[Git][reproducible-builds/reproducible-website][master] 2 commits: 2023-11: Misc changes prior to publishing.

Wed Dec 6 14:58:40 UTC 2023


Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
c6816be1 by Chris Lamb at 2023-12-06T14:57:05+00:00
2023-11: Misc changes prior to publishing.

- - - - -
23b236cc by Chris Lamb at 2023-12-06T14:57:09+00:00
published as https://reproducible-builds.org/reports/2023-11/

- - - - -


3 changed files:

- _reports/2023-11.md
- + images/reports/2023-11/phpunit.png
- images/reports/2023-11/postit-rb-summit-hamburg-20231101_small.jpg


Changes:

=====================================
_reports/2023-11.md
=====================================
@@ -3,7 +3,8 @@ layout: report
 year: "2023"
 month: "11"
 title: "Reproducible Builds in November 2023"
-draft: true
+draft: false
+date: 2023-12-06 14:57:09
 ---
 
 [![]({{ "/images/reports/2023-11/reproducible-builds.png#right" | relative_url }})](https://reproducible-builds.org/)
@@ -14,20 +15,17 @@ draft: true
 
 ### Reproducible Builds Summit 2023
 
-Between October 31st and November 2nd, we held our [seventh Reproducible Builds Summit]({{ "/events/hamburg2023/" | relative_url }}) in Hamburg, Germany!
+Between October 31st and November 2nd, we held our [seventh Reproducible Builds Summit]({{ "/events/hamburg2023/" | relative_url }}) in Hamburg, Germany! Amazingly, the [agenda and all notes from all sessions](https://reproducible-builds.org/events/hamburg2023/agenda/) are all online — many thanks to everyone who wrote notes from the sessions.
 
-Amazingly the agenda and all notes from all sessions are [already online](https://reproducible-builds.org/events/hamburg2023/agenda/).
-
-As a followup on an idea started at the recent R-B summit in Hamburg, Alexander Couzens and Holger Levsen started work on a cache or tailored frontend for [snapshot.debian.org](https://snapshot.debian.org), which is not yet ready for usage, but which already provided a promising outlook: the general idea is that for rebuilding Debian one does not need the whole >140TB data of snapshot.debian.org but ony the subset of the packages which were
-used for building. Turns out, for amd64, arm64, armhf, i386, ppc64el, riscv64 and s390 for trixie, unstable and experimental this is only around 500GB, so less than 1%. More information is available on [https://rebuilder-snapshot.debian.net](https://rebuilder-snapshot.debian.net) and we hope that this service becomes usable in the coming weeks.
+As a followup on one idea, started at the summit, Alexander Couzens and Holger Levsen started work on a cache (or tailored front-end) for the [*snapshot.debian.org*](https://snapshot.debian.org) service. The general idea is that, when rebuilding Debian, you do not actually need the whole ~140TB of data from *snapshot.debian.org*; rather, only a very small subset of the packages are ever used for for building. It turns out, for `amd64`, `arm64`, `armhf`, `i386`, `ppc64el`, `riscv64` and `s390` for Debian *trixie*, *unstable* and *experimental*, this is only around 500GB — ie. less than 1%. Although the new service not yet ready for usage, it has already provided a promising outlook in this regard. More information is available on [https://rebuilder-snapshot.debian.net](https://rebuilder-snapshot.debian.net) and we hope that this service becomes usable in the coming weeks.
 
 [![]({{ "/images/reports/2023-11/postit-rb-summit-hamburg-20231101_small.jpg#right" | relative_url }})](https://rebuilder-snapshot.debian.net/)
 
-The picture shows a postit note written by Jan-Benedict Glaw at the summit in Hamburg, confirming Holger Levsen's theory that rebuilding all Debian packages needs a very small subset of packages, the text states that 69200 packages (in sid) list 24850 packages in their .buildinfo files, in 80200 variations. This little piece of paper was the beginning of rebuilder-snapshot and is a direct outcome of the summit!
+The adjacent picture shows a sticky note authored by Jan-Benedict Glaw at the summit in Hamburg, confirming Holger Levsen's theory that rebuilding all Debian packages needs a very small subset of packages, the text states that 69,200 packages (in Debian *sid*) list 24,850 packages in their `.buildinfo` files, in 8,0200 variations. This little piece of paper was the beginning of *rebuilder-snapshot* and is a direct outcome of the summit!
 
 The Reproducible Builds team would like to thank our event sponsors who include [Mullvad VPN](https://mullvad.net/), [openSUSE](https://www.opensuse.org/), [Debian](https://www.debian.org/), [Software Freedom Conservancy](https://sfconservancy.org/), [Allotropia](https://www.debian.org/) and [Aspiration Tech](https://aspirationtech.org/).
 
-<br/>
+<br>
 
 ### *Beyond Trusting FOSS* presentation at SeaGL
 
@@ -49,17 +47,7 @@ Marcel Fourné, Dominik Wermke, Sascha Fahl and Yasemin Acar have published an a
 
 <br>
 
-### openSUSE updates
-
-[![]({{ "/images/reports/2023-11/opensuse.png#right" | relative_url }})](https://www.opensuse.org/)
-
-Bernhard M. Wiedemann has [created a wiki page](https://en.opensuse.org/openSUSE:Reproducible_openSUSE) outlining an proposal to create a general-purpose Linux distribution which consists of 100% bit-reproducible packages… albeit minus the embedded signature within RPM files. It would be based on openSUSE *Tumbleweed* or, if available, its Slowroll-variant.
-
-In addition, Bernhard posted another [monthly update](https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/VWWVEPYEUBBMZN6K7VGUU5KKC7CBSSM2/) for his work elsewhere in openSUSE.
-
-<br>
-
-### Misc. community updates
+### Community updates
 
 On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) this month:
 
@@ -77,21 +65,19 @@ On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/
 
 * Finally, Fay Stegerman regrettably reports that she will [no longer be able to work on Android reproducible builds](https://lists.reproducible-builds.org/pipermail/rb-general/2023-November/003201.html) nor update the Reproducible Builds community with the status of reproducibility within F-Droid.
 
-* The widely recognized PHPUnit framework for PHP has launched its
-  [version 10.5.0](https://phpunit.de/). This update introduces the inclusion of
-  a `composer.lock` file, ensuring total reproducibility of the shipped binary
-  file. Further details and the discussion regarding this implementation can be
-  found on this
-  [GitHub pull request](https://github.com/sebastianbergmann/phpunit/pull/5576).
+<br>
+
+### openSUSE updates
+
+[![]({{ "/images/reports/2023-11/opensuse.png#right" | relative_url }})](https://www.opensuse.org/)
 
-* The first presentation ["Leveraging Nix in the PHP ecosystem"](https://phpconference.com/web-development/leveraging-nix-php-ecosystem/)
-  has been given in late October at the PHP International Conference in Munich
-  by [Pol Dellaiera](https://github.com/drupol). While the video replay is not
-  available, the presentation slides and speaker notes are open-source,
-  reproducible and accessible [on GitHub](https://github.com/drupol/ipc2023/releases/tag/v23-79efbb4c24ab0d42c73906d16233a79d9659c5ca).
+Bernhard M. Wiedemann has [created a wiki page](https://en.opensuse.org/openSUSE:Reproducible_openSUSE) outlining an proposal to create a general-purpose Linux distribution which consists of 100% bit-reproducible packages… albeit minus the embedded signature within RPM files. It would be based on openSUSE *Tumbleweed* or, if available, its Slowroll-variant.
+
+In addition, Bernhard posted another [monthly update](https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/VWWVEPYEUBBMZN6K7VGUU5KKC7CBSSM2/) for his work elsewhere in openSUSE.
 
 <br>
 
+
 ### Reproducibility-related changes in Debian
 
 [![]({{ "/images/reports/2023-11/debian.png#right" | relative_url }})](https://debian.org/)
@@ -106,6 +92,18 @@ Back in 2017, [Steve Langasek filed a bug](https://bugs.launchpad.net/launchpad/
 
 <br>
 
+### PHP reproducibility updates
+
+There have been two updates from the PHP programming language this month.
+
+[![]({{ "/images/reports/2023-11/phpunit.png#right" | relative_url }})](https://phpunit.de/)
+
+Firstly, the widely-deployed [PHPUnit](https://phpunit.de/) framework for the PHP programming language have recently released version 10.5.0, which introduces the inclusion of a `composer.lock` file, ensuring total reproducibility of the shipped binary file. Further details and the discussion that went into their particular implementation can be found on the [associated GitHub pull request](https://github.com/sebastianbergmann/phpunit/pull/5576).
+
+In addition, the presentation "[*Leveraging Nix in the PHP ecosystem*](https://phpconference.com/web-development/leveraging-nix-php-ecosystem/)"  has been given in late October at the PHP International Conference in Munichby [Pol Dellaiera](https://github.com/drupol). While the video replay is not yet available, the (reproducible) [presentation slides and speaker notes](https://github.com/drupol/ipc2023/releases/tag/v23-79efbb4c24ab0d42c73906d16233a79d9659c5ca) are available.
+
+<br>
+
 ### diffoscope changes
 
 [![]({{ "/images/reports/2023-11/diffoscope.png#right" | relative_url }})](https://diffoscope.org/)


=====================================
images/reports/2023-11/phpunit.png
=====================================
Binary files /dev/null and b/images/reports/2023-11/phpunit.png differ


=====================================
images/reports/2023-11/postit-rb-summit-hamburg-20231101_small.jpg
=====================================
Binary files a/images/reports/2023-11/postit-rb-summit-hamburg-20231101_small.jpg and b/images/reports/2023-11/postit-rb-summit-hamburg-20231101_small.jpg differ



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/68bcbb176b8a4c4b73fa7c11b87dd3b7f37cd284...23b236cc70f39f68831a526bef8a24037e5a57de

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/68bcbb176b8a4c4b73fa7c11b87dd3b7f37cd284...23b236cc70f39f68831a526bef8a24037e5a57de
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20231206/97aa757b/attachment.htm>
