Reproducible builds folks: Reproducible builds: week 54 in Stretch cycle
What happened in the Reproducible
Builds effort between May 1st and May 7th 2016:
Media coverage
There has been a surprising tweet last week: "Props to @FiloSottile for his nifty gvt golang tool. We're using it to get reproducible builds for a Zika & West Nile monitoring project." and to our surprise Kenn confirmed privately that he indeed meant "reproducible builds" as in "bit by bit identical builds". Wow. We're looking forward to learn more details about this; for now we just know that they are doing this for software quality reasons basically.
Two of the four GSoC and Outreachy participants for Reproducible builds posted their introductions to Planet Debian:
- Scarlett Clark: Kubuntu: Debian: KDE: Outreachy! Yay! Upcoming changes
- Satyam Zode: Google Summer of Code 2016 With Debian Reproducible Builds : Introduction
- #719845 (make the file order within the data,control .tar.gz .deb members deterministic)
- #819194 (add
-fdebug-prefix-map
to the compilers options)
- Alexis uploaded texlive-bin to our repo improving the existing patches.
- pdftex upstream discussion by Alexis Bienven e began at tex-k mailing list to make \today honour SOURCE_DATE_EPOCH. Upstream already commited enhanced versions of the proposed patches.
- Similar discussion on the luatex side at luatex mailing list. Upstream is working on it, and already committed some changes.
- crawl/2:0.18.0-1 by Adam Borowski, original patch by Alexis Bienven e.
- eigenbase-resgen/1.3.0.13768-3 by Emmanuel Bourg.
- fpga-icestorm/0~20160218gitf2b2549-2 by Ruben Undheim, original patch by Daniel Shahaf.
- gap/4r8p3-3 by Bill Allombert, original patch by Jerome Benoit.
- libksba/1.3.4-1 by Andreas Metzler.
- libusb/2:0.1.12-29 by Aurelien Jarno, original patch by Daniel Shahaf.
- milkytracker/0.90.86+dfsg-1 by James Cowgill.
- mp4h/1.3.1-15 by Axel Beckert.
- rdtool/0.6.38-4 by Christian Hofstaedtler, original patch by Alexis Bienven e.
- sympow/1.023-7 by Jerome Benoit.
- freefem++/3.46+dfsg1-2 by Dimitrios Eftaxiopoulosis, original patch by Alexis Bienven e.
- jaligner/1.0+dfsg-2 by Michael R. Crusoe.
- keyutils/1.5.9-9 by Christian Kastner.
- shotwell/0.22.1-1 by J rg Frings-F rst.
- emoslib/2:4.4.1-1 by Alastair McKinstry, original patch by boyska.
- #823174 against ros-pluginlib by Daniel Shahaf: use printf instead of echo to fix implementation-specific behavior.
- #823239 against gspiceui by Alexis Bienven e: sort list of object files for linking binary.
- #823241 against unhide by Alexis Bienven e: sort list of source files passed to compiler.
- #823393 against kdbg by Alexis Bienven e: fix changelog encoding and call grep in text mode.
- #823452 against khronos-opengl-man4 by Daniel Shahaf: sort file lists deterministically.
- All packages from all tested suites have finally been built on i386.
- Due to GCC supporting SOURCE_DATE_EPOCH sid/armhf has finally reached 20k reproducible packages and sid/amd64 has even reached 21k reproducible packages. (These numbers are about our test setup. The numbers for the Debian archive are still all 0. dpkg and dak need to be fixed to get the numbers above 0.)
- IRC notifications for non-Debian related jenkins job results go to #reproducible-builds now, while Debian related notifications stay on #debian-reproducible. (h01ger)
- profitbricks-build4-amd64 has been fully set up now and is running 398 days in the future. Next: update coreboot/OpenWrt/Fedora/Archlinux/FreeBSD/NetBSD scripts to use it. Help (in form of patches to existing shell scripts) very much welcome! (Other help is much welcome (and needed) too, but some things might take longer to merge or explain )