[Git][reproducible-builds/reproducible-presentations][master] dc22 presentation: famous last brushes
Holger Levsen (@holger)
gitlab at salsa.debian.org
Mon Jul 18 18:07:21 UTC 2022
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-presentations
Commits:
4ed65adc by Holger Levsen at 2022-07-18T20:07:00+02:00
dc22 presentation: famous last brushes
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
1 changed file:
- 2022-07-19-reproducible-builds-for-bullseye-bookwork-and-beyond/index.html
Changes:
=====================================
2022-07-19-reproducible-builds-for-bullseye-bookwork-and-beyond/index.html
=====================================
@@ -169,8 +169,8 @@
<h3>
This is a pre-recorded remote talk.<br><br>
<span class="fragment">
- Please enjoy DebConf22!<br><br>
- I miss you, lovely Debian people!</span>
+ I miss you, lovely Debian people!<br><br>
+ Please enjoy DebConf22!</span>
</h3>
</section>
@@ -359,6 +359,10 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<p>We mostly still haven't found what we're looking for, because it's really hard. <br>For example: without 100% it's basically impossible to do a sensible user experience.</p>
</section>
+ <section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
+ <h3>Some more tips</h3>
+ </section>
+
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>I probably didn't backdoor this</h3>
<li>https://github.com/kpcyrd/i-probably-didnt-backdoor-this</li>
@@ -377,6 +381,10 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
</ul>
</section>
+ <section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
+ <h3>https://reproducible-builds.org/docs</h3>
+ </section>
+
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>Debian</h3>
</section>
@@ -500,9 +508,9 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
</section>
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
- <h3>...then looking at bookworm four weeks ago...</h3>
+ <h3>Did I say <em>bullseye</em>?</h3>
<ul>
- <li>we were at 94.8% (30482 out of 32153 source packages) CI reproducibiliy for <em>bookworm</em>.</li>
+ <li class="fragment">4 weeks ago we were at 94.8% (30482 out of 32153 source packages) CI reproducibiliy for <em>bookworm</em>.</li>
<li class="fragment">YAY.</li>
</ul>
@@ -530,8 +538,6 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<img src="images/stats_meta_pkg_state_maint_pkg-haskell-maintainers.png">
</section>
-
-
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>CI versus rebuilds:</h3>
<ul>
@@ -552,7 +558,7 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<li class="fragment">We have no <strong>Debian</strong> infrastructure rebuilding Debian packages. The reproducible-builds.org rebuilders are builders, not rebuilders.</li>
<li class="fragment">https://beta.tests.reproducible-builds.org/debian <em>is showing</em> rebuilds of ftp.debian.org - huge thanks to Frédéric Pierret for this PoC.</li>
<li class="fragment">Sadly, Frédéric's rebuilder is down atm...</li>
- <li class="fragment">And one rebuilder is not good enough also. It's a start though.</li>
+ <li class="fragment">And one rebuilder is not good enough also. It's a start though:</li>
</ul>
</ul>
</section>
@@ -597,20 +603,18 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>working around snapshot.debian.org</h3>
<ul>
- <li class="fragment">snapshot.debian.org was (and is) unusable for rebuilds, fixed by Frédéric Pierret and josch since June 2021, by providing a partial mirror for amd64 only and only going back until January 2017.</li>
- <li class="fragment">though snapshot.notset.fr is currently down and snapshot.reproducible-builds.org ist not yet up... :/</li>
+ <li class="fragment">snapshot.debian.org was (and is) unusable for rebuilds, fixed by Frédéric Pierret and josch since June 2021, by providing a partial mirror for amd64 only and only going back until January 2017.</li>
+ <li class="fragment">without "a working" snapshot.debian.org (it works, "just" not for our usecases) we cannot have reproducible Debian...</li>
+ <li class="fragment">sadly snapshot.notset.fr is currently down and snapshot.reproducible-builds.org ist not yet up... :/</li>
</ul>
</section>
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
- <h3>further improvements to our snapshot.debian.org mirror</h3>
+ <h3>improvements to our snapshot.debian.org mirror</h3>
<ul>
- <li class="fragment">soon to be hosted at OSUOSL as snapshot.reproducible-builds.org</li>
- <li class="fragment">probably still mirroring https://debian.notset.fr/snapshot/ and not snapshot.d.o </li>
- <li class="fragment">https://salsa.debian.org/freexian-team/project-funding/-/merge_requests/14</li>
-
- <li class="fragment">we want at least arm64 too, though that needs more than just HW</li>
- <li class="fragment">without "a working" snapshot.debian.org (it works, "just" not for our usecases) we cannot have reproducible Debian...</li>
+ <li class="fragment">https://salsa.debian.org/freexian-team/project-funding/-/merge_requests/14</li>
+ <li class="fragment">soon to be hosted at OSUOSL as snapshot.reproducible-builds.org</li>
+ <li class="fragment">we want at least arm64 too, though that needs more than just HW. See the MR above.</li>
</ul>
</section>
@@ -618,9 +622,9 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>"Solved" problems with <code>.buildinfo</code> files</h3>
<ul style="font-size: 98%">
- <li>buildinfos.debian.net is just a proof of concept, but it works around #862073, #763822, #862538, #929397 well enough.</li>
<li class="fragment">we had >3000 packages without .buildinfo files, I NMUed all of them (with the help of David Bremner!) 😇 Just NEW ones will keep coming...</li>
- <li class="fragment">GPG keys expire.</li>
+ <li class="fragment">buildinfos.debian.net is just a proof of concept, but it works around #862073, #763822, #862538, #929397 well enough.</li>
+ <li class="fragment">GPG keys expire, so we just ignore signatures...</li>
</ul>
</section>
@@ -639,9 +643,16 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
</section>
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
- <h3>meaningful reproducibilty of Debian is possible for: (amd64 only)</h3>
+ <h3>meaningful reproducibilty of Debian d-i images<br>(amd64 only)</h3>
<ul>
<li class="fragment">Debian installer images, are reproducible when build from git, as shown by Roland Clobus. The problem here is that automated testing of d-i images fails almost constantly in sid and testing...</li>
+ </ul>
+
+ </section>
+
+ <section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
+ <h3>meaningful reproducibilty of Debian live images<br>(amd64 only)</h3>
+ <ul>
<li class="fragment">Debian Live images are reproducible using <em>live-build</em> as shown by Roland Clobus.</em>.</li>
<ul>
<li class="fragment">reproducible package installation != reproducible packages</li>
@@ -651,8 +662,9 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
</section>
+
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
- <h3>Reproducible d-i and live images?</h3>
+ <h3>more on d-i and live images</h3>
<ul>
<li class="fragment">Roland Clobus gave a talk at the Debian Reunion Hamburg about his efforts to revive live-images.</li>
<li class="fragment">Roland and Phil Hands are working together to get those images tested for functionality as well, using https://openqa.debian.net.</li>
@@ -695,8 +707,8 @@ Arch Linux is 86.4% reproducible with 1701 bad and 10849 good packages.
<section data-background="images/dc22-logo.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>trixie goals</h3>
<ul>
- <li class="fragment">I still haven't found what I'm looking for, these are rather long term goals, but nothing strategic yet:</li>
<li class="fragment">snapshot.debian.org usable for mass rebuilds by many users for all architectures.</li>
+ <li class="fragment">more rebuilders! (instead of more CI builders)</li>
<li class="fragment">0 bugs with patches unuploaded. Currently there are 292 of these. 2 NMUs per week, uploaded to DELAYED/15.</li>
<li class="fragment">#863622: apt: warn when installing packages that are not reproducible</li>
<li class="fragment">.buildinfo files known and used by <code>dak</code>.</li>
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/4ed65adc9f9f1d39201f929710c549cbd8fd1fb7
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/4ed65adc9f9f1d39201f929710c549cbd8fd1fb7
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20220718/5c553216/attachment.htm>
More information about the rb-commits
mailing list