Monthly status update about reproducible live-build ISO images

[Roland Clobus]

Hello lists,

here is the 15th update of the status for reproducible live-build ISO 
images [1].

Single line summary: The live images stayed reproducible.

Reproducible status:
* All major desktops build reproducibly with bullseye, bookworm and sid
* Number of patches performed by the live-build script that are not yet 
in sid: zero! (0)

My activities in November:
* I've announced that live images can be generated again for Bookworm [10]
** I've received private replies, to be answered soon
* First modifications in live-setup [11]
** Some changes have already been cherry-picked, more work is needed
* Rebuild script has been adjusted to fix the red Jenkins tests for 
Bullseye [14][15]
* Minor Jenkins update [16]
* Some more tests in openQA have been adjusted [12][13]

Functionality: Findings found by openQA (for sid):
* Several desktops (cinnamon, lxde, xfce, mate) now have the 'lpr' as a 
default printer, which adds many numbered 'Print to Test Printer NN' entries
* KDE: The default background image type changed from svg to png (and 
therefore the background is black) (#1021816)
* LXQT: Should choosing LXQt as DE really install both Kwin & Xfwm4? 
(#1023472)
* LXQT: Irrespective of which WM is chosen, the desktop crashes

Work to be done:
* Live images are not generated officially by Debian yet
** Needs additional changes in 'live-setup'
** This will be the next main target
* Review the results of the generated ISO images in my local openQA instance
* Add a test for the Calamares installer in openQA
* Use a no-network scenario in openQA to test for 100% offline installation
* Adjusting the content of the live-build image
** Make the boot menu more similar to the live-wrapper menu
** Add a 'persistent' option (as seen in Kali)
** Keep the accessibility improvements made in the live-wrapper boot menu
** Verify the package lists
*** e.g. the Debian Reference is installed for es and it, but not en

Unchanged, but low priority due to [7], patch available but not released 
yet:
* texlive-base: Reported differences in the generated ls-R [2]
* texlive-binaries: Randomness in .fmt files due to Lua hash seeds [3]
* texlive-binaries: updmap creates a logfile with the timestamps of 
files that it just has generated [4]

Future plans/ideas:
* Reprotest might be used instead of just 2 builds without a short time 
frame, to capture more variations
* Use disorderfs
* Transfer the special features of the (now disabled) live-wrapper live 
images to live-build

With kind regards,
Roland Clobus

[1] https://wiki.debian.org/ReproducibleInstalls/LiveImages
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1003449
[3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1009196
[4] 
https://salsa.debian.org/live-team/live-build/-/commit/f1a98e4da62c3551f523553c6e23774aaf5e41b4
[7] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1006472
[9] https://lists.debian.org/debian-devel/2022/09/msg00199.html
[10] https://lists.debian.org/debian-devel/2022/11/msg00221.html
[11] https://salsa.debian.org/images-team/live-setup/-/merge_requests/2
[12] 
https://salsa.debian.org/qa/openqa/openqa-tests-debian/-/merge_requests/16
[13] 
https://salsa.debian.org/qa/openqa/openqa-tests-debian/-/merge_requests/17
[14] https://salsa.debian.org/live-team/live-build/-/merge_requests/293
[15] 
https://salsa.debian.org/qa/jenkins.debian.net/-/commit/e237cab3ed87826b1c25b068b88fabcecf020d21
[16] 
https://salsa.debian.org/qa/jenkins.debian.net/-/commit/a9a967576104a38e45464d0f73544fd66df98aa8
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.reproducible-builds.org/pipermail/rb-general/attachments/20221129/ad742021/attachment.sig>