[Git][reproducible-builds/reproducible-website][master] 2021-09: Initial draft
Chris Lamb (@lamby)
gitlab at salsa.debian.org
Mon Oct 4 18:26:47 UTC 2021
Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website
Commits:
476debb9 by Chris Lamb at 2021-10-04T19:26:18+01:00
2021-09: Initial draft
- - - - -
10 changed files:
- _reports/2021-09.md
- + images/reports/2021-09/alpine.png
- + images/reports/2021-09/bitcoinbinary.png
- + images/reports/2021-09/debian.png
- + images/reports/2021-09/diffoscope.svg
- + images/reports/2021-09/opensuse.png
- + images/reports/2021-09/reproducible-builds.png
- + images/reports/2021-09/sigstore.png
- + images/reports/2021-09/testframework.png
- + images/reports/2021-09/website.png
Changes:
=====================================
_reports/2021-09.md
=====================================
@@ -6,19 +6,204 @@ title: "Reproducible Builds in September 2021"
draft: true
---
-.
+[![]({{ "/images/reports/2021-09/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
+
+The goal behind "reproducible builds" is to ensure that no deliberate flaws have been introduced during compilation processes via promising or mandating that identical results are always generated from a given source. This allowing multiple third-parties to come to an agreement on whether a build was compromised or not by a system of distributed consensus.
+
+In these reports we outline the most important things that have been happening in the world of reproducible builds in the past month:
+
+<br>
+
+[![]({{ "/images/reports/2021-09/sigstore.png#right" | relative_url }})](https://www.sigstore.dev/)
+
+First mentioned in our [March 2021 report]({{ "/reports/2021-03/" | relative_url }}), [Martin Heinz](https://martinheinz.dev/) published two blog posts on [**sigstore**](https://www.sigstore.dev/), a project that endeavours to offer software signing as a "public good, [the] software-signing equivalent to [Let's Encrypt](https://letsencrypt.org/)".
+
+The two posts, the first entitled [*Sigstore: A Solution to Software Supply Chain Security*](https://martinheinz.dev/blog/55) outlines more about the project and justifies its existence:
+
+> software-signing is not a new problem, so there must be some solution already, right? Yes, but signing software and maintaining keys is very difficult especially for non-security folks and UX of existing tools such as PGP leave much to be desired. That's why we need something like sigstore - an easy to use software/toolset for signing software artifacts. [..] Additionally, there are couple of reasons why sigstore's solution is superior to tools like PGP that try to solve the same problem. Unlike with other tools, with sigstore you don't need to manage private keys. You also don't have to understand ins-and-outs of security standards thanks to better UX. sigstore also makes it simpler to manage revocations and with all this it still provides all the required features of software signing, that being integrity, non-repudiation and authentication.
+
+The second post — titled [*Signing Software The Easy Way with Sigstore and Cosign*](https://martinheinz.dev/blog/56) — then goes into the technical details of getting started
+
+<br>
+
+There was an interesting thread on the [/r/Signal](https://www.reddit.com/r/signal/) subreddit based on the observation that [*Signal's apk doesn't match with the source code*](https://www.reddit.com/r/signal/comments/pyj0uv/signals_apk_doesnt_match_with_the_source_code/):
+
+> Some time ago I checked Signal's reproducibility and it failed. I asked others to test in case I did something wrong, but nobody made any reports. Since then I tried to test the Google Play Store version of the apk against one I [compiled](https://github.com/signalapp/Signal-Android/tree/master/reproducible-builds) myself, and that doesn't match either. If any of you is willing to test this themselves, please report your findings.
+
+<br>
+
+[![]({{ "/images/reports/2021-09/bitcoinbinary.png#right" | relative_url }})](https://bitcoinbinary.org)
+
+A new website, [**BitcoinBinary.org**](https://bitcoinbinary.org), was announced this month, which aims to be a "repository of Reproducible Build Proofs for Bitcoin Projects". The project explains itself as follows:
+
+> Most users are not capable of building from source code themselves, but we can at least get them able enough to check signatures and shasums. When reputable people who can tell everyone they were able to reproduce the project's build, others at least have a secondary source of validation.
+
+<br>
+
+### Distribution work
+
+Frédéric Pierret [announced](https://lists.reproducible-builds.org/pipermail/rb-general/2021-September/002386.html) a new site at [**beta.tests.reproducible-builds.org**](https://beta.tests.reproducible-builds.org/), showing actual rebuilds of binaries distributed by both the Debian and Qubes distributions.
+
+[![]({{ "/images/reports/2021-09/debian.png#right" | relative_url }})](https://debian.org/)
+
+In Debian specifically, however, 51 reviews of Debian packages were added, 31 were updated and 31 were removed this month to [our database of classified issues](https://tests.reproducible-builds.org/debian/index_issues.html). As part of this, Chris Lamb refreshed a number of notes, including the [build_path_in_record_file_generated_by_pybuild_flit_plugin](https://salsa.debian.org/reproducible-builds/reproducible-notes/commit/3f309266) issue.
+
+Elsewhere in Debian, Roland Clobus posted his [*Fourth status update about reproducible live-build ISO images in Jenkins*](https://lists.reproducible-builds.org/pipermail/rb-general/2021-September/002387.html) on our mailing list, which mentions (amongst other things) that:
+
+> * All major configurations are [still built regularly](https://jenkins.debian.net/view/live/) using live-build and bullseye
+> * All major configurations are reproducible now; Jenkins is green
+> * I've worked around the issue for the Cinnamon image
+> * [The patch](https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=993444) was accepted and released within a few hours
+> * My main focus for the last month was on the live-build tool itself
+> * It will properly [use the proxy for all HTTP traffic](https://salsa.debian.org/live-team/live-build/-/merge_requests/252)
+
+Related to this, there was continuing discussion on how to [embed/encode the build metadata for the Debian "live" images](https://lists.reproducible-builds.org/pipermail/rb-general/2021-September/002359.html) which were being worked on by Roland Clobus.
+
+<br>
+
+[![]({{ "/images/reports/2021-09/alpine.png#right" | relative_url }})](https://ariadne.space/2021/06/04/a-slightly-delayed-monthly-status-update/)
+
+[Ariadne Conill](https://ariadne.space/) published another [detailed blog post](https://ariadne.space/2021/09/07/bits-relating-to-alpine-security-initiatives-in-august/) this month related to various security initiatives in the [Alpine](https://alpinelinux.org/) Linux distribution. After summarising more-conventional security work being done regarding [sudo](https://www.sudo.ws/) and the release of [OpenSSH](FIXME) version 3.0, Ariadne included another section on reproducible builds: "The main blocker [was] determining what to do about storing the build metadata so that a build environment can be recreated precisely".
+
+<br>
+
+Finally, Bernhard M. Wiedemann posted his [monthly reproducible builds status report](https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/JGVWCDTZJS2HXTXVADS3ZKO3CIHXZZIN/)
+
+<br>
+
+### Community news
+
+[![]({{ "/images/reports/2021-09/website.png#right" | relative_url }})](https://reproducible-builds.org/)
+
+On [our website](https://reproducible-builds.org/) this month, Bernhard M. Wiedemann fixed some broken links [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/104a68e)] and Holger Levsen made a number of changes to the [*Who is Involved?*]({{ "/who/" | relative_url }})" page [[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/9f43eb7)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/6b2a913)][[...](https://salsa.debian.org/reproducible-builds/reproducible-website/commit/32b3aba)]. And on our mailing list, Magnus Ihse Bursie started a thread with the subject [*Reproducible builds on Java*](https://lists.reproducible-builds.org/pipermail/rb-general/2021-September/thread.html#2374) which starts as follows:
+
+> I'm working for Oracle in the Build Group for [OpenJDK](https://openjdk.java.net/groups/build/) which is primary responsible for creating a built artifact of the OpenJDK source code. [...] For the last few years, we have worked on a low-effort, background-style project to make the build of OpenJDK itself building reproducible. We've come far, but there are still issues I'd like to address. [[...](https://lists.reproducible-builds.org/pipermail/rb-general/2021-September/002374.html)]
+
+<br>
+
+### [*diffoscope*](https://diffoscope.org)
+
+[![]({{ "/images/reports/2021-09/diffoscope.svg#right" | relative_url }})](https://diffoscope.org)
+
+[*diffoscope*](https://diffoscope.org) is our in-depth and content-aware diff utility. Not only can it locate and diagnose reproducibility issues, it can provide human-readable diffs from many kinds of binary formats. This month, [Chris Lamb](https://chris-lamb.co.uk) prepared and uploaded versions `183`, `184` and `185` as well as performed significant triaging of merge requests and other issues in addition to making the following changes:
+
+* New features:
+
+ * Support a newer format version of the [R language](https://www.r-project.org/)'s `.rds` files. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/ac1bcb6a)]
+ * Update tests for [OCaml](https://ocaml.org/) 4.12. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/1fcc0d51)]
+ * Add a missing `format_class` import. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/73f49430)]
+
+* Bug fixes:
+
+ * Don't call `close_archive` when garbage collecting `Archive` instances, unless `open_archive` definitely returned successfully. This prevents, for example, an `AttributeError` where `PGPContainer`'s cleanup routines were rightfully assuming that its temporary directory had actually been created. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/9007e009)]
+ * Fix (and test) the comparison of [R language](https://www.r-project.org/)'s `.rdb` files after refactoring temporary directory handling. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/622d1cac)]
+ * Ensure that "RPM archives" exists in the Debian package description, regardless of whether `python3-rpm` is installed or not at build time. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/fa530947)]
+
+* Codebase improvements:
+
+ * Use our `assert_diff` routine in `tests/comparators/test_rdata.py`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/d12af4cc)]
+ * Move `diffoscope.versions` to `diffoscope.tests.utils.versions`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/2fae7e85)]
+ * Reformat a number of modules with Black. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/a33cf81e)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e6024b3b)]
+
+However, the following changes were also made:
+
+* Mattia Rizzolo:
+
+ * Fix an autopkgtest caused by the `androguard` module not being in the (expected) `python3-androguard` Debian package. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/7ae076c7)]
+ * Appease a `shellcheck` warning in `debian/tests/control.sh`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/46c468cb)]
+ * Ignore a warning from `h5py` in our tests that doesn't concern us. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/e998eb9d)]
+ * Drop a trailing `.1` from the `Standards-Version` field as it's required. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/080813f3)]
+
+* Zbigniew Jędrzejewski-Szmek:
+
+ * Stop using the deprecated `distutils.spawn.find_executable` utility. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/fef2375b)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/fce00cf6)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/4c3109cb)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/953a599c)][[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/beebe3fd)]
+ * Adjust an LLVM-related test for LLVM version 13. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/258d09a4)]
+ * Update invocations of `llvm-objdump`. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/b2b1f731)]
+ * Adjust a test with a one-byte text file for `file` version 5.40. [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/d5707121)]
+
+And, finally, Benjamin Peterson added a `--diff-context` option to control unified diff context size [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/1ee45568)] and Jean-Romain Garnier fixed the Macho comparator for architectures other than `x86-64` [[...](https://salsa.debian.org/reproducible-builds/diffoscope/commit/4ea2175c)].
+
+<br>
+
+### Upstream patches
+
+The Reproducible Builds project detects, dissects and attempts to fix as many currently-unreproducible packages as possible. We endeavour to send all of our patches upstream where appropriate. This month, we wrote a large number of such patches, including:
* Bernhard M. Wiedemann:
- * [`gtk4`](https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/3929) (date)
- * [`build-compare`](https://github.com/openSUSE/build-compare/pull/42) (merged, random tmpfile)
- * [`itinerary`](https://bugs.kde.org/show_bug.cgi?id=442821) (fixed, FTBFS-time)
-* https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/message/JGVWCDTZJS2HXTXVADS3ZKO3CIHXZZIN/
-* [FIXME](https://martinheinz.dev/blog/55)
-* [FIXME](https://ariadne.space/2021/09/07/bits-relating-to-alpine-security-initiatives-in-august/)
+ * [`gtk4`](https://gitlab.gnome.org/GNOME/gtk/-/merge_requests/3929) (date-related issue)
+ * [`build-compare`](https://github.com/openSUSE/build-compare/pull/42) (random tempfile problem)
+ * [`itinerary`](https://bugs.kde.org/show_bug.cgi?id=442821) (time-related build failure)
+
+* Chris Lamb:
+
+ * [#993950](https://bugs.debian.org/993950) filed against [`lcalc`](https://tracker.debian.org/pkg/lcalc).
+ * [#993952](https://bugs.debian.org/993952) filed against [`htscodecs`](https://tracker.debian.org/pkg/htscodecs).
+ * [#994123](https://bugs.debian.org/994123) filed against [`osdlyrics`](https://tracker.debian.org/pkg/osdlyrics).
+ * [#994976](https://bugs.debian.org/994976) filed against [`xtermcontrol`](https://tracker.debian.org/pkg/xtermcontrol).
+ * [#994978](https://bugs.debian.org/994978) filed against [`rust-insta`](https://tracker.debian.org/pkg/rust-insta).
+ * [#994979](https://bugs.debian.org/994979) filed against [`python-tomli`](https://tracker.debian.org/pkg/python-tomli).
+ * [#995258](https://bugs.debian.org/995258) filed against [`python-pairix`](https://tracker.debian.org/pkg/python-pairix).
+ * [#995259](https://bugs.debian.org/995259) filed against [`python-pybedtools`](https://tracker.debian.org/pkg/python-pybedtools) ([forwarded upstream](https://github.com/daler/pybedtools/pull/349)).
+
+* Simon McVittie:
+
+ * [#993673](https://bugs.debian.org/993673) filed against [`clazy`](https://tracker.debian.org/pkg/clazy).
+ * [#993674](https://bugs.debian.org/993674) filed against [`ga`](https://tracker.debian.org/pkg/ga).
+ * [#993675](https://bugs.debian.org/993675) filed against [`opensmtpd`](https://tracker.debian.org/pkg/opensmtpd).
+ * [#993681](https://bugs.debian.org/993681) filed against [`sphinxcontrib-programoutput`](https://tracker.debian.org/pkg/sphinxcontrib-programoutput).
+
+* Vagrant Cascadian:
+
+ * [#995092](https://bugs.debian.org/995092) filed against [`guile-3.0`](https://tracker.debian.org/pkg/guile-3.0).
+ * [#995131](https://bugs.debian.org/995131) filed against [`nut`](https://tracker.debian.org/pkg/nut).
+ * [#995143](https://bugs.debian.org/995143) filed against [`xdmf`](https://tracker.debian.org/pkg/xdmf).
+ * [#995145](https://bugs.debian.org/995145) filed against [`cyrus-sasl2`](https://tracker.debian.org/pkg/cyrus-sasl2).
+ * [#995211](https://bugs.debian.org/995211) filed against [`libbrahe`](https://tracker.debian.org/pkg/libbrahe).
+ * [#995217](https://bugs.debian.org/995217) filed against [`maildirsync`](https://tracker.debian.org/pkg/maildirsync).
+ * [#995401](https://bugs.debian.org/995401) filed against [`canna`](https://tracker.debian.org/pkg/canna).
+ * [#990246](https://bugs.debian.org/990246) filed against [`vlc`](https://tracker.debian.org/pkg/canna) (forwarded upstream [[...](https://code.videolan.org/videolan/vlc/-/merge_requests/698)][[...](https://code.videolan.org/videolan/vlc/-/issues/26035)])
+
+<br>
+
+#### Testing framework
+
+[![]({{ "/images/reports/2021-09/testframework.png#right" | relative_url }})](https://tests.reproducible-builds.org/)
+
+The Reproducible Builds project runs a testing framework at [tests.reproducible-builds.org](https://tests.reproducible-builds.org), to check packages and other artifacts for reproducibility. This month, the following changes were made:
+
+* Holger Levsen:
+
+ * Drop my package rebuilder prototype as it's not useful anymore. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/3814aa00)]
+ * Schedule old packages in Debian *bookworm*. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/38a659c3)]
+ * Stop scheduling packages for Debian *buster*. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/99840169)][[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/dc2695c7)]
+ * Don't include PostgreSQL debug output in package lists. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/8658f0dc)]
+ * Detect Python library mismatches during build in the node health check. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/ae3a3e30)]
+ * Update a note on updating the FreeBSD system. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/d8fe3916)]
+
+* Mattia Rizzolo:
+
+ * Silence a warning from Git. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/60829d42)]
+ * Update a setting to reflect that Debian *bookworm* is the new testing. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/846ec7aa)]
+ * Upgrade the PostgreSQL database to version 13. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/e3658b54)]
+
+* Roland Clobus (Debian "live" image generation):
+
+ * Workaround non-reproducible config files in the `libxml-sax-perl` package. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/a9fdeb39)]
+ * Use the new DNS for the 'snapshot' service. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2afc5833)]
+
+* Vagrant Cascadian:
+
+ * Also note that the `armhf` architecture also systematically varies by the kernel. [[...](https://salsa.debian.org/qa/jenkins.debian.net/commit/2fcfdc98)]
+
+<br>
+
+#### Contributing
+
+If you are interested in contributing to the Reproducible Builds project, please visit our [*Contribute*](https://reproducible-builds.org/contribute/) page on our website. However, you can get in touch with us via:
-* FIXME: https://beta.tests.reproducible-builds.org/ is a thing now, thanks to Frédéric Pierret, showing actual rebuilds of binaries distributed by Debian and Qubes. The actual webserver serving the content is https://rebuild.notset.fr/
+ * IRC: `#reproducible-builds` on `irc.oftc.net`.
-* [forwarded 995259](https://github.com/daler/pybedtools/pull/349)
+ * Twitter: [@ReproBuilds](https://twitter.com/ReproBuilds)
-* FIXME https://code.videolan.org/videolan/vlc/-/merge_requests/698 (follow-up to https://code.videolan.org/videolan/vlc/-/issues/26035 and https://bugs.debian.org/990246)
+ * Mailing list: [`rb-general at lists.reproducible-builds.org`](https://lists.reproducible-builds.org/listinfo/rb-general)
=====================================
images/reports/2021-09/alpine.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/alpine.png differ
=====================================
images/reports/2021-09/bitcoinbinary.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/bitcoinbinary.png differ
=====================================
images/reports/2021-09/debian.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/debian.png differ
=====================================
images/reports/2021-09/diffoscope.svg
=====================================
@@ -0,0 +1,110 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Created with Inkscape (http://www.inkscape.org/) -->
+
+<svg
+ xmlns:dc="http://purl.org/dc/elements/1.1/"
+ xmlns:cc="http://creativecommons.org/ns#"
+ xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
+ xmlns:svg="http://www.w3.org/2000/svg"
+ xmlns="http://www.w3.org/2000/svg"
+ xmlns:xlink="http://www.w3.org/1999/xlink"
+ version="1.1"
+ width="128"
+ height="128"
+ id="svg2">
+ <defs
+ id="defs4" />
+ <metadata
+ id="metadata7">
+ <rdf:RDF>
+ <cc:Work
+ rdf:about="">
+ <dc:format>image/svg+xml</dc:format>
+ <dc:type
+ rdf:resource="http://purl.org/dc/dcmitype/StillImage" />
+ <dc:title></dc:title>
+ </cc:Work>
+ </rdf:RDF>
+ </metadata>
+ <g
+ transform="matrix(1.0692573,0,0,1.0692573,-328.34726,-503.5515)"
+ id="layer1">
+ <g
+ id="g5409">
+ <g
+ transform="translate(5.418238,0)"
+ id="g5386">
+ <rect
+ width="90.304001"
+ height="50.999996"
+ x="316.36414"
+ y="472.80621"
+ id="rect4667-3"
+ style="fill:none;stroke:none" />
+ <g
+ id="text4673-8"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 316.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5371"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 348.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5373"
+ style="fill:#c00000;fill-opacity:1" />
+ <path
+ d="m 380.36413,483.82622 0,3.968 26.304,0 0,-3.968"
+ id="path5375"
+ style="fill:#c00000;fill-opacity:1" />
+ </g>
+ <g
+ id="text5366"
+ style="font-size:64px;font-style:normal;font-variant:normal;font-weight:500;font-stretch:normal;text-align:start;line-height:125%;letter-spacing:0px;word-spacing:0px;writing-mode:lr-tb;text-anchor:start;fill:#008000;fill-opacity:1;stroke:none;font-family:Inconsolata;-inkscape-font-specification:Inconsolata Medium">
+ <path
+ d="m 327.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5378" />
+ <path
+ d="m 359.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5380" />
+ <path
+ d="m 391.69213,496.99019 0,10.88 -11.328,0 0,3.968 11.328,0 0,11.968 4.032,0 0,-11.968 10.944,0 0,-3.968 -10.944,0 0,-10.88 -4.032,0"
+ id="path5382" />
+ </g>
+ </g>
+ <use
+ id="use5399"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.8,0,0,0.8,82.417275,133.65028)"
+ id="use5401"
+ style="opacity:0.85"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.6,0,0,0.6,164.83455,260.05454)"
+ id="use5403"
+ style="opacity:0.7"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ <use
+ transform="matrix(0.4,0,0,0.4,247.25182,379.25208)"
+ id="use5405"
+ style="opacity:0.55"
+ x="0"
+ y="0"
+ width="744.09448"
+ height="1052.3622"
+ xlink:href="#g5386" />
+ </g>
+ </g>
+</svg>
=====================================
images/reports/2021-09/opensuse.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/opensuse.png differ
=====================================
images/reports/2021-09/reproducible-builds.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/reproducible-builds.png differ
=====================================
images/reports/2021-09/sigstore.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/sigstore.png differ
=====================================
images/reports/2021-09/testframework.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/testframework.png differ
=====================================
images/reports/2021-09/website.png
=====================================
Binary files /dev/null and b/images/reports/2021-09/website.png differ
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/476debb91271cd243013924d5d4262d88164395d
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/476debb91271cd243013924d5d4262d88164395d
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20211004/20cafce6/attachment.htm>
More information about the rb-commits
mailing list