[Git][reproducible-builds/reproducible-website][master] 2020-04: -4 typos
Bernhard M. Wiedemann
gitlab at salsa.debian.org
Tue May 5 09:05:52 UTC 2020
Bernhard M. Wiedemann pushed to branch master at Reproducible Builds / reproducible-website
Commits:
eeb9be0d by Bernhard M. Wiedemann at 2020-05-05T11:05:38+02:00
2020-04: -4 typos
- - - - -
1 changed file:
- _reports/2020-04.md
Changes:
=====================================
_reports/2020-04.md
=====================================
@@ -23,13 +23,13 @@ There was a post on [Chaos Computer Club](https://www.ccc.de/en/)'s website list
> **4. Transparency and verifiability:** The complete source code for the app and infrastructure must be freely available without access restrictions to allow audits by all interested parties. Reproducible build techniques must be used to ensure that users can verify that the app they download has been built from the audited source code.
-Elsewhere, nicolas Boulenguez [wrote a patch](https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87972) for the [Ada programming language](https://en.wikipedia.org/wiki/Ada_(programming_language)) component of the [GCC compiler](https://gcc.gnu.org/) to skip `-f.*-prefix-map` options when writing [Ada Library Information](https://gcc.gnu.org/onlinedocs/gcc-9.3.0/gnat_ugn/The-Ada-Library-Information-Files.html) files. Amongst other properties, these `.ali` files embed the compiler flags used at the time of the build which results in the absolute build path being recorded via [`-ffile-prefix-map`](https://gcc.gnu.org/onlinedocs/gcc/Overall-Options.html#index-ffile-prefix-map), `-fdebug-prefix-map`, etc.
+Elsewhere, Nicolas Boulenguez [wrote a patch](https://gcc.gnu.org/bugzilla/show_bug.cgi?id=87972) for the [Ada programming language](https://en.wikipedia.org/wiki/Ada_(programming_language)) component of the [GCC compiler](https://gcc.gnu.org/) to skip `-f.*-prefix-map` options when writing [Ada Library Information](https://gcc.gnu.org/onlinedocs/gcc-9.3.0/gnat_ugn/The-Ada-Library-Information-Files.html) files. Amongst other properties, these `.ali` files embed the compiler flags used at the time of the build which results in the absolute build path being recorded via [`-ffile-prefix-map`](https://gcc.gnu.org/onlinedocs/gcc/Overall-Options.html#index-ffile-prefix-map), `-fdebug-prefix-map`, etc.
[![]({{ "/images/reports/2020-04/archlinux.png#right" | prepend: site.baseurl }})](https://archlinux.org)
In the [Arch Linux](https://archlinux.org/) project, *kpcyrd* reported that [they held their first "rebuilder workshop"](https://lists.reproducible-builds.org/pipermail/rb-general/2020-April/001892.html). The session was held on IRC and participants were provided document with instructions on how to install and use Arch's [`repro`](https://github.com/archlinux/archlinux-repro/) tool. The meeting resulted in multiple people with no prior experience of Reproducible Builds validate their first package. Later in the month *kpcyrd* also announced that it was [now possible to run independent rebuilders](https://lists.reproducible-builds.org/pipermail/rb-general/2020-April/001905.html) in Arch, a "hands-off, everything just works™" solution to distributed package verification.
-Bernhard M. Wiedemann set up a new [`ismypackagereproducibleyet.com`](https://ismypackagereproducibleyet.org/) service that takes a package name as input and concisely displays whether the package is reproducible in a number of distributions. For example, it can quickly [show the status of Perl](https://ismypackagereproducibleyet.org/?pkg=perl) as being reproducible on [OpenSuse](https://www.opensuse.org/) but not in [Debian](https://debian.org/). In addition, Bernhard improved the documentation of his deliberately ["unreproducible package"](https://github.com/bmwiedemann/theunreproduciblepackage) to add some example patches for hash issues. [[...](https://github.com/bmwiedemann/theunreproduciblepackage/commit/53d4263b461b7b7f1239e34536eaf77e5c61b174)].
+Bernhard M. Wiedemann set up a new [`ismypackagereproducibleyet.org`](https://ismypackagereproducibleyet.org/) service that takes a package name as input and concisely displays whether the package is reproducible in a number of distributions. For example, it can quickly [show the status of Perl](https://ismypackagereproducibleyet.org/?pkg=perl) as being reproducible on [openSUSE](https://www.opensuse.org/) but not in [Debian](https://debian.org/). In addition, Bernhard improved the documentation of his deliberately ["unreproducible package"](https://github.com/bmwiedemann/theunreproduciblepackage) to add some example patches for hash issues. [[...](https://github.com/bmwiedemann/theunreproduciblepackage/commit/53d4263b461b7b7f1239e34536eaf77e5c61b174)].
[Mathias Lang](https://twitter.com/Geod241) submitted a pull request against the canonical compiler for the ['D' programming language](https://dlang.org/), [`dmd`](https://dlang.org/dmd-linux.html) to add support for our [`SOURCE_DATE_EPOCH`](https://reproducible-builds.org/specs/source-date-epoch/) environment variable as well the other C preprocessor tokens such `__DATE__`, `__TIME__` and `__TIMESTAMP__` which was subsequently merged. `SOURCE_DATE_EPOCH` defines a distribution-agnostic standard for build toolchains to consume and emit timestamps in situations where they are deemed to be necessary. [[...](https://github.com/dlang/dmd/pull/11035)]
@@ -105,7 +105,7 @@ Chris Lamb made the following changes to [diffoscope](https://diffoscope.org), t
Michael Osipov created a well-researched merge request to return *diffoscope* to using `zipinfo` directly instead of piping input via `/dev/stdin` in order to ensure portability to the [BSD operating system](https://en.wikipedia.org/wiki/Berkeley_Software_Distribution). [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/125b140)]
-In addition, [Ben Hutchings](https://www.decadent.org.uk/ben/) documented how `--exclude` arguments are matched against filenames [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/137111b)] and Jelle van der Waa updated the [LLVM](https://llvm.org/) test fixture difference for LLVM vesion 10 [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/c645b97)] as well as adding an reference to the name of the `h5dump` tool in [Arch Linux](https://archlinux.org/) [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/86bbbec)].
+In addition, [Ben Hutchings](https://www.decadent.org.uk/ben/) documented how `--exclude` arguments are matched against filenames [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/137111b)] and Jelle van der Waa updated the [LLVM](https://llvm.org/) test fixture difference for LLVM version 10 [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/c645b97)] as well as adding a reference to the name of the `h5dump` tool in [Arch Linux](https://archlinux.org/) [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/86bbbec)].
After the above several releases, Mattia Rizzolo also uploaded them to the [https://backports.debian.org/](backports) suite of Debian for easy access to stable users.
@@ -235,7 +235,7 @@ We operate a large and many-featured [Jenkins](https://jenkins.io/)-based testin
* Outline next steps for the development of the tool. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/9c148545)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/cac53f4b)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/bc4dd1d9)]
* Various refactoring and code improvements. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/343c9883)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ab3de238)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f4733b9f)]
-Lastly, Mattia Rizzolo fixed some log parsing code regarding potentially-harmless warnings from package installation [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/df904c04)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5201fb86)] and rhe usual build node maintenance was performed by Holger Levsen [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/4b51e82d)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/fcd3fcfb)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/531448ab)] and Mattia Rizzolo [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/72bb2afd)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ee643fbb)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/16720116)].
+Lastly, Mattia Rizzolo fixed some log parsing code regarding potentially-harmless warnings from package installation [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/df904c04)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5201fb86)] and the usual build node maintenance was performed by Holger Levsen [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/4b51e82d)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/fcd3fcfb)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/531448ab)] and Mattia Rizzolo [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/72bb2afd)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ee643fbb)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/16720116)].
---
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/eeb9be0dc74a7b8f525ce1b086eaf700ed952386
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/eeb9be0dc74a7b8f525ce1b086eaf700ed952386
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20200505/751d7d1d/attachment.htm>
More information about the rb-commits
mailing list