[rb-general] Yocto Project interest in reproducible builds

[Holger Levsen]

Hi Richard,

On Sat, Dec 10, 2016 at 10:31:59PM +0000, Richard Purdie wrote:
> We haven't spelt this out specifically (as yet) but we have a few
> things going on:

wow, neato!

[lots of interesting stuff not quoted…!]

> We're not here today with this but where we identify problems, we aim
> to fix them. We plan to do more testing to find issues.

I think continuous testing and graphing the success rate is a pretty
good way to track progress and motivate!

I'd be glad to build Yocto on tests.reproducible-builds.org as we tests
openwrt/lede etc… or link/redirect from
https://tests.reproducible-builds.org/yocto

> So in many ways our overall project objectives are already aligned,
> we've just been doing it without spelling it out. 

*nods*

> There are various
> reasons this is becoming something we as a project need to focus on
> though and make sure we get right.

cool!

> One big advantage we have compared with something like debian is that
> that we can rebuild everything from the ground up for our core test
> images in around 20-60 mins depending on the build hardware available.
> Its therefore very easy for us to compare two build configurations side
> by side, spot differences and then also test that differences are
> resolved.

we've split this into 25000 nice little pieces, so it's bearable 8-)

> Is there anything specific you want to know or any areas you think we
> may be able to help specifically?
 
nothing I can think of atm.

> > at https://reproducible-builds.org/events/berlin2016/ (and still!
> > even
> > though it's now pretty short notice…)
> 
> Personally, I've ended up with a conflict this week and can't make it
> which I'm disappointed about. I did try and find someone else but
> travel budget is proving very hard to find at the moment too.

ah, pity…

> I am raising the profile of reproducibility within the project and you
> should see some people starting to get involved in various ways over
> the coming weeks/months though.

looking forward!

> I haven't forgotten about adding the project to the list of supporters
> on the website and am also planning to join the irc meeting. Are there
> any other steps you think we could take?

put the above (quoted and not-quoted) in a blog post or in a wiki or
such, so there is something we can link to from
https://reproducible-builds.org/who/ and then send a patch for that
website.git including the yocto logo - that way we an signal we agree on
the same principles and you might attract some folks wanting to work on
this!


-- 
cheers,
	Holger
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 811 bytes
Desc: Digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20161210/bd69a272/attachment.sig>