Reproducible Builds in August 2025 💠
Chris Lamb
chris at reproducible-builds.org
Mon Sep 8 19:24:12 UTC 2025
--------------------------------------------------------------------
o
⬋ ⬊ August 2025 in Reproducible Builds
o o
⬊ ⬋ https://reproducible-builds.org/reports/2025-08/
o
--------------------------------------------------------------------
Welcome to the latest report from the Reproducible Builds project for
August 2025. These monthly reports outline what we've been up to over
the past month, and highlight items of news from elsewhere in the
increasingly important area of software supply-chain security.
If you are interested in contributing to the Reproducible Builds
project, please see the "Contribute" [0] page on our website.
[0] https://reproducible-builds.org/contribute/
§
In this report:
* Reproducible Builds Summit 2025
* Reproducible Builds and "live-bootstrap" at WHY2025
* DALEQ Explainable Equivalence for Java Bytecode
* Reproducibility regression identifies issue with AppArmor security policies
* Rust toolchain fixes
* Distribution work
* diffoscope
* Website updates
* Reproducibility testing framework
* Upstream patches
§
Reproducible Builds Summit 2025
-------------------------------
Please join us at the upcoming Reproducible Builds Summit [4], set to
take place from October 28th — 30th 2025 in Vienna, Austria!
We are thrilled to host the eighth edition of this exciting event,
following the success of previous summits in various iconic locations
around the world, including Venice, Marrakesh, Paris, Berlin, Hamburg
and Athens. Our summits are a unique gathering that brings together
attendees from diverse projects, united by a shared vision of
advancing the Reproducible Builds effort.
During this enriching event, participants will have the opportunity to
engage in discussions, establish connections and exchange ideas to
drive progress in this vital field. Our aim is to create an inclusive
space that fosters collaboration, innovation and problem-solving.
If you're interesting in joining us this year, please make sure to
read the event page which has more details about the event and
location. Registration is open until 20th September 2025, and we are
very much looking forward to seeing many readers of these reports
there!
[4] https://reproducible-builds.org/events/vienna2025/
§
Reproducible Builds and "live-bootstrap" at WHY2025
---------------------------------------------------
WHY2025 [6] (What Hackers Yearn) is a nonprofit outdoors hacker camp
that takes place in Geestmerambacht in the Netherlands (approximately
40km north of Amsterdam). The event is "organised for and by
volunteers from the worldwide hacker community, and knowledge sharing,
technological advancement, experimentation, connecting with your
hacker peers, forging friendships and hacking are at the core of this
event".
At this year's event, Frans Faase gave a talk on live-bootstrap [7],
an attempt to "provide a reproducible, automatic, complete end-to-end
bootstrap from a minimal number of binary seeds to a supported fully
functioning operating system".
Frans' talk is available to watch on video [8] and his slides are
available [9] as well.
[6] https://why2025.org/
[7] https://iwriteiam.nl/livebootstrap.html
[8] https://cdn.media.ccc.de/events/why2025/h264-hd/why2025-139-eng-Reviewing_live-bootstrap_hd.mp4
[9] https://www.iwriteiam.nl/WHY2025_talk.html
§
"DALEQ Explainable Equivalence for Java Bytecode"
-------------------------------------------------
Jens Dietrich of the Victoria University of Wellington, New Zealand and
Behnaz Hassanshahi of Oracle Labs, Australia published an article this
month entitled "DALEQ — Explainable Equivalence for Java Bytecode" [11]
which explores the options and difficulties when Java binaries are not
identical despite being from the same sources, and what avenues are
available for proving equivalence despite the lack of
bitwise correlation:
> [Java] binaries are often not bitwise identical; however, in most
> cases, the differences can be attributed to variations in the build
> environment, and the binaries can still be considered equivalent.
> Establishing such equivalence, however, is a labor-intensive and
> error- prone process.
Jens and Behnaz therefore propose a tool called DALEQ, which:
> disassembles Java byte code into a relational database, and can
> normalise this database by applying Datalog [12] rules. Those
> databases can then be used to infer equivalence between two classes.
> Notably, equivalence statements are accompanied with Datalog proofs
> recording the normalisation process. We demonstrate the impact of
> DALEQ in an industrial context through a large-scale evaluation
> involving 2,714 pairs of jars, comprising 265,690 class pairs. In
> this evaluation, DALEQ is compared to two existing bytecode
> transformation tools. Our findings reveal a significant reduction in
> the manual effort required to assess non-bitwise equivalent
> artifacts, which would otherwise demand intensive human inspection.
> Furthermore, the results show that DALEQ outperforms existing tools
> by identifying more artifacts rebuilt from the same code as
> equivalent, even when no behavioral differences are present.
Jens also posted this news to our mailing list [13].
[11] https://arxiv.org/abs/2508.01530
[12] https://en.wikipedia.org/wiki/Datalog
[13] https://lists.reproducible-builds.org/pipermail/rb-general/2025-August/003853.html
§
Reproducibility regression identifies issue with AppArmor security policies
---------------------------------------------------------------------------
Tails [14] developer intrigeri tracked and followed a reproducibility
regression in the generation of AppArmor [15] policy caches, and has
identified an issue with the 4.1.0 version of AppArmor.
Although initially tracked on the Tails issue tracker [16], intrigeri
filed an issue [17] on the upstream bug tracker. AppArmor developer
John Johansen replied, confirming that they can reproduce the issue
and went to work on a draft patch. Through this, John revealed that it
was caused by an actual underlying security bug [18] in AppArmor —
that is to say, it resulted in permissions not (always) matching what
the policy intends and, crucially, not merely a cache reproducibility
issue.
Work on the fix is ongoing at time of writing.
[14] https://tails.boum.org/
[15] https://apparmor.net/
[16] https://gitlab.tails.boum.org/tails/tails/-/issues/21028
[17] https://gitlab.com/apparmor/apparmor/-/issues/528
[18] https://gitlab.com/apparmor/apparmor/-/issues/528#note_2721559918
§
Rust toolchain fixes
--------------------
Rust Clippy [19] is a linting [20]) tool for the Rust programming
language [21]. It provides a collection of lints (rules) designed to
identify common mistakes, stylistic issues, potential performance
problems and unidiomatic code patterns in Rust projects. This month,
however, Sosthène Guédon [22] filed a new issue in the GitHub [23]
requesting a new check that "would lint against non deterministic
operations in proc-macros, such as iterating over a HashMap".
[19] https://github.com/rust-lang/rust-clippy
[20] https://en.wikipedia.org/wiki/Lint_(software
[21] https://www.rust-lang.org/
[22] https://sgued.fr/about/
[23] https://github.com/rust-lang/rust-clippy/issues/15263
§
Distribution work
-----------------
In Debian [24] this month:
* Holger made extensive updates to Debian package reproducibility
testing infrastructure [25] this month, including:
* Upgrading all of the nodes to Debian trixie.
* Adding tests for the new Debian forky release.
* Dropping tests for Debian bookworm.
* Dropping support for the armhf architecture. From July 2015,
Vagrant Cascadian [26] has been hosting a 'zoo' of approximately
35 armhf systems which were used for building Debian packages for
that architecture.
* Holger Levsen also uploaded strip-nondeterminism, our program that
improves reproducibility by stripping out non-deterministic
information such as timestamps or other elements introduced during
packaging. This new version, 1.14.2-1, adds some metadata to aid the
deputy [27] tool. ( #1111947 [28])
* 8 reviews of Debian packages were added, 5 were updated and 5 were
removed this month adding to our knowledge about identified
issues [29].
* Marc Haber posted to our mailing list [30] this month asking for
assistance with the duperemove [31] package in Debian, which appears
to be an issue where the "order the object files are linked together
is dependent on the underlying filesystem [32]". Chris Lamb provided
a detailed analysis, including a suggestion that this can be resolved
by adding a locale-agnostic sort [33].
[24] https://debian.org/
[25] https://tests.reproducible-builds.org/debian/reproducible.html
[26] https://qa.debian.org/developer.php?login=vagrant%40debian.org
[27] https://salsa.debian.org/debian/debputy
[28] https://bugs.debian.org/1111947
[29] https://tests.reproducible-builds.org/debian/index_issues.html
[30] https://lists.reproducible-builds.org/pipermail/rb-general/
[31] https://tracker.debian.org/pkg/duperemove
[32] https://lists.reproducible-builds.org/pipermail/rb-general/2025-August/thread.html#3866
[33] https://lists.reproducible-builds.org/pipermail/rb-general/2025-September/003879.html
Lastly, Bernhard M. Wiedemann posted another openSUSE [34] monthly
update [35] for their work there.
[34] https://www.opensuse.org/
[35] https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/NJNQL5ZX7E3QPYAO5WXEMOY4YGYB5GZ6/
§
diffoscope
----------
diffoscope [37] is our in-depth and content-aware diff utility that can
locate and diagnose reproducibility issues. This month, Chris Lamb made
the following changes, including preparing and uploading versions, 303,
304 and 305 to Debian:
* Improvements:
* Use sed(1) backreferences when generating debian/tests/control to
avoid duplicating ourselves. [38]
* Move from a mono-utils dependency to versioned mono-devel | mono-
utils dependency, taking care to maintain the [!riscv64]
architecture restriction. [39]
* Use sed over awk to avoid mangling dependency lines containing =
(equals) symbols such as version restrictions. [40]
[37] https://diffoscope.org
[38] https://salsa.debian.org/reproducible-builds/diffoscope/commit/45780b1a
[39] https://salsa.debian.org/reproducible-builds/diffoscope/commit/38e0fb8b
[40] https://salsa.debian.org/reproducible-builds/diffoscope/commit/6a82eee6
* Bug fixes:
* Fix a test after the upload of systemd-ukify version
258~rc3. [41]
* Ensure that Java class files are named .class on the filesystem
before passing them to javap(1). [42]
* Do not run jsondiff on files over 100KiB as the algorithm runs in
O(n^2) [43] time. [44]
* Don't check for PyPDF version 3 specifically; check for >=
3. [45]
[41] https://salsa.debian.org/reproducible-builds/diffoscope/commit/c79674ec
[42] https://salsa.debian.org/reproducible-builds/diffoscope/commit/9ec7aad2
[43] https://en.wikipedia.org/wiki/Big_O_notation
[44] https://salsa.debian.org/reproducible-builds/diffoscope/commit/937c2199
[45] https://salsa.debian.org/reproducible-builds/diffoscope/commit/8ea42a68
* Misc:
* Update copyright years. [46][47]
[46] https://salsa.debian.org/reproducible-builds/diffoscope/commit/e99f6227
[47] https://salsa.debian.org/reproducible-builds/diffoscope/commit/acedd232
In addition, Martin Joerg fixed an issue with the HTML presenter to
avoid crash when page limit is None [48] and Zbigniew Jędrzejewski-Szmek
fixed compatibility with RPM 6 [49]. Lastly, John Sirois fixed a missing
requests dependency in the trydiffoscope tool. [50]
[48] https://salsa.debian.org/reproducible-builds/diffoscope/commit/a2b71a68
[49] https://salsa.debian.org/reproducible-builds/diffoscope/commit/d1251804
[50] https://salsa.debian.org/reproducible-builds/trydiffoscope/commit/7a50fd2
§
Website updates
---------------
Once again, there were a number of improvements made to our website this
month including:
* Chris Lamb:
* Write and publish a news entry for the upcoming summit. [51]
* Add some assets used at FOSSY [52], such as the badges and the
paper handouts. [53]
[51] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/915adb22
[52] https://2025.fossy.us/
[53] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/bc0d6e3d
* Holger Levsen:
* Restructure the new project history pages [54] pages [55] and add
some recent news entries [56].
* Mark the OpenWrt [57] tests as disabled on the "Who is Involved"
[58]. [59]
* Various changes to the upcoming Reproducible Builds Summit [60]
page. [61]
[54] https://reproducible-builds.org/docs/history/
[55] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4656f905
[56] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/35809ade
[57] https://openwrt.org/
[58] https://reproducible-builds.org/who/projects/
[59] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4384e16d
[60] https://reproducible-builds.org/events/vienna2025/
[61] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f46914f2
* Jochen Sprickerhof made various improvements to the Vienna summit
page [62]. [63][64]
[62] https://reproducible-builds.org/events/vienna2025/
[63] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4474ce74
[64] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/42ed0071
* Mattia Rizzolo also made various improvements to the Vienna summit
page [65]. [66][67][68][69][70][71][72]
[65] https://reproducible-builds.org/events/vienna2025/
[66] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/87f6914b
[67] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/053dada8
[68] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/2a9398f6
[69] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/4e27cadf
[70] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/cf54e2e2
[71] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/c12132fc
[72] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/f47d8340
* kpcyrd made a number of changes to the new project history pages
[73] [74][75]
[73] https://reproducible-builds.org/docs/history/
[74] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/67487b97
[75] https://salsa.debian.org/reproducible-builds/reproducible-website/commit/26771307
§
Reproducibility testing framework
---------------------------------
The Reproducible Builds project operates a comprehensive testing
framework running primarily at tests.reproducible-builds.org [76] in
order to check packages and other artifacts for reproducibility. In
August, however, a number of changes were made by Holger
Levsen, including:
* reproduce.debian.net [77]-related:
* Run 4 workers on the o4 node again in order to speed up
testing. [78][79][80][81]
* Also test trixie-proposed-updates and trixie-updates
etc. [82][83]
* Gather seperate statistics for each tested release. [84]
* Support sources from all Debian suites. [85]
* Run new code from the prototype database rework branch [86] for
the amd64-pull184 pseudo-architecture. [87][88]
* Add a number of helpful
links. [89][90][91][92][93][94][95][96][97]
* Temporarily call debrebuild without the --cache argument to
experiment with a new version of devscripts. [98][99][100]
* Update public TODO. [101]
[76] https://tests.reproducible-builds.org
[77] https://reproduce.debian.net
[78] https://salsa.debian.org/qa/jenkins.debian.net/commit/ca26fa4c1
[79] https://salsa.debian.org/qa/jenkins.debian.net/commit/0e28ea8cb
[80] https://salsa.debian.org/qa/jenkins.debian.net/commit/189d55c92
[81] https://salsa.debian.org/qa/jenkins.debian.net/commit/d4acc9282
[82] https://salsa.debian.org/qa/jenkins.debian.net/commit/c95f92fb8
[83] https://salsa.debian.org/qa/jenkins.debian.net/commit/30cdcbed2
[84] https://salsa.debian.org/qa/jenkins.debian.net/commit/0020f884f
[85] https://salsa.debian.org/qa/jenkins.debian.net/commit/c1f426ab0
[86] https://github.com/kpcyrd/rebuilderd/pull/184
[87] https://salsa.debian.org/qa/jenkins.debian.net/commit/a94085bbc
[88] https://salsa.debian.org/qa/jenkins.debian.net/commit/e312e1ac2
[89] https://salsa.debian.org/qa/jenkins.debian.net/commit/fb1af902e
[90] https://salsa.debian.org/qa/jenkins.debian.net/commit/cd5099b64
[91] https://salsa.debian.org/qa/jenkins.debian.net/commit/14145e77a
[92] https://salsa.debian.org/qa/jenkins.debian.net/commit/67c4d5ad6
[93] https://salsa.debian.org/qa/jenkins.debian.net/commit/d70f829c1
[94] https://salsa.debian.org/qa/jenkins.debian.net/commit/829359636
[95] https://salsa.debian.org/qa/jenkins.debian.net/commit/821cbf7b8
[96] https://salsa.debian.org/qa/jenkins.debian.net/commit/9e5cf68c4
[97] https://salsa.debian.org/qa/jenkins.debian.net/commit/aa3b77111
[98] https://salsa.debian.org/qa/jenkins.debian.net/commit/18df3bbc2
[99] https://salsa.debian.org/qa/jenkins.debian.net/commit/b3e61776a
[100] https://salsa.debian.org/qa/jenkins.debian.net/commit/2c9a416fb
[101] https://salsa.debian.org/qa/jenkins.debian.net/commit/5907cd486
* Installation tests:
* Add comments to explain structure. [102]
* Mark more old jobs as old or "dead". [103][104][105]
* Turn the maintenance job into a no-op. [106]
[102] https://salsa.debian.org/qa/jenkins.debian.net/commit/3e319f33a
[103] https://salsa.debian.org/qa/jenkins.debian.net/commit/96ffdd60a
[104] https://salsa.debian.org/qa/jenkins.debian.net/commit/6634d907f
[105] https://salsa.debian.org/qa/jenkins.debian.net/commit/1d9b3e072
[106] https://salsa.debian.org/qa/jenkins.debian.net/commit/06e081971
* Jenkins node maintenance:
* Increase penalties if the osuosl5 or ionos7 nodes are down. [107]
* Stop trying to fix network automatically. [108]
* Correctly mark ppc64el architecture nodes when down. [109]
* Upgrade the remaining arm64 nodes to Debian trixie in
anticipation of the release. [110][111]
* Allow higher SSD temperatures on the riscv64 architecture. [112]
[107] https://salsa.debian.org/qa/jenkins.debian.net/commit/1cd96d63d
[108] https://salsa.debian.org/qa/jenkins.debian.net/commit/1f0b21122
[109] https://salsa.debian.org/qa/jenkins.debian.net/commit/6c2469ff4
[110] https://salsa.debian.org/qa/jenkins.debian.net/commit/c8b489b0d
[111] https://salsa.debian.org/qa/jenkins.debian.net/commit/b63792391
[112] https://salsa.debian.org/qa/jenkins.debian.net/commit/4b2998ce7
* Debian [113]-related:
* Drop the armhf architecture; many thanks to Vagrant for
physically hosting the nodes for ten years. [114][115]
* Add Debian forky, and archive
bullseye. [116][117][118][119][120][121][122]
* Document the filesystem space savings from dropping the armhf
architecture. [123]
* Exclude i386 and armhfr from JSON results. [124]
* Update TODOs for when Debian trixie and forky have been
released. [125][126]
[113] http://debian.org/
[114] https://salsa.debian.org/qa/jenkins.debian.net/commit/84373dddb
[115] https://salsa.debian.org/qa/jenkins.debian.net/commit/afe30f209
[116] https://salsa.debian.org/qa/jenkins.debian.net/commit/5761678f5
[117] https://salsa.debian.org/qa/jenkins.debian.net/commit/a33000480
[118] https://salsa.debian.org/qa/jenkins.debian.net/commit/ae0357100
[119] https://salsa.debian.org/qa/jenkins.debian.net/commit/8958a791d
[120] https://salsa.debian.org/qa/jenkins.debian.net/commit/88db38ca6
[121] https://salsa.debian.org/qa/jenkins.debian.net/commit/3e23fa7d2
[122] https://salsa.debian.org/qa/jenkins.debian.net/commit/4aecebd22
[123] https://salsa.debian.org/qa/jenkins.debian.net/commit/17b1bbcd0
[124] https://salsa.debian.org/qa/jenkins.debian.net/commit/e8ad4e132
[125] https://salsa.debian.org/qa/jenkins.debian.net/commit/a7b7e8a57
[126] https://salsa.debian.org/qa/jenkins.debian.net/commit/3b7fa1954
* tests.reproducible-builds.org [127]-related:
* Add a link to reproduce.debian.net [128]. [129]
* Improve the dashboard graphs. [130][131][132]
[127] https://tests.reproducible-builds.org/
[128] https://reproduce.debian.net/
[129] https://salsa.debian.org/qa/jenkins.debian.net/commit/9447dd74e
[130] https://salsa.debian.org/qa/jenkins.debian.net/commit/a5e9c9d02
[131] https://salsa.debian.org/qa/jenkins.debian.net/commit/6af1dd1da
[132] https://salsa.debian.org/qa/jenkins.debian.net/commit/208e1ed51
* Misc:
* Detect errors with openQA [133] erroring out. [134]
* Drop the long-disabled openwrt_rebuilder jobs. [135]
* Use qa-jenkins-dev at alioth-lists.debian.net as the contact for
jenkins.debian.net. [136]
* Redirect reproducible-builds.org/vienna25 to reproducible-
builds.org/vienna2025. [137]
* Disable all OpenWrt reproducible CI jobs, in coordination with
the OpenWrt community. [138][139]
* Make reproduce.debian.net [140] accessable via IPv6. [141]
* Ignore that the megacli RAID controller requires packages from
Debian bookworm. [142]
[133] https://open.qa/
[134] https://salsa.debian.org/qa/jenkins.debian.net/commit/106c561b6
[135] https://salsa.debian.org/qa/jenkins.debian.net/commit/0f0c763bc
[136] https://salsa.debian.org/qa/jenkins.debian.net/commit/c0fdb7613
[137] https://salsa.debian.org/qa/jenkins.debian.net/commit/d7bc3787a
[138] https://salsa.debian.org/qa/jenkins.debian.net/commit/61ab2b112
[139] https://salsa.debian.org/qa/jenkins.debian.net/commit/53e5f6fd2
[140] https://reproduce.debian.net/
[141] https://salsa.debian.org/qa/jenkins.debian.net/commit/27702b19e
[142] https://salsa.debian.org/qa/jenkins.debian.net/commit/77bfe5bb7
In addition,
* James Addison migrated away from deprecated toplevel deb822 Python
module in favour of debian.deb822 in the
bin/reproducible_scheduler.py script [143] and removed a note on
reproduce.debian.net [144] note after the release of Debian
trixie [145].
[143] https://salsa.debian.org/qa/jenkins.debian.net/commit/2d93c1e39
[144] https://reproduce.debian.net/
[145] https://salsa.debian.org/qa/jenkins.debian.net/commit/158d6e8fc
* Jochen Sprickerhof made a huge number of improvements to the
reproduce.debian.net [146] statistics calculation
[147][148][149][150][151][152] as well as to the
reproduce.debian.net service more generally.
[153][154][155][156][157][158][159][160].
[146] https://reproduce.debian.net/
[147] https://salsa.debian.org/qa/jenkins.debian.net/commit/2ac11691e
[148] https://salsa.debian.org/qa/jenkins.debian.net/commit/f6fa425c5
[149] https://salsa.debian.org/qa/jenkins.debian.net/commit/3cd990e1d
[150] https://salsa.debian.org/qa/jenkins.debian.net/commit/f14c69661
[151] https://salsa.debian.org/qa/jenkins.debian.net/commit/d8725b828
[152] https://salsa.debian.org/qa/jenkins.debian.net/commit/d92c8c55a
[153] https://salsa.debian.org/qa/jenkins.debian.net/commit/2047bd931
[154] https://salsa.debian.org/qa/jenkins.debian.net/commit/701343a17
[155] https://salsa.debian.org/qa/jenkins.debian.net/commit/957034c16
[156] https://salsa.debian.org/qa/jenkins.debian.net/commit/d6c53b1fc
[157] https://salsa.debian.org/qa/jenkins.debian.net/commit/43517c478
[158] https://salsa.debian.org/qa/jenkins.debian.net/commit/bd16e6b80
[159] https://salsa.debian.org/qa/jenkins.debian.net/commit/304636735
[160] https://salsa.debian.org/qa/jenkins.debian.net/commit/1f0cdd4b4
* Mattia Rizzolo performed a lot of work migrating scripts to
SQLAlchemy [161] version 2.0 [162][163][164][165][166][167] in
addition to making some changes to the way openSUSE [168]
reproducibility tests are handled internally. [169]
[161] https://www.sqlalchemy.org/
[162] https://salsa.debian.org/qa/jenkins.debian.net/commit/c0491a106
[163] https://salsa.debian.org/qa/jenkins.debian.net/commit/ef1b588cd
[164] https://salsa.debian.org/qa/jenkins.debian.net/commit/206bcc0a5
[165] https://salsa.debian.org/qa/jenkins.debian.net/commit/bee35702c
[166] https://salsa.debian.org/qa/jenkins.debian.net/commit/4d1e1c92d
[167] https://salsa.debian.org/qa/jenkins.debian.net/commit/32c373e4f
[168] https://www.opensuse.org/
[169] https://salsa.debian.org/qa/jenkins.debian.net/commit/bc5a1deb4
* Lastly, Roland Clobus updated the Debian Live [170] packages after
the release of Debian trixie. [171][172]
[170] https://www.debian.org/devel/debian-live/
[171] https://salsa.debian.org/qa/jenkins.debian.net/commit/f51f31308
[172] https://salsa.debian.org/qa/jenkins.debian.net/commit/056451bac
§
Upstream patches
----------------
The Reproducible Builds project detects, dissects and attempts to fix as
many currently-unreproducible packages as possible. We endeavour to send
all of our patches upstream where appropriate. This month, we wrote a
large number of such patches, including:
* Bernhard M. Wiedemann:
* cpython [173]
* hashcat [174]
* neochat [175]
* pocketbase [176]
[173] https://github.com/python/cpython/issues/138061
[174] https://build.opensuse.org/request/show/1300462
[175] https://bugzilla.opensuse.org/show_bug.cgi?id=1248369
[176] https://github.com/pocketbase/pocketbase/issues/7123
* Chris Lamb:
* #1111497 [177] filed against neon27 [178].
[177] https://bugs.debian.org/1111497
[178] https://tracker.debian.org/pkg/neon27
* Jochen Sprickerhof:
* #1111620 [179] filed against pcbasic [180].
* #1111624 [181] filed against shellia [182].
* #1111625 [183] filed against bup [184].
[179] https://bugs.debian.org/1111620
[180] https://tracker.debian.org/pkg/pcbasic
[181] https://bugs.debian.org/1111624
[182] https://tracker.debian.org/pkg/shellia
[183] https://bugs.debian.org/1111625
[184] https://tracker.debian.org/pkg/bup
* Mark Johnston:
* FreeBSD [185]
* FreeBSD [186]
* FreeBSD [187]
* FreeBSD [188]
[185] https://cgit.freebsd.org/src/commit/?id=4f81c42fbd76e25c9fe696fa08296b79c55fbf09
[186] https://cgit.freebsd.org/src/commit/?id=eebadc7d8590ff8d38fdbcfd90651c931e713648
[187] https://cgit.freebsd.org/src/commit/?id=3238878379d3bd4bb9796ccb41c090139bbde94f
[188] https://cgit.freebsd.org/src/commit/?id=b7e0373acb1d022e9e5acb5be9727def5f941194
* Robin Candau:
* syd [189]
[189] https://gitlab.exherbo.org/sydbox/sydbox/-/merge_requests/14
§
Finally, if you are interested in contributing to the Reproducible
Builds project, please visit our "Contribute" [190] page on our website.
However, you can get in touch with us via:
* IRC: #reproducible-builds on irc.oftc.net.
* Mastodon: @reproducible_builds at fosstodon.org [191]
* Mailing list: rb-general at lists.reproducible-builds.org [192]
[190] https://reproducible-builds.org/contribute/
[191] https://fosstodon.org/@reproducible_builds
[192] https://lists.reproducible-builds.org/listinfo/rb-general
--
o
⬋ ⬊
o o reproducible-builds.org 💠
⬊ ⬋
o
More information about the rb-general
mailing list