[Git][reproducible-builds/reproducible-website][master] 2 commits: rbs 2026: unify heading styles
Holger Levsen (@holger)
gitlab at salsa.debian.org
Tue Oct 6 11:45:00 UTC 2026
Holger Levsen pushed to branch master at Reproducible Builds / reproducible-website
Commits:
0bf3958e by Holger Levsen at 2026-10-06T13:24:45+02:00
rbs 2026: unify heading styles
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
fcb1a7e8 by Holger Levsen at 2026-10-06T13:44:53+02:00
rbs 2026: add another foto (and use good sizes)
Signed-off-by: Holger Levsen <holger at layer-acht.org>
- - - - -
8 changed files:
- _events/gothenburg2026/agenda/d2-buildinfrastructure.md
- _events/gothenburg2026/agenda/d2-nonreproducible.md
- _events/gothenburg2026/agenda/d2-rb-security.md
- _events/gothenburg2026/agenda/d2-rb-social.md
- _events/gothenburg2026/agenda/d2-transparency-logging.md
- _events/gothenburg2026/agenda/d3-files.md
- _events/gothenburg2026/agenda/d3-rb-enforcement2.md
- _events/gothenburg2026/agenda/index.md
Changes:
=====================================
_events/gothenburg2026/agenda/d2-buildinfrastructure.md
=====================================
@@ -5,7 +5,7 @@ event: gothenburg2026
order: 50
permalink: /events/gothenburg2026/agenda/d2-buildinfrastructure/
---
-Improve serving and format of buildinfo files
+## Improve serving and format of buildinfo files
- can we include hashes of build dependencies in buildinfo files?
- there will be a discussion with the dpkg maintainer.
=====================================
_events/gothenburg2026/agenda/d2-nonreproducible.md
=====================================
@@ -32,5 +32,6 @@ Idea: use a fuzzer to find an input that makes a test undeterministic. Fuzzer th
Idea: Upstream instructions on how to perform a profiling run. Example: profile.sh which runs the program and outputs instrument binaries, providing profiling information and is determinstic.
-
-
+<a href="https://reproducible-builds.org/_lfs/pictures/rbs26/notes/d2-nonreproducible.jpg">
+ <img src="https://reproducible-builds.org/_lfs/pictures/rbs26/notes/d2-nonreproducible.jpg" width="480" height="852" alt="session notes">
+</a>
=====================================
_events/gothenburg2026/agenda/d2-rb-security.md
=====================================
@@ -5,7 +5,7 @@ event: gothenburg2026
order: 80
permalink: /events/gothenburg2026/agenda/d2-rb-security/
---
-# Security and RB
+## Security and RB
- Should we distinguish between using reproducibility to detect non-malicious vulnerabilities vs. malicious activity?
- Are we using this proactively or reactively?
=====================================
_events/gothenburg2026/agenda/d2-rb-social.md
=====================================
@@ -48,7 +48,7 @@ What do people care about?
### Caching
-### Long term maintance
+### Long term maintenance
## Why not do RB?
=====================================
_events/gothenburg2026/agenda/d2-transparency-logging.md
=====================================
@@ -5,9 +5,8 @@ event: gothenburg2026
order: 100
permalink: /events/gothenburg2026/agenda/d2-transparency-logging/
---
-## transparency-logging
+## why to use transparency logs for rb:
-why to use transparency logs for rb:
- make lies something that people can detect and monitor
- the results of rebuilderd, what distribution, search, merge
@@ -58,7 +57,7 @@ This would let us choose what properties we want fast lookups for *later*.
-----
-How to do it, if you want to use sigsum?
+### How to do it, if you want to use sigsum?
The "rich entry" that contains all the infos (the "row" with metadata) will be
hashed / a checksum, and the monitor tail the log, get these checksums, and go
@@ -73,7 +72,7 @@ logs. One way to do this, is to do the "content resolution" from leaf index
-----
-What about poisoning?
+### What about poisoning?
The fields of the entries (like package name) can be poisoned by the rebuilders
that are on the allow-list of submitters of the logs. One rebuilder that gets
@@ -84,7 +83,7 @@ Where we say "poisoned" here we mean: content that would later want to be remove
-----
-The minimum viable thing
+### The minimum viable thing
a record format that contains the build information, that contains the things
that matters for rb
=====================================
_events/gothenburg2026/agenda/d3-files.md
=====================================
@@ -6,7 +6,7 @@ order: 110
permalink: /events/gothenburg2026/agenda/d3-files/
---
-# Files - what are they even good for?
+## Files - what are they even good for?
- How do we identify a tree of files in a useful way across different RB tools?
- that said, what should be the goal for file set identity?
=====================================
_events/gothenburg2026/agenda/d3-rb-enforcement2.md
=====================================
@@ -45,4 +45,4 @@ Follow-up of a [session on day 2]({{ "/events/gothenburg2026/agenda/d2-rb-enforc
- Exceptions on a package level
- APT implementation details
- Easy sketch
- - How does this work for airgaped environments?
+ - How does this work for airgapped environments?
=====================================
_events/gothenburg2026/agenda/index.md
=====================================
@@ -139,6 +139,10 @@ The group took a small pause before the final session to take stock of the progr
Participants will summarize key outcomes from the event, and discuss next steps for continuing collaboration after the meeting.
+<a href="https://reproducible-builds.org/_lfs/pictures/rbs26/notes/d3-keep-talking.jpg">
+ <img src="https://reproducible-builds.org/_lfs/pictures/rbs26/notes/d3-keep-talking.jpg" width="240" height="426" alt="I want to keep talking about...">
+</a>
+
16.00 Adjourn to Hack Time
19.00 Dinner
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/c205a47911a3a150892c5fa5f117a580143d1a1c...fcb1a7e84c665f2fedc4ed2d157694e69168e190
--
View it on GitLab: https://salsa.debian.org/reproducible-builds/reproducible-website/-/compare/c205a47911a3a150892c5fa5f117a580143d1a1c...fcb1a7e84c665f2fedc4ed2d157694e69168e190
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.reproducible-builds.org/pipermail/rb-commits/attachments/20261006/c4cc5d9c/attachment.htm>
More information about the rb-commits
mailing list