[Git][reproducible-builds/reproducible-website][master] 2 commits: 2021-10: Second draft.

Chris Lamb (@lamby) gitlab at salsa.debian.org
Sat Nov 6 15:50:37 UTC 2021 


Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
68f5e8b5 by Chris Lamb at 2021-11-06T15:49:59+00:00
2021-10: Second draft.

- - - - -
3b8288e1 by Chris Lamb at 2021-11-06T15:50:25+00:00
published as https://reproducible-builds.org/reports/2021-10/

- - - - -


1 changed file:

- _reports/2021-10.md


Changes:

=====================================
_reports/2021-10.md
=====================================
@@ -3,7 +3,8 @@ layout: report
 year: "2021"
 month: "10"
 title: "Reproducible Builds in October 2021"
-draft: true
+draft: false
+date: 2021-11-06 15:50:25
 ---
 
 [![]({{ "/images/reports/2021-10/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
@@ -59,7 +60,7 @@ Lastly, Martin Monperrus [started an interesting thread on our mailing list](htt
 
 [![]({{ "/images/reports/2021-10/cip.png#right" | relative_url }})](https://cip-project.org/)
 
-* Last month, Wolfgang Mauerer gave a presentation at the [MiniDebConf 2021 Regensburg](https://wiki.debian.org/DebianEvents/de/2021/MiniDebConfRegensburg//) about the [Civil Infrastructure Platform](https://www.cip-project.org/) that covered many subjects including Reproducible Builds. [PDF slides](https://salsa.debian.org/debconf-team/public/mini/de2020/-/raw/master/talks/Civil-Infrastructure-Platform.pdf) of the talk are available, as is a [video recording](https://meetings-archive.debian.net/pub/debian-meetings/2021/MiniDebConf-Regensburg/civil-infrastructure-platform.webm).
+* Last month, Wolfgang Mauerer gave a presentation at the [MiniDebConf 2021 Regensburg](https://wiki.debian.org/DebianEvents/de/2021/MiniDebConfRegensburg//) about the [Civil Infrastructure Platform](https://www.cip-project.org/) that covered many subjects including Reproducible Builds. [PDF slides](https://salsa.debian.org/debconf-team/public/mini/de2020/-/raw/master/talks/Civil-Infrastructure-Platform.pdf) of the talk are available, as is a [video recording](https://meetings-archive.debian.net/pub/debian-meetings/2021/MiniDebConf-Regensburg/civil-infrastructure-platform.webm).
 
 * In addition, Trevor Rosen from [SolarWinds](https://www.solarwinds.com/) presented at the Linux Foundation's [Supply Chain Security Con](https://events.linuxfoundation.org/supplychainsecuritycon-north-america/) last month on incorporating [*in-toto*](https://in-toto.io/) into their build system. *in-toto* a framework to secure the integrity of software supply chains. Trevor also discusses building everything twice to validate the first build à la reproducible builds. ([PDF slides](https://static.sched.com/hosted_files/supplychainsecurityconna21/df/SupplyChainCon-TrevorRosen-Keynote.pdf))
 
@@ -95,7 +96,7 @@ Lastly, we ran another productive meeting on IRC during October. A [full set of
 
 Qubes was [heavily featured in the latest edition of Linux Weekly News](https://lwn.net/Articles/873255/), and a significant section was dedicated to discussing reproducibility. For example, it was mentioned that the "Qubes project has been working on [incorporating](https://www.qubes-os.org/news/2021/02/28/improvements-in-testing-and-building/) reproducible builds into its continuous integration (CI) infrastructure". But the LWN article goes on to describe that:
 
-> The [current goal](https://www.qubes-os.org/news/2021/10/08/reproducible-builds-for-debian-a-big-step-forward/) is to be able to build the Qubes OS Debian templates solely from packages that can be built reproducibly. [Templates](https://www.qubes-os.org/doc/templates/) in Qubes OS are VM images that can be used to start an application qube quickly based on the template. The qube will have read-only access to the root filesystem of the template, so that the same root filesystem can be shared with multiple application qubes. There are official templates for several variants of both Fedora and Debian, as well as community maintained templates for several other distributions.
+> The [current goal](https://www.qubes-os.org/news/2021/10/08/reproducible-builds-for-debian-a-big-step-forward/) is to be able to build the Qubes OS Debian templates solely from packages that can be built reproducibly. [Templates](https://www.qubes-os.org/doc/templates/) in Qubes OS are VM images that can be used to start an application qube quickly based on the template. The qube will have read-only access to the root filesystem of the template, so that the same root filesystem can be shared with multiple application qubes. There are official templates for several variants of both Fedora and Debian, as well as community maintained templates for several other distributions.
 
 You can [view the whole article on LWN](https://lwn.net/Articles/873255/), and Frédéric also published a [lengthy summary about their work on reproducible builds in Qubes](https://www.qubes-os.org/news/2021/10/08/reproducible-builds-for-debian-a-big-step-forward/) as well for those wishing to learn more.
 
@@ -120,21 +121,21 @@ Finally, Bernhard M. Wiedemann posted his [monthly reproducible builds status re
 
 * New features:
 
-    * Add support for Python Sphinx inventory files (usually named `objects.inv` on-disk). [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/880e81ea)]
-    * Add support for comparing `.pyc` files. Thanks to Sergei Trofimovich for the inspiration. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/83e7f903)]
-    * Try some alternative suffixes (e.g. `.py`) to support distributions that strip or retain them. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e2d3abe8)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/d2ac5465)]
+    * Add support for Python Sphinx inventory files (usually named `objects.inv` on-disk). [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/880e81ea)]
+    * Add support for comparing `.pyc` files. Thanks to Sergei Trofimovich for the inspiration. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/83e7f903)]
+    * Try some alternative suffixes (e.g. `.py`) to support distributions that strip or retain them. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e2d3abe8)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/d2ac5465)]
 
 * Bug fixes:
 
     * Fix Python decompilation tests under Python 3.10+ [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e8d5f6a8)] and for Python 3.7 [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ade8e628)].
-    * Don't raise a traceback if we cannot unmarshal Python bytecode. This is in order to support Python 3.7 failing to load `.pyc` files generated with newer versions of Python. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/286d5131)]
-    * Skip Python bytecode testing where we do not have an expected diff. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ef878eca)]
+    * Don't raise a traceback if we cannot unmarshal Python bytecode. This is in order to support Python 3.7 failing to load `.pyc` files generated with newer versions of Python. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/286d5131)]
+    * Skip Python bytecode testing where we do not have an expected diff. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ef878eca)]
 
 * Codebase improvements:
 
-    * Use our `file_version_is_lt` utility instead of accepting both versions of uImage expected diff. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/970d21a2)]
-    * Split out a custom call to `assert_diff` for a `.startswith` equivalent. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/daf549e4)]
-    * Use `skipif` instead of manual conditionals in some tests. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/34df4921)]
+    * Use our `file_version_is_lt` utility instead of accepting both versions of uImage expected diff. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/970d21a2)]
+    * Split out a custom call to `assert_diff` for a `.startswith` equivalent. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/daf549e4)]
+    * Use `skipif` instead of manual conditionals in some tests. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/34df4921)]
 
 In addition, Jelle van der Waa added external tool references for Arch Linux for `ocamlobjinfo`, `openssl` and `ffmpeg` [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ee2fb1e9)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/c0d178f5)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/52630c75)] and added Arch Linux as a Continuous Integration (CI) test target. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/da8e2a35)] and Vagrant Cascadian updated the testsuite to skip Python bytecode comparisons when `file(1)` is older than 5.39. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/4f7d531d)] as well as added external tool references for the Guix distribution for `dumppdf` and `ppudump`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/34cde92c)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/744ab18b)]. Vagrant Cascadian also updated the *diffoscope* package in [GNU Guix](https://www.gnu.org/software/guix/) [[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=af4ce7bd413c3a50733bfcc05370903a1e3808bc)][[...](https://git.savannah.gnu.org/cgit/guix.git/commit/?id=52ab88a5aae15f031ba5046a2997b04aabbf188a)].
 
@@ -248,7 +249,7 @@ The Reproducible Builds project runs a testing framework at [tests.reproducible-
     * Document whether a node runs in the future. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/66a44b4f)]
     * Disable `postgresql_autodoc` as it not available in bullseye. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ed92df9b)]
     * Don't be so eager when deleting schroot internals, call to schroot -e to terminate the schroots instead. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ab993ac3)]
-    * Only consider schroot underlays for deletion that are over a month old. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/3537b671)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/b30138a6)]
+    * Only consider `schroot` underlays for deletion that are over a month old. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/3537b671)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/b30138a6)]
     * Only try to unmount `/proc` if it's actually mounted. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/fa802be1)]
     * Move the `db_backup` task to its own Jenkins job. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/02fccbf3)]
 
@@ -265,4 +266,3 @@ If you are interested in contributing to the Reproducible Builds project, please
  * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
 
  * Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
->>>>>>> 2021-10



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/84cdeff2235f2b925cdcf7eae33b1d621ce9e132...3b8288e11e723dfa96789694ca620122d52fc267

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/84cdeff2235f2b925cdcf7eae33b1d621ce9e132...3b8288e11e723dfa96789694ca620122d52fc267
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20211106/45ba2703/attachment.htm>

More information about the rb-commits mailing list