Sixth status update about reproducible live-build ISO images in Jenkins

[Roland Clobus]

Hello lists,

here is the sixth update of the status for reproducible live-build ISO 
images [1].

New and changed:
* Perl sorting issues in dictionaries-common [3][4] have entered bookworm.
* libxmlb used a pointer address (%p) for a hash value. Upstream [5] has 
been fixed, it is not released yet to sid.
* texlive-base: Reported differences in the generated ls-R [6], patch is 
provided.
* texlive-base: More sources for non-reproducibility are noted in the 
Wiki page [1].
* Wiki page updates [1]:
** Added information about the required size and requirements for the 
mount point.
** Restructured the page to place the configuration section more 
prominently.
* For local image building, I've switched to uncompressed HDD images. 
This saves a lot of time, because the squashfs compression is skipped.
** Several bugfixes related to HDD image building for live-build have 
landed in the git repo [7].
* Migrated the reproducible hook script from the Wiki page and the copy 
in Jenkins to the live-build repo [8]

Future plans/ideas:
* OpenQA: No progress yet
* Recording the configuration used by live-build
** Next step: test some scenarios and write a proposal
** No progress yet
* Reprotest might be used instead of just 2 builds without a short time 
frame, to capture more variations
* Use disorderfs
* Long term: When live-build images are working fine, the work could be 
extended to other images, e.g. the live-wrapper images, the netinst 
images or perhaps even Docker images
* When it is ready, switch to snapshot.reproducible-builds.org?

With kind regards,
Roland Clobus

[1] https://wiki.debian.org/ReproducibleInstalls/LiveImages
[2] https://jenkins.debian.net/view/live/
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000674
[4] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000685
[5] https://github.com/hughsie/libxmlb/issues/110
[6] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003449
[7] https://salsa.debian.org/live-team/live-build/-/commits/master/
[8] https://salsa.debian.org/live-team/live-build/-/merge_requests/268
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20220124/ad5782e6/attachment.sig>