intrigeri: Can you reproduce this Tails ISO image?
Thanks to a Mozilla Open Source Software award, we have been working
on making the Tails ISO images
build reproducibly.
We have made huge progress: since a few months, ISO images built by
Tails core developers and our CI system have always been identical.
But we're not done yet and we need your help!
Our first call for testing build reproducibility in August uncovered
a number of remaining issues. We think that we have fixed them all
since, and we now want to find out what other problems may prevent you
from building our ISO image reproducibly.
Please try to build an ISO image today, and tell us whether it
matches ours!
Build an ISO
These instructions have been tested on Debian Stretch and testing/sid.
If you're using another distribution, you may need to adjust them.
If you get stuck at some point in the process, see our more detailed
build documentation
and don't hesitate to contact us:
- XMPP chatroom
- email: tails-dev@boum.org (public) or tails@boum.org (private)
- Install the build dependencies:
sudo apt install \ git \ rake \ libvirt-daemon-system \ dnsmasq-base \ ebtables \ qemu-system-x86 \ qemu-utils \ vagrant \ vagrant-libvirt \ vmdebootstrap && \ sudo systemctl restart libvirtd - Ensure your user is in the relevant groups:
for group in kvm libvirt libvirt-qemu ; do sudo adduser "$(whoami)" "$group" done - Logout and log back in to apply the new group memberships.
git clone https://git-tails.immerda.ch/tails && \
cd tails && \
git checkout 3.2-alpha2 && \
git submodule update --init && \
rake build
rake build:
sudo apt install apt-show-versions && \
(
for f in /etc/issue /proc/cpuinfo
do
echo "--- File: $ f ---"
cat "$ f "
echo
done
for c in free locale env 'uname -a' '/usr/sbin/libvirtd --version' \
'qemu-system-x86_64 --version' 'vagrant --version'
do
echo "--- Command: $ c ---"
eval "$ c "
echo
done
echo '--- APT package versions ---'
apt-show-versions qemu:amd64 linux-image-amd64:amd64 vagrant \
libvirt0:amd64
) bzip2 > system-info.txt.bz2
bzless system-info.txt.bz2
- set Category to Build system;
- paste the output of
rake build; - attach
system-info.txt.bz2(this will publish that file).
sha512sum tails-amd64-3.2~alpha2.iso
9b4e9e7ee7b2ab6a3fb959d4e4a2db346ae322f9db5409be4d5460156fa1101c23d834a1886c0ce6bef2ed6fe378a7e76f03394c7f651cc4c9a44ba608dda0bc
system-info.txt.bz2 attached. Thanks in
advance! Then you can stop reading here.
Else, if the checksums differ: too bad, but really it's good news as
the whole point of the exercise is precisely to identify such
problems :) Now you are in a great position to help improve the
reproducibility of Tails ISO images by following these instructions:
- Install
diffoscopeversion 83 or higher and all the packages it recommends. For example, if you're using Debian Stretch:sudo apt remove diffoscope && \ echo 'deb http://ftp.debian.org/debian stretch-backports main' \ sudo tee /etc/apt/sources.list.d/stretch-backports.list && \ sudo apt update && \ sudo apt -o APT::Install-Recommends="true" \ install diffoscope/stretch-backports - Download the official Tails 3.2~alpha2 ISO image.
- Compare the official Tails 3.2~alpha2 ISO image with yours:
diffoscope \ --text diffoscope.txt \ --html diffoscope.html \ --max-report-size 262144000 \ --max-diff-block-lines 10000 \ --max-diff-input-lines 10000000 \ path/to/official/tails-amd64-3.2~alpha2.iso \ path/to/your/own/tails-amd64-3.2~alpha2.iso bzip2 diffoscope. txt,html - Send an email to tails-dev@boum.org (public) or tails@boum.org
(private) with the subject "Reproduction of Tails 3.2~alpha2
failed", attaching:
system-info.txt.bz2;- the smallest file among
diffoscope.txt.bz2anddiffoscope.html.bz2, except if they are larger than 100 KiB, in which case better upload the file somewhere (e.g. share.riseup.net and share the link in your email.
This semester I am taking JPN 530, Haruki Murakami and the Literature
of Modern Japan . My department are letting me count it for the
Philosophy Ph.D., and in fact my supervisor is joining me for the
class. I have no idea what the actual class sessions will be
like first one this afternoon and I m anxious about writing a
literature term paper. But I already know that my weekends this
semester are going to be great because I ll be reading Murakami s
novels.
What s particularly wonderful about this, and what I wanted to write
about, is how nourishing I find reading literary fiction to be. For
example, this weekend I read
In the coming weeks and months I intend to write a mini series about packaging Java software for Debian. The following article basically starts in the middle of this journey because the PDFsam upgrade is still fresh in my mind. It requires some preexisting knowledge about build tools like Maven and some Java terminology. But do not fear. Hopefully it will make sense in the end when all pieces fall into place.
A month ago I decided to upgrade 
Ok, what is happening here? First you can choose a source and binary package name. Then disable the tests and don t run javadoc to create the documentation. This will simplify things a little. Tests and javadoc settings can be added later. Choose the version you want to package and then you can basically follow the default recommendations and confirm them by hitting the Enter key. Throughout the project we choose to transform the upstream version with the symbolic debian version. Remember that Java/Maven is version-centric. This will ensure that our Maven dependencies are always satisfied later and we can simply upgrade our Maven libraries and don t have to change the versions by hand in various pom.xml files; maven-debian-helper will automatically transform them for us to debian . Enable all modules. If you choose not to, you can select each module individually. Note that later on some of the required build-dependencies cannot be found because they are either not installed (libjmagick6-java) or they cannot be found in Debian s Maven repository under /usr/share/maven-repo. You can fix this by entering a substitution rule or, as I did in this case, you can just ignore these artifacts for now. They will be added to maven.IgnoreRules. In order to successfully compile your program you have to remove them from this file later again, create the correct substitution rule in maven.rules and add the missing build-dependencies to debian/control. For now we just want to quickly create our initial debian directory.
If everything went as planned a complete debian directory should be visible in your root directory. The only thing left is to fix the substitution rule for the Servlet API 3.1. Add libservlet3.1-java to Build-Depends and the following rule to maven.rules:
You can just use an asterisk to match any value. Every value can be substituted. This is necessary when the value of upstream s pom.xml file differs from Debian s system packages. This happens frequently for API packages which are uploaded to Maven Central multiple times under a different groupId/artifactId but provide the same features. In this case the Twelvemonkeys pom requires an older API version but Debian is already at version 3.1. Note that we require a strict version number in this case because libservlet3.1-java does not use a symbolic debian version since we provide more than one Servlet API in the archive and this measure prevents conflicts.
Thanks for reading this far. More articles about Java packaging will follow in the near future and hopefully they will clarify some terms and topics which could only be briefly mentioned in this post.
Enable 
The other Murakami, 
This collection of short stories is a consequent deconstruction of happiness, love, everything we believe to make our lives worthwhile. The protagonists are idealistic students loosing their faith, office ladies on aberrations, drunkards, movie directors, the usual mixture. But the topic remains constant the unfulfilled search for happiness and love.
Around 2 decades back and a bit more I was introduced to computers. The top-line was 386DX which was mainly used as fat servers and some lucky institutions had the 386SX where IF we were lucky we could be able to play some games on it. I was pretty bad at Prince of Persia or most of the games of the era as most of the games depended on lightning reflexes which I didn t possess. Then 1997 happened and I was introduced to GNU/Linux but my love of/for games still continued even though I was bad at most of them. The only saving grace was turn-based RPG s (role-playing games) which didn t have permadeath, so you could plan your next move. Sometimes a wrong decision would lead to getting a place from where it was impossible to move further. As the decision was taken far far break which lead to the tangent, the only recourse was to replay the game which eventually lead to giving most of those kind of games.
Then in/around 2000 Maxis came out with 
Idea via 
, I will have to share a bit of South Africa as that is part and parcel of what I m going to share next. Also many of the pictures shared in this particular blog post belong to KK who has shared them with me with permission to share it with the rest of the world.
When I was in South Africa, in the first couple of days as well as what little reading of South African History I had read before travelling, had known that the Europeans, specifically the Dutch ruled on South Africa for many years.
What was shared to me in the first day or two that 
Tidbit Just a few years ago, it was a shocker to me to know/realize that what commonly goes/known in the country as a parrot by most people is actually a 
Wishing every one a happy Gujarati New Year, Vikram Samvat 2073 named Kilaka and hoping the upcoming year will be yuuge for you.
These next couple of paragraphs are totally not an excuse for why it will take a few more days for me to reach seven blog posts.
Reading reports about Diwali in the American press, I see a bit of confusion whether Diwali is one day or five. Well, technically it is just one (Sunday 30th this year.) but there are a number of other observances around it which could be classed as subsidiaries if you want to look at it that way.
The season commenced last Wednesday with Rama Ekadashi. (where the Gujarati name is different I'll use that and put the Sanskrit name in parentheses.) That's a fast day and therefore not much fun.
Thursday was Vagh Barash (vyaghra dvadashi) which as the name suggests is something to do with tigers but we don't in my experience particularly do anything special that day.
Friday, things began in earnest with Dhan Terash (dhana trayodashi) when Lakshmi the Goddess of prosperity is worshipped. It is also a good day to buy gold.
Saturday was Kali Chaudash (Kali Chaturdashi or Naraka Chaturdashi) On this day many Gujarati families including mine worship their Kuladevi (patron Goddess of the family) even if She is not an aspect of Kali. (Others observe this on the Ashtami of Navaratri.) The day is also associated with the God Hanuman. Some people say it is His Jayanti (birthday) though we observe it in Chaitra (March-April.) It is also the best day for learning mantras and I initiated a couple of people including my son into a mantra I know.
Sunday was Diwali (Deepavali) proper. As a Brahmana I spent much of the day signing blessings in the account books of shopkeepers. Well, nowadays only a few old people have actual account books so usually the print out a spreadsheet and I sign that. But home is where the main action is. Lights are lit, fireworks are set off, and prayers are offered to Lakshmi. But most important of all, this is the day good boys and girls get presents. Unfortunately I have nothing interesting to report; just the usual utilitarian items of clothing. Fireworks by the way are technically illegal in New Jersey not that that ever stopped anyone from getting them. The past few years, Jersey City has attempted to compromise by allowing a big public fireworks display. Although it was nice and sunny all day, by nighttime we had torrential rain and the firework display got washed out. So I'm glad I rebelled against the system with my small cache of sparklers.
Today (or yesterday by the time this gets posted.) was the Gujarati New Years Day. There is also the commemoration of the time the God Krishna lifted up Mt Govardhan with one finger which every mandir emulates by making an annakuta or mountain of food.
Tuesday is Bhai Beeja (Yama Dvitiya in Sanskrit or Bhai Duj in Hindi) when sisters cook a meal for their brothers. My son is also going to make something (read: microwave something) for his sister.
So those are the five days of Diwali. Though many will not consider it to be truly over until this Saturday, the lucky day of Labh Pancham (Labha panchami.) And if I still haven't managed to write seven blog posts by then, there is always Deva Diwali...
Feel free to contribute to this starting project to help spreading the Monero use by using the PyMoneroWallet project with your Python applications 
Here is my monthly update covering what I have been doing in the free software world (
Hopkins Trailer Brake Controller in Subaru Outback
My minivan transmission gave up the ghost last year, so I bought a
Subaru outback to pull my t@b travel trailer. There isn't a huge
amount of space under the dash, so I didn't want to mount a trailer
brake controller in the 'usual' spot, right above my right knee.
Instead, I bought a Hopkins InSIGHT brake controller, 47297. That
comes in three separate pieces which allows for very flexible mounting
options.
I stuck the 'main' box way up under the dash on the left side of the
car. There was a nice flat spot with plenty of space that was facing
the right direction:
