[Git][reproducible-builds/reproducible-website][master] 2020 11: += add work by kpcyrd

[kpcyrd]

kpcyrd pushed to branch master at Reproducible Builds / reproducible-website


Commits:
c2744261 by kpcyrd at 2020-11-22T20:07:48+01:00
2020 11: += add work by kpcyrd

- - - - -


1 changed file:

- _reports/2020-11.md


Changes:

=====================================
_reports/2020-11.md
=====================================
@@ -8,8 +8,6 @@ draft: true
 
 * [forwarded 973595](https://github.com/emscripten-core/emscripten/pull/12679)
 
-* [kpcyrd announced rebuilderd 0.5.0](https://lists.reproducible-builds.org/pipermail/rb-general/2020-November/002066.html) and stated "rebuilderd is the software powering https://reproducible.archlinux.org/ and other Arch Linux rebuilders. This setup has successfully bit-for-bit verified 81.4% of the packages we ship to users, and 95.3% of our core repo."
-
 * FIXME: Vagrant filed #974087: dpkg: dpkg-buildflags: Enable reproducible=+fixfilepath by default
 
 * FIXME: the announcement of the Precursor RISC-V SoC mentions the builds are entirely reproducible: https://www.bunniestudios.com/blog/?p=5971
@@ -20,6 +18,19 @@ draft: true
 
 * FIXME: Opened #975261 in diffoscope 161 by Ximin Luo: [diffoscope: install footprint is 2.6GB, please move some recommends to suggests](https://bugs.debian.org/975261)
 
+## rebuilderd
+
+The [rebuilderd project](https://github.com/kpcyrd/rebuilderd) has released [v0.5.0](https://lists.reproducible-builds.org/pipermail/rb-general/2020-November/002066.html), v0.6.0 and v0.7.0 featuring:
+
+- A new diffoscope integration to generate a diff between the package distributed to users and the package built by the rebuilder.
+- Build logs are now captured and can be downloaded through the api.
+- Failed rebuilds are automatically retried every once in a while.
+- Build queue priorities to prioritize new package uploads over retries.
+
+Rebuilderd is the software powering https://reproducible.archlinux.org/ and other Arch Linux rebuilders since April 2020. Arch Linux has used this setup to successfully bit-for-bit verify around 80% of the packages they ship to users today and 95% of the core repo.
+
+We'd like to thank [@repi](https://github.com/repi) for sponsoring rebuilderd development through [github sponsors](https://github.com/sponsors/kpcyrd).
+
 ## Software development
 
 This month, we tried to fix a large number of currently-unreproducible packages, including:
@@ -28,6 +39,10 @@ This month, we tried to fix a large number of currently-unreproducible packages,
 
     * [`dbus`](https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/189) docbook missing `generate.consistent.ids`
 
+* kpcyrd:
+
+    * [signal-desktop](https://github.com/snyk/snyk/pull/1537) rebuilderd infrastructure has identified embedded build timestamps that coud be traced back to snyk.
+    * [plasma-framework](https://invent.kde.org/frameworks/plasma-framework/-/merge_requests/139) rebuilderd infrastructure has identified embedded build timestamps in gzip metadata.
 
 ## tests.r-b.o/debian
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/c27442617fd0565602bba8312a34545bdac34a33

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/c27442617fd0565602bba8312a34545bdac34a33
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20201122/fcd4abf4/attachment.htm>