwrt.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/openwrt.png differ
=====================================
images/reports/2019-09/reproducible-builds.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/reproducible-builds.png differ
=====================================
images/reports/2019-09/seagl.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/seagl.png differ
=====================================
images/reports/2019-09/summit.jpg
=====================================
Binary files /dev/null and b/images/reports/2019-09/summit.jpg differ
=====================================
images/reports/2019-09/testframework.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/testframework.png differ
=====================================
images/reports/2019-09/webmin.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/webmin.png differ
=====================================
images/reports/2019-09/website.png
=====================================
Binary files /dev/null and b/images/reports/2019-09/website.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/compare/c19c1542cef6a9b9e0b28835eed74294799d2a73...313ab390e995461cb2ba99475368f5da8158adfa
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/compare/c19c1542cef6a9b9e0b28835eed74294799d2a73...313ab390e995461cb2ba99475368f5da8158adfa
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20191003/574098b8/attachment.html>
More information about the rb-commits
mailing list