[Git][reproducible-builds/reproducible-website][master] 2024-09: small improvements

Thu Oct 3 22:34:15 UTC 2024


FC (Fay) Stegerman pushed to branch master at Reproducible Builds / reproducible-website


Commits:
0afd7a2c by FC (Fay) Stegerman at 2024-10-04T00:34:00+02:00
2024-09: small improvements

- - - - -


1 changed file:

- _reports/2024-09.md


Changes:

=====================================
_reports/2024-09.md
=====================================
@@ -50,13 +50,13 @@ The [linked merge request](https://gitlab.haskell.org/ghc/ghc/-/merge_requests/1
 
 On [our mailing list](https://lists.reproducible-builds.org/listinfo/rb-general/) this month:
 
-* Fay Stegerman let everyone know that they had started an [thread on the Fediverse](https://tech.lgbt/@obfusk/113081697577399562) about the problem unreproducible `zlib`/`deflate` compression in `.zip` and `.apk` files. [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003526.html)]
+* Fay Stegerman [let everyone know](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003526.html) that she started a [thread on the Fediverse](https://tech.lgbt/@obfusk/113081697577399562) about the problems caused by unreproducible `zlib`/`deflate` compression in `.zip` and `.apk` files and later [followed up](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003547.html) with the results of her subsequent investigation.
 
 * Long-time developer *kpcyrd* wrote that "there has been [a recent public discussion](https://gitlab.archlinux.org/archlinux/packaging/packages/linux/-/merge_requests/1) on the [Arch Linux](https://archlinux.org/) GitLab [instance] about the challenges and possible opportunities for making the Linux kernel package reproducible", all relating to the `CONFIG_MODULE_SIG` flag. [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003530.html)]
 
 * Bernhard M. Wiedemann followed-up to an in-person conversation at our recent [Hamburg 2024 summit]({{ "/events/hamburg2024/" | relative_url }}) on the potential presence for Reproducible Builds in recognised standards. [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003539.html)]
 
-* Fay Stegerman also wrote about her worry about the "possible repercussions for RB tooling of Debian migrating from `zlib` to `zlib-ng`" due the subtleties of backwards- and forwards-compatibility of compression. [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003543.html)]
+* Fay Stegerman also wrote about her worry about the "possible repercussions for RB tooling of Debian migrating from `zlib` to `zlib-ng`" as reproducibility requires identical compressed data streams. [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003543.html)]
 
 * [Martin Monperrus](https://www.monperrus.net/martin/) wrote the list announcing the latest release of [`maven-lockfile`](https://github.com/chains-project/maven-lockfile/) that is designed aid "building Maven projects with integrity". [[…](https://lists.reproducible-builds.org/pipermail/rb-general/2024-September/003544.html)]
 
@@ -151,7 +151,7 @@ In addition, [*reprotest*](https://salsa.debian.org/reproducible-builds/reprotes
 
 ### Android toolchain core count issue reported
 
-Fay Stegerman aka. *obfusk* [reported an issue with the Android toolchain](https://issuetracker.google.com/issues/366412380) where a part of the build system generates a different `classes.dex` file (and thus a different `.apk`) depending on a number of cores, thereby breaks Reproducible Builds:
+Fay Stegerman [reported an issue with the Android toolchain](https://issuetracker.google.com/issues/366412380) where a part of the build system generates a different `classes.dex` file (and thus a different `.apk`) depending on a number of cores, thereby breaking Reproducible Builds:
 
 > We've rebuilt [[tag `v3.6.1`]](https://github.com/TheLastProject/ShareToInputStick/releases/tag/v3.6.1) multiple times (each time in a fresh container): with 2, 4, 6, 8, and 16 cores available, respectively:
 >
@@ -233,7 +233,7 @@ The Reproducible Builds project detects, dissects and attempts to fix as many cu
     * [`python312`](https://build.opensuse.org/request/show/1204725) (drop `.pyc` from documentation time)
     * [`scap-security-guide`](https://bugzilla.opensuse.org/show_bug.cgi?id=1230361) (date)
     * [`seahorse`](https://gitlab.gnome.org/GNOME/seahorse/-/issues/394) (parallelism)
-    * [`subversion`](https://build.opensuse.org/request/show/1203785) (minor Java `.jar` modication times)
+    * [`subversion`](https://build.opensuse.org/request/show/1203785) (minor Java `.jar` modification times)
     * [`xen/acpica`](https://bugzilla.opensuse.org/show_bug.cgi?id=1230856) (date-related issue in toolchain)
     * [`xmvn`](https://github.com/fedora-java/xmvn/commit/1f79bc89caf3a75556a72430a524df84a16bde2b) (random)
     * [`xmvn`](https://github.com/fedora-java/xmvn/pull/298) (various fixes by Fridrich Strba)
@@ -268,7 +268,7 @@ The Reproducible Builds project operates a comprehensive testing framework runni
     * Add support for powercycling OpenStack instances. [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/74c2c0534)]
     * Update the [`fail2ban`](https://github.com/fail2ban/fail2ban) to ban hosts for 4 weeks in total [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/7869acbc2)][[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/30c12eb56)] and take care to never ban our own [Jenkins](https://www.jenkins.io/) instance. [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/ad7800062)]
 
-In addition, Vagrant Cascadian recorded a disk failure for the `virt32b` and `virt64b` nodes [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/919810c8b)], performed some maintenance of the `cbxi4a` node [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/d4a48600d)][[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/145c7969d)] and marked most `armhf` architecture systems as being back online. 
+In addition, Vagrant Cascadian recorded a disk failure for the `virt32b` and `virt64b` nodes [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/919810c8b)], performed some maintenance of the `cbxi4a` node [[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/d4a48600d)][[…](https://salsa.debian.org/qa/jenkins.debian.net/commit/145c7969d)] and marked most `armhf` architecture systems as being back online.
 
 <br>
 



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/0afd7a2c6641b3ce373cb2da6620a784dd04171c

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/0afd7a2c6641b3ce373cb2da6620a784dd04171c
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20241003/00b55714/attachment.htm>
