[Git][reproducible-builds/reproducible-presentations][master] fosdem 2024: cleanup & update todo after talk
Holger Levsen (@holger)
gitlab at salsa.debian.org
Sun Feb 4 16:26:39 UTC 2024
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-presentations
Commits:
3d56ed5f by Holger Levsen at 2024-02-04T17:13:27+01:00
fosdem 2024: cleanup & update todo after talk
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
2 changed files:
- 2024-02-03-R-B-the-first-10-years/index.html
- 2024-02-03-R-B-the-first-10-years/todo
Changes:
=====================================
2024-02-03-R-B-the-first-10-years/index.html
=====================================
@@ -172,7 +172,7 @@
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<p>Who am I</p>
<ol>
- <li>Holger Levsen / holger at debian.org, located in Hamburg, Germany. Born at 329 ppm. He/him. 🏳️🌈🏳️⚧️🖤</li>
+ <li>Holger Levsen / holger at debian.org, located in Hamburg, Germany. Born at 329 ppm. He/him. 🏳️🌈🏳️⚧️🖤😷</li>
<li>Debian user since 1995, contributing since 2001, Debian member since 2007. I ❤️ Debian.</li>
<li><span class="fragment">FOSDEM 2005 was my first love^wFOSDEM. In 2014 we managed to do video for all the rooms for the 1<sup><small>st</small></sup> time.
</span></li>
@@ -1095,12 +1095,13 @@ Warpforge.
<li class="fragment">100% reproducible is a political decision and nothing technical.</h3>
<li class="fragment">We need to change <code>debian-policy</code>!</li>
<li class="fragment">We can work around 'must-have-offenders' using whitelists in the beginning.</li>
+ <li class="fragment">The goal is still 100%, whitelists are just a way to achieve that goal eventually.</li>
</ul>
</section>
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h2>Debian <em>testing</em> migration</h2>
- <ul>
+ <ul style="font-size: 94%">
<li>since the end of 2023, CI reproducible-builds results are included in the excuses output for Debian testing migration, but there is no penalty nor bonus yet.</li>
<li>in 2025 for Debian 14 "<em>forky</em>" however there should penalties for violating:
<ul>
@@ -1114,7 +1115,7 @@ Warpforge.
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h4>https://beta.tests.reproducible-builds.org/debian</h4>
+ <h4>rebuilders https://beta.tests.reproducible-builds.org/debian</br>(these are not CI builds anymore)s</h4>
<img src="images/bookworm_full.amd64+all.png">
</section>
@@ -1130,12 +1131,18 @@ Warpforge.
</ul>
</section>
+ <section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
+ <h4>rebuilders https://beta.tests.reproducible-builds.org/</h4>
+ <img src="images/bookworm_full.amd64+all_borked.png">
+ </section>
+
+
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>fixing snapshot.d.o</h3>
<ul>
<li>150 TB of data for 20 years</li>
<li>4 pushes per day, adding 70 GB each.</li>
- <li class="fragment">a fun project to fix, so they gave me git commit access and made me a member of the Debian snapshot LDAP group.</li>
+ <li class="fragment">a fun project to fix, so they gave me git commit access and made me a member of the Debian snapshot LDAP group. 🙈</li>
<li class="fragment">I'm honored but we need something soon.</li>
</ul>
</section>
@@ -1155,7 +1162,7 @@ Warpforge.
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>https://rebuilder-snapshot.debian.net</h3>
<ul>
- <li>a cache in for snapshot.debian.org, which stores only the packages used as build-depends <em>today</em></li>
+ <li>a cache in for snapshot.debian.org, which stores only the packages used as build-depends <em>today</em></li> and makes them available via SHA256, path and an API.
<li class="fragment">each arch takes roughly a week to seed from snapshot.d.o</li>
<li class="fragment">each arch only takes hours to seed from another rebuilder-snapshot instance</li>
<li class="fragment">we already run two instances and our goal is to allow many instances</li>
@@ -1166,23 +1173,31 @@ Warpforge.
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>https://rebuilder-snapshot.debian.net</h3>
<ul>
- <li>a cache in for snapshot.debian.org, which stores only the packages used as build-depends <em>today</em></li>
- <li class="fragment">so <em>debrebuild</em> can use <em>debootsnap</em> together with <em>metasnap</em></li>
+ <li>a cache in for snapshot.debian.org, which stores only the packages used as build-depends <em>today</em></li> and makes them available via SHA256, path and an API.
+ <li class="fragment">so <em>debrebuild</em> can use <em>debootsnap</em> together with <em>metasnap</em> to establish trust.</li>
<li class="fragment">one blocking bug currently: issue #40</li>
- <li class="fragment">Many thanks to lynxis and josch!</li>
+ <li class="fragment">hopefully usable RSN. Many thanks to lynxis and josch!</li>
</ul>
</section>
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>Debian 2024</h3>
<ul>
- <li>testing migration can and will be used to enforce policy also in regards of reproducible builds</li>
+ <li>testing migration can and will be used to enforce policy also in regards of reproducible builds (probably only enforcing for real in 2025...)</li>
<li class="fragment">for a sensible setup of that, we need real rebuilders, aiming to rebuild what Debian distributes.</li>
<li class="fragment">for that, we need a working snapshot.d.o, which with rebuilder-snapshot now finally is there.</li>
<li class="fragment">CI builds will stay, to find issues. Rebuilders are needed to show the absence of issues.</li>
</ul>
</section>
+ <section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
+ <h3>Short overview of reproducibility of various projects (AIUI)</h3>
+ <ul>
+ <li class="fragment">this section is outdated and incomplete...</li>
+ <li class="fragment">I'm sorry.</li>
+ <li class="fragment">and very happy there's so much great stuff going on.</li>
+ </ul>
+ </section>
<section data-background="images/FOSDEM_logo.svg" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>Short overview of reproducibility of various projects (AIUI)</h3>
=====================================
2024-02-03-R-B-the-first-10-years/todo
=====================================
@@ -1,29 +1,5 @@
-non functional image of beta.tr.o
-still rough: around
- Then we need rebuilders.
- beta.tests
-rebuilder-snapshot still not mentioned, but fits somewhere there
- explain its concept
-
-summary at the end
- 2 big news 2023/2024 testing migration & rebuilder snapshot, eventually both for real
-
-
-snapshot.d.o
- archlinux archive.org
- ubuntu nice with launchpad
- fedora and suse: no idea
-rebuilder-snapshot
- explain the idea based on the observed numbers
- #42
- metasnap
-sideremark:
- someone should please do a reproducible binary fork of debian stable.
- or another reproducible distro!
-
-Policy is not a stick to beat developers with.
-The release team is nicer: very nice package you're having there, wouldn't it be a sad if this package would not be allowed in Debian testing and thus stable?<
-
+missing a bit in talk & slides: snapshot.d.o is awesome, and not only buggy. and we need it.
+the end could be a bit clearer...
what is success?
"theoretical?" & for users?
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/3d56ed5fa654b6be38c72734d4a85e968c013a46
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/commit/3d56ed5fa654b6be38c72734d4a85e968c013a46
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20240204/19881c52/attachment.htm>
More information about the rb-commits
mailing list