Lunar: Reproducible builds: week 28 in Stretch cycle
What happened in the reproducible
builds effort this week:
Toolchain fixes
- Colin Watson uploaded groff/1.22.3-2 which implements support for SOURCE_DATE_EPOCH.
- Colin Watson uploaded halibut/1.1-2 which implements support for
SOURCE_DATE_EPOCH
.
requires.txt
files reproducible. The patch has been forwarded upstream.
Chris also understood why the she-bang in some Python scripts kept being undeterministic: setuptools
as called by dh-python could skip re-installing the scripts if the build had been too fast (under one second). #804339 offers a patch fixing the issue by passing --force
to setup.py install
.
#804141 reported on gettext asks for support of SOURCE_DATE_EPOCH
in gettextize
. Santiago Vila pointed out that it doesn't felt appropriate as gettextize
is supposed to be an interactive tool. The problem reported seems to be in avahi build system instead.
Packages fixed
The following packages became reproducible due to changes in their
build dependencies:
celestia,
dsdo,
fonts-taml-tscu,
fte,
hkgerman,
ifrench-gut,
ispell-czech,
maven-assembly-plugin,
maven-project-info-reports-plugin,
python-avro,
ruby-compass,
signond,
thepeg,
wagon2,
xjdic.
The following packages became reproducible after getting fixed:
- 4ti2/1.6.6+ds-1 uploaded by Jerome Benoit, fixed upstream.
- allegro4.4/2:4.4.2-7 uploaded by Andreas R nnquist, original patch by Reiner Herrmann.
- axel/2.5-2 by Joao Eriberto Mota Filho.
- bastet/0.43-4 by Markus Koschany.
- bbswitch/0.8-3 uploaded by Luca Boccassi, original patch by Reiner Herrmann.
- commons-math/2.2-5 by Emmanuel Bourg.
- fatresize/1.0.2-8 by Colin Watson, reported by Chris Lamb.
- giada/0.10.2~dfsg1-1 by IOhannes m zm lnig.
- groff/1.22.3-3 by Colin Watson.
- halibut/1.1-2 by Colin Watson.
- ivy/2.4.0-2 by Emmanuel Bourg.
- libfreemarker-java/2.3.23-2 by Emmanuel Bourg.
- libjna-java/4.2.1-1 by Emmanuel Bourg.
- lmemory/0.6c-8 by Markus Koschany.
- man-db/2.7.5-1 by Colin Watson.
- maven2-core/2.2.1-23 by Emmanuel Bourg.
- ncurses/6.0+20151024-2 by Sven Joachim, report by Esa Peuha.
- netmask/2.4.3-1 by Guilhem Moulin.
- ogre-1.9/1.9.0+dfsg1-7 uploaded by Manuel A. Fernandez Montecelo, original patch by Chris Lamb.
- praat/6.0.4-2 by Rafael Laboissiere.
- soundscaperenderer/0.4.2~dfsg-5 by IOhannes m zm lnig.
- usb-modeswitch-data/20151101-1 uploaded by Didier Raboud, original patch by Reiner Herrmann.
- dbconfig-common/1.8.55 by Paul Gevers.
- mondrian/1:3.11.0.1-1 by Emmanuel Bourg.
- #803893 on goaccess by Guillaume Delacour: remove
__DATE__
and__TIME__
macros. - #803908 on starlink-pal by Chris Lamb: pass
-info 0
tolatex2html
.
.ppc
). (Paul Gevers)
The homepage is now available using HTTPS, thanks to Let's Encrypt!.
Work has been done to be able to publish diffoscope on the Python Package Index (also known as PyPI): the tlsh
module is now optional, compatibility with python-magic
has been added, and the fallback code to handle RPM has been fixed.
Documentation update
Reiner Herrmann, Paul Gevers, Niko Tyni, opi, and Dhole offered various fixes and wording improvements to the reproducible-builds.org. A mailing-list is now available to receive change notifications.
NixOS, Guix, and Baserock are featured as projects working on reproducible builds.
Package reviews
70 reviews have been removed, 74 added and 17 updated this week.
Chris Lamb opened 22 new fail to build from source bugs.
New issues this week:
randomness_in_ocaml_provides,
randomness_in_qdoc_page_id,
randomness_in_python_setuptools_requires_txt,
gettext_creates_ChangeLog_files_and_entries_with_current_date.
Misc.
h01ger and Chris Lamb presented Beyond reproducible builds at the MiniDebConf in Cambridge on November 8th. They gave an overview of where we stand and the changes in user tools, infrastructure, and development practices that we might want to see happening. Feedback on these thoughts are welcome. Slides are already available, and the video should be online soon.
At the same event, a meeting happened with some members of the release team to discuss the best strategy regarding releases and reproducibility. Minutes have been posted on the Debian reproducible-builds mailing-list.