[Git][reproducible-builds/reproducible-presentations][master] 2 commits: toulouse talk: wip
Holger Levsen (@holger)
gitlab at salsa.debian.org
Fri Nov 15 19:05:21 UTC 2024
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-presentations
Commits:
629a0f20 by Holger Levsen at 2024-11-15T20:02:03+01:00
toulouse talk: wip
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
e15eb765 by Holger Levsen at 2024-11-15T20:04:14+01:00
toulouse talk: drop stuff which has been dropped so we can meaningfully grep
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
1 changed file:
- 2024-11-16-R-B-rebuilding-what-is-distributed-from-ftp.debian.org/index.html
Changes:
=====================================
2024-11-16-R-B-rebuilding-what-is-distributed-from-ftp.debian.org/index.html
=====================================
@@ -455,61 +455,6 @@ lunarⒶdebian.org / https://lunar.anargeek.net
<img src="images/logo.png" width="584">
</section>
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <br>
- <h3>We need you!<br> Please support these efforts</h3>
- <ul>
- <li>Do you think reproducible builds should happen?<br> If so, please help. We need your help and support.</li>
- <span class="fragment"><li>The goals of this talk it to recap what we have done and to celebrate 11 years of awesomeness of <b>many</b> with the aim to get you informed, excited & involved.<br>Because a lot of work and support is still needed. We are still far from being done, despite all the progress and successes so far!</li>
- <li class="fragment">It's doable, we can do it together! 💪</li></span>
- </ul>
- </section -->
-
-
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>some ancient history (>10 years ago)</h2>
- <ul>
- <li class="fragment">Thread on debian-devel at lists.debian.org from 2007. Deemed undoable by many.</li>
- </ul>
- </section>
-
-
- <section data-background-color="white" data-transition="none">
- <img class="fragment" src="images/fosdem2014-3.png" width="100%">
- </section>
- <section data-background-color="white" data-transition="none">
- <img class="fragment" src="images/fosdem2014-4.png" width="100%">
- </section>
- <section data-background-color="white" data-transition="none">
- <img class="fragment" src="images/fosdem2014-5.png" width="100%">
- </section>
-
- <section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Ancient history (>10 years ago)</h2>
- <ul>
- <li>Thread on debian-devel at lists.debian.org from 2007. Deemed undoable by many.</li>
- <li class="fragment">Before that a similar idea appeared in 2000 on debian-devel at l.d.o.</li>
- <li class="fragment">And then in 2017 we learned from John Gilmore on rb-general at lists.reproducible-builds.org that GCC was reproducible in the early 1990s on several architectures!</li>
- </ul>
- </section>
-
-
- <section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Fast forward to 2023</h2>
- <ul>
- <p class="fragment">https://lists.zx2c4.com/pipermail/wireguard/2023-April/008045.html
- <br />Wireguard (VPN app for Android) builds are now reproducible, their release is identical on their website, Google Play Store and F-Droid. 🎯🎯🎯🥳
- <br />(it's more complicated than that, see their mail.)</p>
- <p class="fragment">We were not even informed. 🥲 People just do reproducible builds as normal part of their work nowadays. 🤗</p>
- </ul>
- </section>
-
- <section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h3>People just do reproducible builds as normal part of their work nowadays.<h3>
- <p style="font-size: 500%">🤗</p>
-
- </section -->
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h4>By 2024 Reproducible Builds has been widely understood:</h4>
@@ -711,16 +656,6 @@ lunarⒶdebian.org / https://lunar.anargeek.net
</ul>
</section>
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Detour: additional benefits of reproducible builds</h2>
- <ul>
- <li class="fragment">Lower development costs and increased development speed through less developer time wasted on waiting for builds.</li>
- <li class="fragment">Software development: does this change really have no effect / the desired effect only?</li>
- <li class="fragment">Licence compliance: you can only be sure a binary is Free Software if it can be (re-)build reproducibly from a given source.</li>
- <li class="fragment">Reproducible verified SBOMs.</li>
- </ul>
- </section -->
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>37400 bugs in 11 years ~= 9 per day</h3>
<span class="fragment"><img src="images/stats_bugs_state.png">
@@ -821,31 +756,6 @@ Warpforge.
</p>
</section>
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Detour: more unexpected benefits of reproducible builds</h2>
- <ul>
- <li class="fragment">https://bootstrappable.org began as breakout session at the Reproducible Builds Summit 2016 in Berlin.</li>
- <li class="fragment"><em>as I understand it</em> is about bootstrapping toolchain binaries from sources <em>only</em>, except starting from around 500 handwritten bytes of machine code, a very simple assembler is build and then assembled some more, until it can build mes, which can build tinyCC, which can build an ancient GCC which then can build another ancient GCC, which then can be used to build modern GCC and the rest of the universe.</li>
- </ul>
- </section>
-
- <section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Detour: more unexpected benefits of reproducible builds</h2>
- <ul>
- <li>https://bootstrappable.org began as breakout session at the Reproducible Builds Summit 2016 in Berlin.</li>
- <li>Since October 2019, Guix bootstraps by using MesCC—the small C compiler that comes with Mes—to build TinyCC, which is used to build GCC 2.95.0, which then builds GCC 4.7.4. Version 4.7 is the last version of GCC to not require a C++ compiler.<small>(quoted from bootstrappable.org)</small></li>
- </ul>
- </section -->
-
-
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>Reproducible Builds Summit</h2>
- <li class="fragment" style="font-size: 300%">2025</li>
- <li class="fragment">Location and exact dates still undecided</li>
- <li class="fragment">We want you!</li>
- <li class="fragment">Sponsors wanted!</li>
- </section -->
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>Reproducible-builds.org funding</h3>
<ul>
@@ -1078,47 +988,13 @@ Warpforge.
<img src="images/Screenshot_2024-11-15_Arch_Linux_Reproducible_Status.png">
</section>
-
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h2>the following two slides are outdated but everybody loves comic sans so I kept them</h2>
- <p class="fragment">they also help to illustrate why/how we were stuck the last few years:</p>
- </section>
-
- <section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h4>https://beta.tests.reproducible-builds.org/</h4>
- <img src="images/bookworm_full.amd64+all_borked.png">
- </section>
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h3>reproducibility in theory is not enough</h3>
- <ul>
- <li>Then we need rebuilders. Remember: we only have had CI builders for the last 10 years, but what we really want is to be able to rebuild what is distributed on ftp.debian.org.</li>
- <li class="fragment">Thus we need a working <code>snapshot.debian.org</code> service.</li>
- <li class="fragment">Without snapshot.d.o we cannot recreate the exact same environments...</li>
- <li class="fragment">but snapshot was buggy: <strike>#1050815, #1031628, #1029744, #1034000</strike>, #1012559, #979115, <strike>#969603</strike>… </li>
- <li class="fragment">And there we <b>had</b> been stuck for more than five years... (as the bugs above weren't fixed until last month.)</li>
- </ul>
- </section -->
-
-
-
-
-
-
-
-
-
-
-
-
- <!-- section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
- <h4>and so <i>now finally</i> we can rebuild and compare with what we distribute on ftp.debian.org:</h4>
- <img src="images/bookworm_full.amd64+all.png" width="60%">
- <ul>
- <li>needs re-setup...</li>
- <li class="fragment">archlinux rebuilderd could also be used</li>
- </ul>
- </section -->
+ <h3>the difference between theory and praxis?</h3>
+ <span class="fragment">
+ <h1>63% !</h1>
+ <h3>(96% vs 33%)</h3>
+ </span>
+ </section>
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>more Debian Reproducible Builds successes</h3>
@@ -1129,15 +1005,12 @@ Warpforge.
</ul>
</section>
-
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<h3>Theory vs Praxis</h3>
<ul>
<li>In theory, we are done. In practice, we have shown that reproducible builds can be done in theory.</li>
<li class="fragment">For Debian we now need to setup rebuilders (!= CI builders) and we need to store the results somewhere and we need to define criterias how tools should treat that data, and then we need those tools...</li>
<li class="fragment">And those missing 5% are also crucial however, or at least 1% of them. For Debian, 1% means 300 softwares...</li>
-
</ul>
</section>
@@ -1155,16 +1028,6 @@ Warpforge.
</ul>
</section>
-
- <!--========================================================= -->
-
-
-
-
-
-
-
-
<section data-background="images/Capitole_du_libre_logo.png" data-background-size="10%" data-background-position="93% 9%" data-transition="none">
<img src="images/lunar2.jpg" style="height: 350px;">
<h2>
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/compare/25c80e6d387807298f2e716f6fee5f98eea14a72...e15eb76597af417f745ca91e93dc92e26cf9f287
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-presentations/-/compare/25c80e6d387807298f2e716f6fee5f98eea14a72...e15eb76597af417f745ca91e93dc92e26cf9f287
You're receiving this email because of your account on salsa.debian.org.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20241115/b4ed2127/attachment.htm>
More information about the rb-commits
mailing list