[Git][reproducible-builds/reproducible-website][master] 3 commits: 2021-02: Duplicate image for each report.
Chris Lamb
gitlab at salsa.debian.org
Fri Mar 5 14:57:51 UTC 2021
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
6575809d by Chris Lamb at 2021-03-05T14:49:27+00:00
2021-02: Duplicate image for each report.
- - - - -
9b3e35c6 by Chris Lamb at 2021-03-05T14:57:31+00:00
2021-02: Misc changes prior to publication.
- - - - -
c1fa1b03 by Chris Lamb at 2021-03-05T14:57:42+00:00
published as https://reproducible-builds.org/reports/2021-02/
- - - - -
4 changed files:
- _reports/2021-02.md
- images/reports/2021-02/nixos.png
- images/reports/2021-02/qubes.png
- + images/reports/2021-02/yoctoproject.png
Changes:
=====================================
_reports/2021-02.md
=====================================
@@ -3,14 +3,17 @@ layout: report
year: "2021"
month: "02"
title: "Reproducible Builds in February 2021"
-draft: true
+draft: false
+date: 2021-03-05 14:57:42
---
[![]({{ "/images/reports/2021-02/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
**Welcome to the report from the [Reproducible Builds](https://reproducible-builds.org) project for February 2021.** In our monthly reports, we try to outline the most important things that have happened in the world of reproducible builds. If you are interested in contributing to the project, though, please visit our [*Contribute*]({{ "/contribute/" | relative_url }}) page on [our website]({{ "/" | relative_url }}).
----
+<br>
+
+## Community news
[![]({{ "/images/reports/2021-02/gnu-mes-talk.png#right" | relative_url }})](https://fosdem.org/2021/schedule/event/gnumes/)
@@ -36,7 +39,7 @@ Another blog post this month was written by [Alex Birsan](https://twitter.com/al
[![]({{ "/images/reports/2021-02/intoto.png#right" | relative_url }})](https://in-toto.io/)
-Closer to home, Justin Cappos informatively replied to an email on our mailing list answering the question [*How we could accelerate deployment of verified reproducible builds?*](https://lists.reproducible-builds.org/pipermail/rb-general/2021-February/002183.html), describing some of the workings of [`in-toto`](https://in-toto.io/) with regards to the potentially distributed validation of binary signatures. [[...](https://lists.reproducible-builds.org/pipermail/rb-general/2021-February/002183.html)]
+Closer to home, Justin Cappos replied to an email on our mailing list answering the question [*How we could accelerate deployment of verified reproducible builds?*](https://lists.reproducible-builds.org/pipermail/rb-general/2021-February/002183.html), describing some of the workings of [`in-toto`](https://in-toto.io/) with regards to the potentially distributed validation of binary signatures. [[...](https://lists.reproducible-builds.org/pipermail/rb-general/2021-February/002183.html)]
<br>
@@ -102,11 +105,11 @@ Holger Levsen suggested the creation of a partial mirror of [*snapshot.debian.or
### Other distributions
-[![]({{ "/images/reports/2020-11/yoctoproject.png#right" | relative_url }})](https://www.yoctoproject.org/)
+[![]({{ "/images/reports/2021-02/yoctoproject.png#right" | relative_url }})](https://www.yoctoproject.org/)
-The [Yocto Project](https://www.yoctoproject.org/) has continued working on improving reproducibility. They now have a [live webpage](https://www.yoctoproject.org/reproducible-build-results/) which shows reproducibility statistics directly from their CI system and have added this to the Reproducible Builds [Continuous tests page](https://reproducible-builds.org/citests/). Where the CI system detects differences in the output, it automatically generates HTML diffoscope reports and shares these to help developers understand the cause of issues and help fix them.
+The [Yocto Project](https://www.yoctoproject.org/) has continued working on improving reproducibility. They now have a [live webpage](https://www.yoctoproject.org/reproducible-build-results/) which shows reproducibility statistics directly from their CI system and have added this to the Reproducible Builds [Continuous tests page](https://reproducible-builds.org/citests/). When the CI system detects differences in the output, it automatically generates [*diffoscope*](https://diffoscope.org) reports and shares these in order to help developers understand the cause of issues and help fix them.
-As well as the previously reported deb and ipk output, rpm output is also now being tested as well. For OpenEmbedded-Core, 34335 out of 34392 packages are now reproducible. The differences are limited to code using the Go Language which isn't reproducible at present, perf and three other packages which have minor issues.
+As well as the previously reported `.deb` and `.ipk` output, `.rpm` output is also now being tested in Yocto as well, and for `OpenEmbedded-Core`, 34,335 out of 34,392 packages are now reproducible. The differences are limited to code using the [Go](https://golang.org/) programming language (which isn't reproducible at present), `perf` and three other packages which are exhibiting minor issues.
[![]({{ "/images/reports/2021-02/opensuse.png#right" | relative_url }})](https://www.opensuse.org/)
@@ -122,7 +125,7 @@ In [Fedora](https://fedoraproject.org/), Frédéric Pierret [restarted a discuss
[![]({{ "/images/reports/2021-02/nixos.png#right" | relative_url }})](https://nixos.org/)
-In [NixOS](https://nixos.org), Tom Berek made the date in [asciidoc manpages](https://github.com/NixOS/nixpkgs/pull/111572/files) deterministic and Arnout Engelen made sure [squashfs images are reproducible](https://github.com/NixOS/nixpkgs/pull/114454) regardless of the presence of hard links. Remaining for the milestone of a reproducible minimal installation ISO are open PR's for [gcc](https://github.com/NixOS/nixpkgs/pull/112928) and [python](https://github.com/NixOS/nixpkgs/pull/107965).
+In [NixOS](https://nixos.org), Tom Berek made the [date in the asciidoc manpages](https://github.com/NixOS/nixpkgs/pull/111572/files) deterministic and Arnout Engelen made sure that [squashfs images are reproducible](https://github.com/NixOS/nixpkgs/pull/114454), regardless of the presence of hard links. For the milestone of a fully-reproducible minimal installation ISO include open PRs for [`gcc`](https://github.com/NixOS/nixpkgs/pull/112928) and [`python`](https://github.com/NixOS/nixpkgs/pull/107965).
### Upstream patches
@@ -207,7 +210,6 @@ In a thread on [our mailing list](https://lists.reproducible-builds.org/listinfo
[*reprotest*](https://tracker.debian.org/pkg/reprotest) is the Reproducible Build's project end-user tool to build same source code twice in widely differing environments, checking the binaries produced by the builds for any differences. This month, Frédéric Pierret made a number of changes to its RPM spec file [[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/fca02bb)][[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/4ac84ed)] and improved the testsuite in a handful of ways [[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/6a51832)][[...](https://salsa.debian.org/reproducible-builds/reprotest/commit/0c17de7)]. Vagrant Cascadian then updated the version in [GNU Guix](https://guix.gnu.org/). [[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=8692f0e73b200638fd8bd01fecad068903cfa77a)]
-<br>
<br>
[![]({{ "/images/reports/2021-02/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
@@ -216,9 +218,7 @@ If you are interested in contributing to the Reproducible Builds project, please
* IRC: `#reproducible-builds` on `irc.oftc.net`.
- * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
-
- * Mastodon: [@reproducible_builds at fosstodon.org](https://fosstodon.org/@reproducible_builds)
+ * Twitter ([@ReproBuilds](https://twitter.com/ReproBuilds)) & Mastodon ([@reproducible_builds at fosstodon.org](https://fosstodon.org/@reproducible_builds))
* Reddit: [/r/ReproducibleBuilds](https://reddit.com/r/reproduciblebuilds)
=====================================
images/reports/2021-02/nixos.png
=====================================
Binary files a/images/reports/2021-02/nixos.png and b/images/reports/2021-02/nixos.png differ
=====================================
images/reports/2021-02/qubes.png
=====================================
Binary files a/images/reports/2021-02/qubes.png and b/images/reports/2021-02/qubes.png differ
=====================================
images/reports/2021-02/yoctoproject.png
=====================================
Binary files /dev/null and b/images/reports/2021-02/yoctoproject.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/1481bfb4d25055e297542900a4bc8323a54ad3c5...c1fa1b03d39ffd8dfdb4098c9d3139175a19e99f
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/1481bfb4d25055e297542900a4bc8323a54ad3c5...c1fa1b03d39ffd8dfdb4098c9d3139175a19e99f
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20210305/b30804d0/attachment.htm>
More information about the rb-commits
mailing list