[Git][reproducible-builds/reproducible-website][master] 2 commits: Add note re. lack of summit in 2020.
Chris Lamb
gitlab at salsa.debian.org
Fri Oct 2 11:05:33 UTC 2020
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
2d56895d by Chris Lamb at 2020-10-02T12:04:56+01:00
Add note re. lack of summit in 2020.
- - - - -
20ee84fd by Chris Lamb at 2020-10-02T12:05:05+01:00
2020-09: Initial draft
- - - - -
16 changed files:
- _reports/2020-09.md
- events.md
- + images/reports/2020-09/archlinux.png
- + images/reports/2020-09/ardc.png
- + images/reports/2020-09/debian.png
- + images/reports/2020-09/diffoscope.svg
- + images/reports/2020-09/intoto.png
- + images/reports/2020-09/isdd2020.png
- + images/reports/2020-09/opensuse.png
- + images/reports/2020-09/openwrt.png
- + images/reports/2020-09/reproducible-builds.png
- + images/reports/2020-09/strip-nondeterminism.png
- + images/reports/2020-09/tails.png
- + images/reports/2020-09/testframework.png
- + images/reports/2020-09/threema.jpg
- + images/reports/2020-09/website.png
Changes:
=====================================
_reports/2020-09.md
=====================================
@@ -6,51 +6,196 @@ title: "Reproducible Builds in September 2020"
draft: true
---
+[![]({{ "/images/reports/2020-09/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
-* [FIXME: Holger sponsored Lukas's upload of in-toto.](https://tracker.debian.org/news/1173455/accepted-in-toto-050-1-source-into-unstable/)
+**Welcome to the September 2020 report from the [Reproducible Builds](https://reproducible-builds.org) project.** The motivation behind the Reproducible Builds effort is to ensure no flaws have been introduced from the original free software source code to the pre-compiled binaries we install on our systems. In our monthly reports, we attempt to summarise the things that we have been up to over the past month, but if you are interested in contributing to the project, [please visit our main website]({{ "/" | relative_url }}).
-* [FIXME: Within the next months, the Threema apps will become fully open source, supporting reproducible builds. This is to say that anyone will be able to independently review Threema’s security and verify that the published source code corresponds to the downloaded app.](https://threema.ch/en/blog/posts/open-source-and-new-partner)
+<br>
+<br>
-* [FIXME: Aurelien Jarno closed deb#969084 (buildd.d.o: please don't use a tainted buildenv)](https://salsa.debian.org/dsa-team/mirror/dsa-puppet/-/commit/abacce72bdc2417961cab2704ef3881f6d15d654)
+[![]({{ "/images/reports/2020-09/ardc.png#right" | relative_url }})]({{ "https://ampr.org/" | relative_url }})
-* [FIXME:deb#970027 policy-rcd-declarative: please provide a package with a deny-all rule](https://bugs.debian.org/970027) - closed by Wouter Verhelst, reported by Mattia Rizzolo.
+This month, the Reproducible Builds project is pleased to announce a donation from [Amateur Radio Digital Communications](https://ampr.org/) (ARDC) in support of its goals. ARDC's contribution will propel the Reproducible Builds project's efforts in ensuring the future health, security and sustainability of our increasingly digital society. [Amateur Radio Digital Communications](https://ampr.org/) (ARDC) is a non-profit which was formed to further research and experimentation with digital communications using radio, with a goal of advancing the state of the art of amateur radio and to educate radio operators in these techniques. You can [view the full announcement]({{ "/news/2020/09/25/ardc-sponsors-the-reproducible-builds-project/" | relative_url }}) as well as more information about ARDC [on their website](https://ampr.org/).
-* FIXME, tests.r-b.o related: Holger made https://tests.reproducible-builds.org/archlinux/ captable with the changes due to https://www.archlinux.org/news/now-using-zstandard-instead-of-xz-for-package-compression/ (sadly we/he didnt learn about this earlier than today.)
+<br>
-* [FIXME: deb#970095 debrebuild, sbuild: unsat-dependency: binutils:amd64 (= 2.35-1) while the package is on snapshot.d.o](https://bugs.debian.org/970095) turned out to be a problem in https://salsa.debian.org/debian/devscripts/-/merge_requests/203 only.
+Last month, we announced that [Jennifer Helsby](https://redshiftzero.github.io/) (*redshiftzero*) launched a new [reproduciblewheels.com](https://reproduciblewheels.com/) website to address the lack of reproducibility of [Python 'wheels'](https://pythonwheels.com/). This month, [Kushal Das](https://kushaldas.in/) posted a brief follow-up to provide an [update on reproducible *sources*](https://kushaldas.in/posts/reproducible-wheels-at-securedrop.html) as well.
-* [FIXME](https://kushaldas.in/posts/reproducible-wheels-at-securedrop.html)
+[![]({{ "/images/reports/2020-09/threema.jpg#right" | relative_url }})](https://threema.ch/en/blog/posts/open-source-and-new-partner)
-* After more than five years of personal domain administration, diffoscope.org and reproducible-builds.org were transferred to Software Freedom Conservancy. Many thanks to Lunar and Holger for holding the domains so long, and to Brett for support with transferring.
+The [Threema](https://threema.ch/) privacy and security-oriented messaging application announced that "within the next months", their apps "will become fully open source, supporting reproducible builds":
-* [qa upload of 870573 to delayed/5](https://bugs.debian.org/870573)
+> This is to say that anyone will be able to independently review Threema’s security and verify that the published source code corresponds to the downloaded app.
-* [qa upload](https://bugs.debian.org/924003)
+You can view [the full announcement](https://threema.ch/en/blog/posts/open-source-and-new-partner) on their website.
-* [FIXME: Bernhard Wiedemann gave a presentation at Internet Security Days organized by eco.de](https://player.vimeo.com/video/451962745#t=429m24s) (live-stream recording)
+## Events
+
+Sadly, due to the unprecedented events in 2020, there will be [no in-person Reproducible Builds event this year](https://lists.reproducible-builds.org/pipermail/rb-general/2020-September/002045.html). However, the Reproducible Builds project intends to resume meeting regularly on IRC, starting on **[Monday, October 12th at 18:00 UTC](https://time.is/compare/1800_12_Oct_2020_in_UTC)** ([full announcement](https://lists.reproducible-builds.org/pipermail/rb-general/2020-September/002049.html)). The cadence of these meetings will probably every two weeks, although this will be discussed and decided on at the first meeting. An [editable agenda is available](https://pad.sfconservancy.org/p/reproducible-builds-meeting-agenda).
+
+[![]({{ "/images/reports/2020-09/isdd2020.png#right" | relative_url }})](https://www.eco.de/events/internet-security-days-2020/isdd-2020-agenda/#best_practises__aus_erfahrungen_lernen)
+
+On 18th September, Bernhard M. Wiedemann gave a presentation in German titled [*Wie reproducible builds Software sicherer machen*](https://www.eco.de/events/internet-security-days-2020/isdd-2020-agenda/#best_practises__aus_erfahrungen_lernen) ("How reproducible builds make software more secure") at the [Internet Security Digital Days 2020](https://www.eco.de/events/internet-security-days-2020/) conference. ([View video](https://player.vimeo.com/video/451962745#t=429m24s).)
+
+On Saturday 10th October, Morten Linderud will give a talk at [Arch Conf Online 2020](https://conf.archlinux.org/) on [*The State of Reproducible Builds*](https://pretalx.com/arch-conf-online-2020/talk/39BGNS/) in the Arch Linux distribution:
+
+> The previous year has seen great progress in Arch Linux to get reproducible builds in the hands of the users and developers. In this talk we will explore the current tooling that allows users to reproduce packages, the rebuilder software that has been written to check packages and the current issues in this space.
+
+During the [Reproducible Builds summit in Marrakesh]({{ "/events/Marrakesh2019/" | relative_url }}), [GNU Guix](https://guix.gnu.org), [NixOS](https://nixos.org) and [Debian](https://debian.org) were able to produce a bit-for-bit identical binary when building [GNU Mes](https://www.gnu.org/software/mes/), despite using three different major versions of GCC. Since the summit, additional work resulted in a bit-for-bit identical Mes binary using `tcc` and this month, [a fuller update was posted]({{ "/news/2019/12/21/reproducible-bootstrap-of-mes-c-compiler/" | relative_url }}) by the individuals involved.
+
+<br>
+
+## Development work
+
+#### [Debian](https://debian.org/)
+
+[![]({{ "/images/reports/2020-09/debian.png#right" | relative_url }})](https://debian.org/)
+
+Chris Lamb uploaded a number of Debian packages to address reproducibility issues that he had previously provided patches for, including [`cfingerd`](https://tracker.debian.org/pkg/cfingerd) ([#831021](https://bugs.debian.org/831021)), [`grap`](https://tracker.debian.org/pkg/grap) ([#870573](https://bugs.debian.org/870573)), [`splint`](https://tracker.debian.org/pkg/splint) ([#924003](https://bugs.debian.org/924003)) & [`schroot`](https://tracker.debian.org/pkg/schroot) ([#902804](https://bugs.debian.org/902804))
+
+Last month, an issue was identified where a large number of Debian `.buildinfo` build certificates had been 'tainted' on the official Debian build servers, as [these environments had files underneath the `/usr/local/sbin` directory](https://bugs.debian.org/969084) to prevent the execution of system services during package builds. However, this month, Aurelien Jarno and Wouter Verhelst fixed this issue in varying ways, resulting in a special `policy-rcd-declarative-deny-all` package.
+
+Building on Chris Lamb's [previous work on reproducible builds for Debian .ISO images](https://lists.reproducible-builds.org/pipermail/rb-general/2020-August/002018.html), Roland Clobus announced his work in progress on making the [Debian Live](https://wiki.debian.org/DebianLive/) images reproducible. [[...](https://lists.reproducible-builds.org/pipermail/rb-general/2020-September/002044.html)]
+
+79 reviews of Debian packages were added, 23 were updated and 17 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). Chris Lamb added and categorised a number of new issue types, including packages that [captures their build path via `quicktest.h`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/18a02c14) and [absolute build directories in documentation generated by Doxygen`](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/2354fa49), etc.
+
+[![]({{ "/images/reports/2020-09/intoto.png#right" | relative_url }})](https://in-toto.io/)
+
+Lastly, Lukas Puehringer's uploaded a new version of the [*in-toto*](https://in-toto.io/) to Debian which sponsored by Holger Levsen. [[...](https://tracker.debian.org/news/1173455/accepted-in-toto-050-1-source-into-unstable/)]
+
+### [diffoscope](https://diffoscope.org)
+
+[![]({{ "/images/reports/2020-09/diffoscope.svg#right" | relative_url }})](https://diffoscope.org)
+
+[*diffoscope*](https://diffoscope.org) is our in-depth and content-aware diff utility that can not only locate and diagnose reproducibility issues, it provides human-readable diffs of all kinds too.
+
+In September, Chris Lamb made the following changes to [diffoscope](https://diffoscope.org), including preparing and uploading versions `159` and `160` to Debian:
+
+* New features:
+
+ * Show "ordering differences" only in `strings(1)` output by applying the ordering check to all differences across the codebase. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/issues/216)]
+
+* Bug fixes:
+
+ * Mark some PGP tests that they require `pgpdump`, and check that the associated binary is actually installed before attempting to run it. ([#969753](https://bugs.debian.org/969753))
+ * Don't raise exceptions when cleaning up after `guestfs` cleanup failure. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/aca4221)]
+ * Ensure we check `FALLBACK_FILE_EXTENSION_SUFFIX`, otherwise we run `pgpdump` against all files that are recognised by `file(1)` as `data`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/bab3e0e)]
+
+* Codebase improvements:
+
+ * Add some documentation for the `EXTERNAL_TOOLS` dictionary. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/c6a438a)]
+ * Abstract out a variable we use a couple of times. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/6bb06d2)]
+
+* [diffoscope.org](https://diffoscope.org) website improvements:
+
+ * Make the (long) demonstration GIF less prominent on the page. [[...](https://salsa.debian.org/reproducible-builds/diffoscope-website/commit/aae926e)]
+
+In addition, Paul Spooren added support for automatically deploying Docker images. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/53d1aad)]
+
+### [Website / documentation](https://reproducible-builds.org/)
+
+[![]({{ "/images/reports/2020-09/website.png#right" | relative_url }})]({{ "/" | relative_url }})
+
+This month, Chris Lamb made a large number of updates to the [main Reproducible Builds website]({{ "/" | relative_url }}) and related documentation:
+
+* Update a few titles and the ordering of some top-level navigation elements. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/9423f45)]
+* Drafted, published and publicised [August's monthly report]({{ "/reports/2020-08/" | relative_url }}).
+* Improve the documentation on how to signup to [Salsa](https://salsa.debian.org/). [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b4da392)]
+* Add some more links to academic papers. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/1b60222)]
+* Also include the general news in our RSS feed [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/62370fc)] and drop including weekly reports from the RSS feed (they are never shown now that we have over 10 items) [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/18211d6)].
+* Update ordering and location of various news and links to tarballs, etc. [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/131a83d)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4aa0407)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/5998e6f)]
+* Kept [isdebianreproducibleyet.com](https://isdebianreproducibleyet.com) up to date. [[...](https://github.com/lamby/isdebianreproducibleyet.com/commits?author=lamby&since=2020-09-01T00:00:00Z&until=2020-10-01T00:00:00Z)]
+* Worked with [Amateur Radio Digital Communications](https://ampr.org/) in order to announce their [generous sponsorship of the Reproducible Builds project]({{ "/news/2020/09/25/ardc-sponsors-the-reproducible-builds-project/" | relative_url }}).
+
+In addition, Holger Levsen re-added the [documentation]({{ "/docs/" | relative_url }}) link to the top-level navigation [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/83e2a60)] and documented that the `jekyll-polyglot` package is needed to build the site [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/b8c3b09)]. Lastly, `diffoscope.org` and `reproducible-builds.org` were transferred to [Software Freedom Conservancy](https://sfconservancy.org/). Many thanks to Brett Smith from Conservancy and Jérémy Bobbio (*lunar*) for their help with transferring.
+
+#### Upstream patches
+
+The Reproducible Builds project detects, dissects and attempts to fix as many currently-unreproducible packages as possible. We endeavour to send all of our patches upstream where appropriate. This month, we wrote a large number of these patches, including:
* Bernhard M. Wiedemann:
- * [`python-pyzmq`](https://bugzilla.opensuse.org/show_bug.cgi?id=1176232) (report stuck test / FTBFS-j1)
+
+ * [`cfn-python-lint`](https://github.com/aws-cloudformation/cfn-python-lint/issues/1705) (build failure)
+ * [`clutter`](https://build.opensuse.org/request/show/835467) (avoid a random ID in HTML from `xsltproc`)
+ * [`kubernetes`](https://github.com/kubernetes/kubernetes/issues/94628) (1-bit order in manual page)
+ * [`libmysofa`](https://github.com/hoene/libmysofa/pull/139) (disable `-fprofile-arcs` and code coverage)
* [`libqb`](https://github.com/ClusterLabs/libqb/issues/414) (date / copyright)
- * [`libmysofa`](https://github.com/hoene/libmysofa/pull/139) (disable -fprofile-arcs / code-coverage)
- * [`kubernetes`](https://github.com/kubernetes/kubernetes/issues/94628) (1-bit order in man page)
- * [`git2-rs`](https://github.com/rust-lang/git2-rs/issues/618) (report filesys order issue, toolchain - fixed by kpcyrd)
- * [`pyftpdlib`](https://github.com/giampaolo/pyftpdlib/issues/540) (report FTBFS-j1)
- * [`cfn-python-lint`](https://github.com/aws-cloudformation/cfn-python-lint/issues/1705) (FTBFS-2020-12-31)
- * [`python-sidpy`](https://github.com/pycroscopy/sidpy/issues/59) (report FTBFS-j1)
- * [`python-nbclient`](https://github.com/jupyter/nbclient/issues/114) (report FTBFS-j1)
- * [`clutter`](https://build.opensuse.org/request/show/835467) (avoid random ID in html from xsltproc)
- * [`libsemigroups`](https://build.opensuse.org/request/show/836070) (CPU-detection)
-
-* [FIXME:reproducible builds summit 2020 canceled]
-
-* [FIXME, upcoming event in October - The State of Reproducible Builds of Arch Linux](https://pretalx.com/arch-conf-online-2020/talk/39BGNS/)
-
-* [FIXME: finally published](https://reproducible-builds.org/news/2019/12/21/reproducible-bootstrap-of-mes-c-compiler/)
-
-* FIXME:regular IRC meetings will be resumed: the first on
- Monday, the 12th of October
- at 18:00 UTC
- on #reproducible-builds on irc.ofct.net
- the agenda is at https://pad.sfconservancy.org/p/reproducible-builds-meeting-agenda
- probably every two weeks, to be decided on the first meeting
+ * [`libsemigroups`](https://build.opensuse.org/request/show/836070) (CPU detection)
+
+* Chris Lamb:
+
+ * [#970024](https://bugs.debian.org/970024) filed against [`cif2cell`](https://tracker.debian.org/pkg/cif2cell).
+ * [#970278](https://bugs.debian.org/970278) filed against [`smartlist`](https://tracker.debian.org/pkg/smartlist).
+ * [#970383](https://bugs.debian.org/970383) filed against [`evince`](https://tracker.debian.org/pkg/evince).
+ * [#970498](https://bugs.debian.org/970498) filed against [`libiio`](https://tracker.debian.org/pkg/libiio).
+ * [#970851](https://bugs.debian.org/970851) filed against [`check-pgbackrest`](https://tracker.debian.org/pkg/check-pgbackrest).
+ * [#970908](https://bugs.debian.org/970908) filed against [`smartdns`](https://tracker.debian.org/pkg/smartdns).
+ * [#971420](https://bugs.debian.org/971420) filed against [`jhbuild`](https://tracker.debian.org/pkg/jhbuild).
+
+* Vagrant Cascadian:
+
+ * [#970874](https://bugs.debian.org/970874) filed against [`nix`](https://tracker.debian.org/pkg/nix).
+ * [#970888](https://bugs.debian.org/970888) & [#970890](https://bugs.debian.org/970890) filed against [`fai`](https://tracker.debian.org/pkg/fai).
+ * [#970893](https://bugs.debian.org/970893) filed against [`debdelta`](https://tracker.debian.org/pkg/debdelta).
+ * [#971400](https://bugs.debian.org/971400) & [#971402](https://bugs.debian.org/971402) filed against [`vboot-utils`](https://tracker.debian.org/pkg/vboot-utils).
+ * [#971408](https://bugs.debian.org/971408) filed against [`simde`](https://tracker.debian.org/pkg/simde).
+
+Bernhard M. Wiedemann also reported issues in [`git2-rs`](https://github.com/rust-lang/git2-rs/issues/618), [`pyftpdlib`](https://github.com/giampaolo/pyftpdlib/issues/540), [`python-nbclient`](https://github.com/jupyter/nbclient/issues/114), [`python-pyzmq`](https://bugzilla.opensuse.org/show_bug.cgi?id=1176232) & [`python-sidpy`](https://github.com/pycroscopy/sidpy/issues/59).
+
+## Testing framework
+
+[![]({{ "/images/reports/2020-09/testframework.png#right" | relative_url }})](https://tests.reproducible-builds.org/)
+
+The Reproducible Builds project operates a [Jenkins](https://jenkins.io/)-based testing framework to power [`tests.reproducible-builds.org`](https://tests.reproducible-builds.org). This month, Holger Levsen made the following changes:
+
+* [Debian](https://debian.org/):
+
+ * Shorten the subject of "nodes have gone offline" notification emails. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2f6a1242)]
+ * Also track bugs that have been [usertagged](https://wiki.debian.org/bugs.debian.org/usertags) with `usrmerge`. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/79ac64a9)]
+ * Drop abort-related codepaths as that functionality has been removed from [Jenkins](https://jenkins.io/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/f5c1d675)]
+ * Update the frequency we updatre base images and status pages. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/cf2497e7)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5461a909)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/9c21f055)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/6b2aca38)]
+
+* [Status summary view page](ttps://tests.reproducible-builds.org/trbo.status.html):
+
+ * Add support for monitoring `systemctl` status [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/6fb89cbc)] and the number of [diffoscope](https://diffoscope.org/) processes [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a10c53c9)].
+ * Show the total number of nodes [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/06aefcc6)] and colourise critical disk space situations [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/07297a9a)].
+ * Improve the visuals with respect to vertical space. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/4d7943c4)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a1e43681)]
+
+* Debian rebuilder prototype:
+
+ * Resume building random packages again [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/e9a98ffa)] and update the frequency that packages are rebuilt. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/02487ea2)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/84c959c3)]
+ * Use `--no-respect-build-path` parameter until `sbuild` 0.81 is available. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/62e8b2ac)]
+ * Treat the inability to locate some packages as a `debrebuild` problem, and not as a issue with the rebuilder itself. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/cb788349)]
+
+* Arch Linux: [![]({{ "/images/reports/2020-09/archlinux.png#right" | relative_url }})](https://www.archlinux.org/)
+
+ * Update various components to be compatible with Arch Linux's [move to the `xz` compression format](https://www.archlinux.org/news/now-using-zstandard-instead-of-xz-for-package-compression/). [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ccf1cb17)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ae55baaa)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/196f2f4b)]
+ * Allow scheduling of old packages to catch up on the backlog. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/969d2b55)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/c6013e6a)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2ca91549)]
+ * Improve formatting on the summary page. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/4f8765db)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/0f5f4aef)]
+ * Update HTML pages once every hour, not every 30 minutes. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a55b0d2a)]
+ * Use the [Ubuntu (!) GPG keyserver](https://keyserver.ubuntu.com/) to validate packages. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/9a02d319)]
+
+* System health checks:
+
+ * Highlight important bad conditions in colour. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/d099a852)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ef5ef2fe)]
+ * Add support for detecting more problems, including Jenkins shutdown issues [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2ba109af)], failure to upgrade Arch Linux packages [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/38ba6311)], kernels with wrong permissions [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/585ecee1)], etc.
+
+* Misc:
+
+ * Delete old `schroot` sessions after 2 days, not 3. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/942da423)]
+ * Use [sudo](https://www.sudo.ws/) to cleanup [*diffoscope*](https://diffoscope.org) `schroot` sessions. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/d0a30cf1)]
+
+In addition, *stefan0xC* fixed a query for unknown results in the handling of Arch Linux packages [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/6fcde1d8)] and Mattia Rizzolo updated the template that notifies maintainers by email of their newly-unreproducible packages to ensure that it did not get caught in junk/spam folders [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/5b07571c)]. Finally, build node maintenance was performed by Holger Levsen [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/910e526c)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2ef5b44c)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/eb28c92d)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/e2e968fe)], Mattia Rizzolo [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ccbdc814)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/0c6c256d)] and Vagrant Cascadian [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/7e1fdbfd)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/0da623cf)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/542f1f80)].
+
+<br>
+<br>
+
+If you are interested in contributing to the Reproducible Builds project, please visit our [*Contribute*](https://reproducible-builds.org/contribute/) page on our website. However, you can get in touch with us via:
+
+ * IRC: `#reproducible-builds` on `irc.oftc.net`.
+
+ * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
+
+ * Mastodon: [@reproducible_builds at fosstodon.org](https://fosstodon.org/@reproducible_builds)
+
+ * Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
=====================================
events.md
=====================================
@@ -10,6 +10,7 @@ order: 60
Events are organized to exchange ideas about reproducible builds, get
a better understanding or cooperate on improving code or specifications.
+**Unfortunately, due to the unprecedented events in 2020, there will be no in-person event this year.**
{% assign sorted_events = site.events | sort: 'event_date' | reverse %}
{% for page in sorted_events %}
=====================================
images/reports/2020-09/archlinux.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/archlinux.png differ
=====================================
images/reports/2020-09/ardc.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/ardc.png differ
=====================================
images/reports/2020-09/debian.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/debian.png differ
=====================================
images/reports/2020-09/diffoscope.svg
=====================================
@@ -0,0 +1,110 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ version="1.1"
+ width="128"
+ height="128"
+ id="svg2">
+ <defs
+ id="defs4" />
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ transform="matrix(1.0692573,0,0,1.0692573,-328.34726,-503.5515)"
+ id="layer1">
+ <g
+ id="g5409">
+ <g
+ transform="translate(5.418238,0)"
+ id="g5386">
+ <rect
+ width="90.304001"
+ height="50.999996"
+ x="316.36414"
+ y="472.80621"
+ id="rect4667-3"
+ style="fill:none;stroke:none" />
+ <g
+ id="text4673-8"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 316.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5371"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 348.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5373"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 380.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5375"
+ style="fill:#c00000;fill-opacity:1" />
+ </g>
+ <g
+ id="text5366"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 327.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5378" />
+ <path
+ d="m 359.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5380" />
+ <path
+ d="m 391.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5382" />
+ </g>
+ </g>
+ <use
+ id="use5399"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.8,0,0,0.8,82.417275,133.65028)"
+ id="use5401"
+ style="opacity:0.85"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.6,0,0,0.6,164.83455,260.05454)"
+ id="use5403"
+ style="opacity:0.7"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.4,0,0,0.4,247.25182,379.25208)"
+ id="use5405"
+ style="opacity:0.55"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ </g>
+ </g>
+</svg>
=====================================
images/reports/2020-09/intoto.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/intoto.png differ
=====================================
images/reports/2020-09/isdd2020.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/isdd2020.png differ
=====================================
images/reports/2020-09/opensuse.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/opensuse.png differ
=====================================
images/reports/2020-09/openwrt.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/openwrt.png differ
=====================================
images/reports/2020-09/reproducible-builds.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/reproducible-builds.png differ
=====================================
images/reports/2020-09/strip-nondeterminism.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/strip-nondeterminism.png differ
=====================================
images/reports/2020-09/tails.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/tails.png differ
=====================================
images/reports/2020-09/testframework.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/testframework.png differ
=====================================
images/reports/2020-09/threema.jpg
=====================================
Binary files /dev/null and b/images/reports/2020-09/threema.jpg differ
=====================================
images/reports/2020-09/website.png
=====================================
Binary files /dev/null and b/images/reports/2020-09/website.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/8454f2c2816ecf21bb1a5b1ac7a2c9552f59cb18...20ee84fd9c21fc0874379ec0c2d5ec54c082da17
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/8454f2c2816ecf21bb1a5b1ac7a2c9552f59cb18...20ee84fd9c21fc0874379ec0c2d5ec54c082da17
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20201002/fdf8582b/attachment.htm>
More information about the rb-commits
mailing list