[Git][reproducible-builds/reproducible-presentations][master] debian hamburg reunion r-b talk slides: fixup intro and update other distros
Holger Levsen (@holger)
gitlab at salsa.debian.org
Sat May 28 10:12:20 UTC 2022
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-presentations
Commits:
a474438d by Holger Levsen at 2022-05-28T12:10:46+02:00
debian hamburg reunion r-b talk slides: fixup intro and update other distros
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
1 changed file:
- 2022-05-28-reproducible-builds-for-bullseye-bookwork-and-beyond/index.html
Changes:
=====================================
2022-05-28-reproducible-builds-for-bullseye-bookwork-and-beyond/index.html
=====================================
@@ -128,10 +128,7 @@
<section>
<br>
<h3>
- Reproducible <em>Buster</em>, <em>Bullseye</em> & <em>Bookworm</em>
- </br>
- <em>where we come from and where we are going</em>
-
+ Reproducible Builds <br>for <em>Bullseye</em>, <em>Bookworm</em> & beyond
</h3>
<br>
<img src="images/reprobuilds-display.jpeg" style="height: 220px; border-radius: 10px;">
@@ -212,6 +209,7 @@
• Philip Rinn
• Reiner Herrmann
• Robbie Harwood
+ • Roland Clobus
• Santiago Vila
• Sascha Steinbiss
• Satyam Zode
@@ -228,41 +226,19 @@
</p>
</section>
-
- <section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
- <p>Who am I</p>
- <ol>
- <li>Holger Levsen / holger at debian.org</li>
- <li>Debian user since 1995</li>
- <li>Debian member since 2007</li>
- <li>Working on Reproducible Builds since 2014</li>
- <li>Located in Hamburg, Germany</li>
- </ol>
- </section>
-
<section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
<p>Who am I</p>
<ol>
<li>Holger Levsen / holger at debian.org</li>
<li>Debian user since 1995</li>
- <li>Debian member since 2007</li>
- <li>Working on Reproducible Builds since 2014</li>
+ <li>Debian member since 2007, contributing since 2001</li>
<li>Located in Hamburg, Germany</li>
- <li>Responsible for more than 10% of all source packages in Debian bullseye</li>
+ <li class="fragment">Working on Reproducible Builds since 2014</li>
+ <li class="fragment">Uploaded >10% of all source packages in Debian bullseye</li>
+ <li class="fragment">Uploaded <10% of all source packages in Debian bookworm...</li>
</ol>
</section>
- <section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
- <p>Who am I</p>
- <ol>
- <li>Holger Levsen / holger at debian.org</li>
- <li>Debian user since 1995</li>
- <li>Debian member since 2007</li>
- <li>Working on Reproducible Builds since 2014</li>
- <li>Located in Hamburg, Germany</li>
- <li>Responsible for more than 10% of all source packages in Debian bookworm too...</li>
- </ol>
- </section>
<section data-background-color="white">
<img class="fragment" src="images/logo.png" width="584">
@@ -272,6 +248,13 @@
<h1>Introduction</h1>
</section>
+ <section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
+ <h3>Introduction</h3>
+ <ul>
+ <li class="fragment">Who doesn't know about Reproducible Builds, why and how?</li>
+ </ul>
+ </section>
+
<section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>The problem</h3>
<ul>
@@ -286,8 +269,8 @@
<h3>The solution</h3>
<ul>
<li class="fragment">Enable anyone to independently verify that a given source produces bit by bit identical results.</li>
- <li class="fragment">As a side effect: you can only be sure a binary is free software if it has been reproduced. <em>It's only free software if it's reproducible!</em></li>
<li class="fragment">Reproducible Builds are an important building block in making supply chains more secure. Nothing more, nothing less.</li>
+ <li class="fragment">As a side effect: you can only be sure a binary is free software if it has been reproduced. <em>Someone elses binary is only free software if it's reproducible!</em></li>
</ul>
</section>
@@ -318,16 +301,23 @@
<h3>Short overview of reproducibility of other projects (all AIUI)</h3>
<ul class="fragment">Tails: "easy", pragmatically "solved" but not systematically...
<li class="fragment">Arch Linux: has rebuilders, though also lacks user tools and/or other integration</li>
- <li class="fragment">SuSE: active development, by one person, not enabled in offial builds</li>
+ <pre class="fragment">
+Arch Linux is 86.4% reproducible with 1701 bad, 8 unknown and 10849 good packages.
+[core] repository is 93.3% reproducible with 17 bad, 0 unknown and 238 good packages.
+[extra] repository is 94.1% reproducible with 171 bad, 8 unknown and 2860 good packages.
+[community] repository is 83.8% reproducible with 1481 bad, 0 unknown and 7674 good packages.
+</pre>
+ <li class="fragment">SuSE: active development, by one person, not enabled in official builds</li>
</ul>
</section>
<section data-background="images/debianreunionhh2022-hearts-bigger-diamond-i-dot-same-color-more-centered-bigger-hearts-pl.svg" data-background-size="12%" data-background-position="90% 10%">
<h3>Short overview of reproducibility of other projects (all AIUI), continued</h3>
- <li class="fragment">nixOS: https://r13y.com: 1380 out of 1465 (94.20%) paths in the minimal installation image are reproducible!</li>
- <li class="fragment">GNU Guix: also reproducible by design (like nixOS), though this also includes unreproducible software... (guix-challenge)</li>
+ <li class="fragment">nixOS: https://r13y.com: 1570 out of 1572 (99.87%) paths in the minimal installation image are reproducible!</li>
+ <li class="fragment">GNU Guix: also reproducible by design (like nixOS) - <em>guix-challenge</em></li>
<li class="fragment">Yocto: support for reproducible images</li>
- <li class="fragment">F-Droid: supports reproducible builds though no UI (manual web crawling needed) nor promises</li>
+ <li class="fragment">F-Droid: supports reproducible builds though no UI (manual web crawling needed) nor promises<ul>
+ <li class="fragment">"Corona Contract Tracing German": update problem due to unreproducibility</li></ul></li>
</ul>
</section>
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/a474438d4632bab1d5bc61956f6ab8f2f45cfa22
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/a474438d4632bab1d5bc61956f6ab8f2f45cfa22
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20220528/9a8e21ba/attachment.htm>
More information about the rb-commits
mailing list