[Git][reproducible-builds/reproducible-presentations][master] 5 commits: Breaking the chains... status of debian and build-essential

[Vagrant Cascadian (@vagrant)]

Vagrant Cascadian pushed to branch master at Reproducible Builds / reproducible-presentations


Commits:
15b2dd71 by Vagrant Cascadian at 2023-07-14T14:25:06-07:00
Breaking the chains... status of debian and build-essential

- - - - -
5b41202e by Vagrant Cascadian at 2023-07-14T15:46:43-07:00
breaking the chains ... guix reproducibility info

- - - - -
ec78c5d4 by Vagrant Cascadian at 2023-07-14T15:46:43-07:00
breaking the chains ... archlinux

- - - - -
ae991416 by Vagrant Cascadian at 2023-07-14T15:46:43-07:00
breaking the chains ... and several other projects...

- - - - -
0297f49c by Vagrant Cascadian at 2023-07-14T15:46:43-07:00
breaking the chains ... misses and wishes and not enough

- - - - -


1 changed file:

- 2023-07-16-Breaking_the_Chains_of_Trusting_Trust/Breaking_the_Chains_of_Trusting_Trust.org


Changes:

=====================================
2023-07-16-Breaking_the_Chains_of_Trusting_Trust/Breaking_the_Chains_of_Trusting_Trust.org
=====================================
@@ -263,6 +263,106 @@ identical copies of all specified artifacts.
 - *And we all forgot.*
 - In 2011 and 2012, Bitcoin and Torbrowser were made reproducible...
 
+* Status in Debian
+
+Debian
+
+  #+ATTR_BEAMER: :overlay <+->
+- ~34000 source packages
+- ~95% reproducible
+- in theory...
+- many submitted patches
+
+* Debian: gcc and binutils
+
+gcc and binutils
+
+  #+ATTR_BEAMER: :overlay <+->
+- test suite logs
+- PGO (Profile Guided Optimiziation)
+- LTO (Link Time Optimization)
+
+* Debian: linux
+
+linux
+
+  #+ATTR_BEAMER: :overlay <+->
+- documentation randomness
+- other unidentified issues
+- fixes available
+  https://bugs.debian.org/1033663
+  https://salsa.debian.org/kernel-team/linux/-/merge_requests/741
+- well, partial fixes, anyways...
+
+* Debian: libzstd
+
+libzstd
+
+- recent regression
+
+* Status in Guix
+
+GNU Guix
+
+#+ATTR_BEAMER: :overlay <+->
+- ~87% reproducible
+- in practice!
+- 21594 Reproducible!
+- 1559 Unreproducible...
+- 1692 Unknown...
+
+* Guix made for success
+
+GNU Guix
+
+#+ATTR_BEAMER: :overlay <+->
+- reproducible by design
+- normalized build environment
+- guix challenge
+- two build farms to compare against
+
+* Arch Linux
+
+Arch Linux
+
+https://reproducible.archlinux.org/
+
+#+ATTR_BEAMER: :overlay <+->
+- ~14000 packages
+- ~86% reproducible
+- in practice!
+
+* But wait, there is more!
+
+#+ATTR_BEAMER: :overlay <+->
+- NetBSD 84%
+- OpenWRT 96%-100%
+- Coreboot 100%
+- NixOS 95%-99.7%
+- Yocto 99.98%
+- openEuler 96%
+- openSUSE mostly reproducible (caveats apply)
+
+* We miss you!
+
+We once had testing for...
+
+- Alpine
+- Fedora
+
+* I am not picky about the color of your hat
+
+Wishlist based on current events...
+
+- AlmaLinux
+- Rocky Linux
+
+* Proof Pudding
+
+Reproducible Builds is totally possible...
+
+...But it only provides one strong link in a chain
+
 * Building on a solid foundation of turtles
 
   https://bootstrappable.org



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/compare/28be7410bbd91510b37a41b080e3b240945c3034...0297f49c95d01860462f2e2b5865313047c131bb

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/compare/28be7410bbd91510b37a41b080e3b240945c3034...0297f49c95d01860462f2e2b5865313047c131bb
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20230714/28fc2bec/attachment.htm>