[Git][reproducible-builds/reproducible-website][master] 2025-11: Merge the repro-threshold news!

[Chris Lamb (@lamby)]

Chris Lamb pushed to branch master at Reproducible Builds / reproducible-website


Commits:
6e94e1f8 by Chris Lamb at 2025-12-03T11:41:02-08:00
2025-11: Merge the repro-threshold news!

- - - - -


2 changed files:

- _reports/2025-11.md
- + images/reports/2025-11/repro-threshold.png


Changes:

=====================================
_reports/2025-11.md
=====================================
@@ -39,11 +39,13 @@ Founded in 2013, SeaGL is a free, grassroots technical summit dedicated to sprea
 
 In **Debian** this month, Jochen Sprickerhof [created a merge request](https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/678) to replace the use of *reprotest* in Debian's [Salsa Continuous Integration (CI) pipeline](https://salsa.debian.org/salsa-ci-team/pipeline/-/blob/master/README.md) with *debrebuild*. Joschen cites the advantages as being threefold: firstly, that "only one extra build needed"; it "uses the same `sbuild` and `ccache` tooling as the normal build"; and "works for any Debian release". The merge request was merged by Emmanuel Arias and is now active.
 
-Holger then merged [two commits by Jochen Sprickerhof](https://salsa.debian.org/installer-team/debian-installer/-/merge_requests/68) in order to address a `fakeroot`-related reproducibility issue in the `debian-installer`.
+[![]({{ "/images/reports/2025-11/repro-threshold.png#right" | relative_url }})](https://github.com/kpcyrd/repro-threshold)
 
-Jörg Jaspert deployed a [patch by Ivo De Decker](https://salsa.debian.org/ftp-team/dak/-/merge_requests/287) for a bug originally [filed by Holger in February 2025](https://bugs.debian.org/1096129) related to some Debian packages not being archived on [*snapshot.debian.org*](http://snapshot.debian.org/).
+*kpcyrd* posted to [our mailing list](https://lists.reproducible-builds.org/pipermail/rb-general/) announcing the initial release of [`repro-threshold`](https://github.com/kpcyrd/repro-threshold), which implements an [APT](https://en.wikipedia.org/wiki/APT_(software)) transport that "defines a threshold of *at least X of my N trusted rebuilders need to confirm they reproduced the binary*" before installing Debian packages. "Configuration can be done through a config file, or through a  curses-like user interface.
 
-[Roland Clobus performed some analysis](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003937.html) on the "live" Debian *trixie* images, which he determined were not reproducible. However, [in a follow-up post](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003947.html), Roland happily report that the [issues have been handled](https://salsa.debian.org/live-team/live-build/-/merge_requests/450). In addition, 145 reviews of Debian packages were added, 12 were updated and 15 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+Holger then merged [two commits by Jochen Sprickerhof](https://salsa.debian.org/installer-team/debian-installer/-/merge_requests/68) in order to address a `fakeroot`-related reproducibility issue in the `debian-installer`, and Jörg Jaspert deployed a [patch by Ivo De Decker](https://salsa.debian.org/ftp-team/dak/-/merge_requests/287) for a bug originally [filed by Holger in February 2025](https://bugs.debian.org/1096129) related to some Debian packages not being archived on [*snapshot.debian.org*](http://snapshot.debian.org/).
+
+Elsewhere, [Roland Clobus performed some analysis](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003937.html) on the "live" Debian *trixie* images, which he determined were not reproducible. However, [in a follow-up post](https://lists.reproducible-builds.org/pipermail/rb-general/2025-November/003947.html), Roland happily report that the [issues have been handled](https://salsa.debian.org/live-team/live-build/-/merge_requests/450). In addition, 145 reviews of Debian packages were added, 12 were updated and 15 were removed this month adding to [our knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
 
 Lastly, Jochen Sprickerhof [filed a bug](https://bugs.debian.org/1121479) announcing their intention to "[binary NMU](https://wiki.debian.org/binNMU)" a very large number of the [R programming language](https://www.r-project.org/) after a [reproducibility-related toolchain bug](https://bugs.debian.org/1089197) was fixed.
 


=====================================
images/reports/2025-11/repro-threshold.png
=====================================
Binary files /dev/null and b/images/reports/2025-11/repro-threshold.png differ



View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/6e94e1f8f42cd07421cbe0192ee191cc851b9a59

-- 
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/commit/6e94e1f8f42cd07421cbe0192ee191cc851b9a59
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20251203/fbedd07f/attachment.htm>