[Git][reproducible-builds/reproducible-presentations][master] dc20 talk, WIP
Holger Levsen
gitlab at salsa.debian.org
Wed Aug 26 16:30:35 UTC 2020
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-presentations
Commits:
c0247f60 by Holger Levsen at 2020-08-26T18:30:21+02:00
dc20 talk, WIP
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
2 changed files:
- 2020-08-27-Reproducing-bullseye-in-practice/index.html
- + 2020-08-27-Reproducing-bullseye-in-practice/todo
Changes:
=====================================
2020-08-27-Reproducing-bullseye-in-practice/index.html
=====================================
@@ -169,7 +169,8 @@
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
- <p>However, it is what is...</p>
+ <p>However, it is what is... sigh.</p>
+ <p class="fragment">Also, please remember: the worldwide pandemic is a small crisis, compared to the climate apocalypsis we are heading into.</p>
<p class="fragment">Anyway.</p>
</section>
@@ -182,28 +183,33 @@
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
- <p>The problem</p>
- <ol>
+ <h3>The problem</h3>
+ <ul>
<li class="fragment">Source code of free software available</li>
<li class="fragment">…most people install pre-compiled binaries</li>
<li class="fragment"><strong>We have no idea whether they correspond.</strong></li>
- </ol>
+ </ul>
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
- <p>I'll mostly ignore <em>why</em> and <em>how to do</em> reproducible builds here. </p>
- <ol>
- <li class="fragment">and focus on a more specific problem, 'Reproducing <em>bullseye</em> in practice', or <em>how to distribute</em> reproducible builds.</li>
- </ol>
+ <p>I'll mostly ignore <em>why</em> and <em>how to do such builds</em> now.</p>
+ <p class="fragment">Instead I will focus on <em>how to distribute and verify</em>.</p>
+ </section>
+
+ <section data-background-color="white">
+ <img src="images/logo.png" width="584">
+ <h3>https://reproducible-builds.org</h3>
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
<h3><em>My goals / wishes</em></h3>
- <p class="fragment">share and widen understanding of the status of reproducible bullseye</p>
- <p class="fragment">(how) can we have buildinfos.debian.<em>org</em> please?</p>
- <p class="fragment">less than 4000 NMUs for <em>arch:all</em> packages, shall we?</p>
- <p class="fragment">get people onboard to fix and improve <em>debrebuild</em> (or rewrite even maybe?)</p>
- <p class="fragment">using reproducible builds and user interfaces are not even on my radar (anymore), but we will need those too.</p>
+ <ul>
+ <li class="fragment">share and widen understanding of the status of reproducible bullseye</li>
+ <li class="fragment">(how) can we have buildinfos.debian.<em>org</em> please?</li>
+ <li class="fragment">less than 4000 NMUs for <em>arch:all</em> packages, shall we?</li>
+ <li class="fragment">get people onboard to fix and improve <em>debrebuild</em> (or rewrite even maybe?)</li>
+ <li class="fragment">using reproducible builds and user interfaces are not even on my radar (anymore), but we will need those too.</li>
+ </ul>
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
@@ -235,16 +241,18 @@
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
<h3><em>My goals / wishes</em></h3>
- <p class="fragment">share and widen understanding of the status of reproducible bullseye</p>
- <p class="fragment">(how) can we have buildinfos.debian.<em>org</em> please?</p>
- <p class="fragment">less than 4000 NMUs for <em>arch:all</em> packages, shall we?</p>
- <p class="fragment">get people onboard to fix and improve <em>debrebuild</em> (or rewrite even maybe?)</p>
- <p class="fragment">using reproducible builds and user interfaces are not even on my radar (anymore), but we will need those too.</p>
+ <ul>
+ <li>share and widen understanding of the status of reproducible bullseye</li>
+ <li>(how) can we have buildinfos.debian.<em>org</em> please?</li>
+ <li>less than 4000 NMUs for <em>arch:all</em> packages, shall we?</li>
+ <li>get people onboard to fix and improve <em>debrebuild</em> (or rewrite even maybe?)</li>
+ <li>using reproducible builds and user interfaces are not even on my radar (anymore), but we will need those too.</li>
+ </ul>
</section>
<section data-background="images/dc20-logo-horizontal-diversity.png" data-background-size="12%" data-background-position="90% 10%">
- <h3><em>CI versus rebuilds</em></h3>
- <p>share and widen understanding of the status of reproducible bullseye</p>
+ <h3>share and widen understanding of the status of reproducible bullseye</h3>
+ <p><em>CI versus rebuilds</em></p>
</section>
<!-- issues in-depth -->
@@ -339,6 +347,8 @@
Thank you
<br><small>… and all the contributors out there!</small>
</h2>
+ <p class="fragment">Do you think reproducible builds should happen?</p>
+ <p class="fragment">If so, please pick <em>one</em> of these bugs and help fixing it.<br />We need your help.</p>
<br>
<h3>
<small>Holger Levsen <holger at debian.org><br>
=====================================
2020-08-27-Reproducing-bullseye-in-practice/todo
=====================================
@@ -0,0 +1,39 @@
+bugs to be filed:
+ tainted builds
+ 2 more devscripts bugs
+
+devscripts debrebuild normal bugs:
+
+ #955049 [n| | ] [devscripts] debrebuild: no manpage and no --help option
+ #955050 [n| | ] [devscripts] debrebuild: please accepted signed .buildinfo files
+ #955307 [n| | ] [devscripts] debrebuild: should avoid downgrades
+ #961862 [n| |♔] [devscripts] debrebuild: should assemble the source for binNMUs
+ #961864 [n| | ] [devscripts] debrebuild: creates wrong commandline for binNMUs
+
+wishlist:
+
+ #955123 [w| | ] [devscripts] debrebuild: please provide --sbuild-output-only option
+#955304 [w| | ] [devscripts] debrebuild: suggested sbuild command should use --no-run-lintian
+#955308 [w| | ] [devscripts] debrebuild: also explain *how* to use snapshot.d.o
+#958750 [w| | ] [devscripts] debrebuild: please add --standalone mode or --one-shot-mode
+#961861 [w| |♙] [devscripts] debrebuild: should (optionally) download the source too
+#964722 [w| | ] [devscripts] debrebuild: please add option for rebuilding in the same path
+
+archlinux
+ rebuildctl -H https://reproducible.archlinux.org pkgs ls --name evince --json
+
+
+mention
+ archlinux
+ src log
+ reintroduction of irc meetings / dudle poll
+
+missing from talk (but probably ok)
+
+#863622: apt: warn when installing packages that are not reproducible
+#802241: dpkg: please store the hash of the installed .deb and allow to query it
+#876055: discuss which environment variables we should blacklist or whitelist, 876055.
+#929397: ftp.d.o: please upload LTS .buildinfo files to ftp-master (this is not relevant yet, as Jessie is the LTS release, while only dpkg from Stretch and newer produces .buildinfo files.)
+
+
+
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/c0247f60107ddbf107d571f0b3813504f0c48896
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/c0247f60107ddbf107d571f0b3813504f0c48896
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20200826/87757db2/attachment.htm>
More information about the rb-commits
mailing list