[rb-general] Bug#926242: jenkins.debian.org: Please test reproducibility status of Debian Installer images

[Chris Lamb]

Hi Cyril,

> > Devil's advocate: this is surely unlikely to break the release of
> > buster itself? I mean, for the "final" official buster builds, that is?
> 
> That's exactly the point: I don't think it's unlikely. […]

Could you elaborate on this bit? sources.list(5) options aren't /that/
common, in my experience. I ACK the lack of visibility until it hits
buildds, thanks for explaining that.

> As a middle ground, how does the following sound? First test this in
> unstable with the first alpha for bullseye, and possible backport it
> in a point release?

Ah, a point release might be the thing. Indeed, we might need some
other tiny changes to be reproducible that only become visible once we
can do the aforementioned extensive testing.

In the meantime, Mattia: I wonder if we could hack something specific
for src:debian-installer in addition to the network access exception?

For example, my reading of:

     683         if [ "$(MIRROR)x" != "x" ]; then \
     684                 echo "deb $(MIRROR) $(USE_UDEBS_FROM) $(UDEB_COMPONENTS)"; \
     685                 if [ "$(USE_UNRELEASED)" = 1 ]; then \
     686                         echo "deb $(MIRROR) unreleased $(UDEB_COMPONENTS)"; \
     687                 fi \
     688         else \
     689                 gen-sources.list.udeb "$(SYSTEM_SOURCES_LIST)" $(USE_UDEBS_FROM) $(UDEB_COMPONENTS) $(USE_PROPOSED_UPDATES); \
     690                 if [ "$(USE_UNRELEASED)" = 1 ]; then \
     691                         gen-sources.list.udeb "$(SYSTEM_SOURCES_LIST)" unreleased $(UDEB_COMPONENTS); \
     692                 fi \
     693         fi) > $@

… suggests that if we could export "MIRROR" pointing to (literally)
"[check-valid-until=no] http://deb.debian.org/debian" (!).


Regards,

-- 
      ,''`.
     : :'  :     Chris Lamb
     `. `'`      lamby at debian.org 🍥 chris-lamb.co.uk
       `-