Michael Prokop: Grml 2017.05 Codename Freedatensuppe

SOURCE_DATE_EPOCH
SOURCE_DATE_EPOCH
) (Closes: #792202)SOURCE_DATE_EPOCH
also to luatexSOURCE_DATE_EPOCH
. Original patch by akiraSOURCE_DATE_EPOCH
SOURCE_DATE_EPOCH
SOURCE_DATE_EPOCH
file(GLOB ...)
sudo add-apt-repository ppa:dank/dpkg && sudo apt-get update && sudo apt-get install dpkg
should be enough to get reproducible builds on Ubuntu 16.04.
This week's edition was written by Ximin Luo and Holger Levsen and reviewed by a bunch of Reproducible builds folks on IRC.
switchconf (0.0.15-1~wip1) UNRELEASED; urgency=low * New upstream version: * Replace 'find -perm +1' by 'find -perm /1', thank you Andreas Metzler for the patch and the NMU. * Add systemd service file, thank you Felipe Sateler for reviewing it. * Bump standards-version to 3.9.6, no changes needed. * New maintainer email address. -- Jose M Calhariz <jose@calhariz.com> Tue, 29 Dec 2015 19:59:07 +0000 switchconf (0.0.14-1) UNRELEASED; urgency=low * Force the use of bash, instead of a POSIX shell. -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Sun, 24 Aug 2014 04:37:04 +0100 switchconf (0.0.13-2) UNRELEASED; urgency=low * Add Homepage field pointing to alioth page of the project -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Sun, 02 Mar 2014 18:01:07 +0000 switchconf (0.0.13-1) wheezy; urgency=low * New upstream version: * Distribution tar is now compressed by xz * Change to source format 3.0 (quilt) -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Sun, 02 Mar 2014 15:56:31 +0000 switchconf (0.0.12-1) wheezy; urgency=low * Fixed some typos on switchconf -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Sun, 02 Mar 2014 15:39:09 +0000 switchconf (0.0.11-1) wheezy; urgency=low * New upstream version: * Makefile: add target dist-exp to build distribution files. * Add flag -f with the path to the configuration file. * Update debian/rules to version 0.24. * Update debian/control with new name and email address of Maintainer. * Update copyright. -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Sun, 16 Feb 2014 18:04:22 +0000 switchconf (0.0.10-1) UNRELEASED; urgency=low * New upstream version: * Fix return code on error. * Use syslog system to report errors. -- Jose M Calhariz <jose.calhariz@ist.utl.pt> Thu, 16 Jan 2014 20:23:46 +0000
.buildinfo
with different environment information can attest to the
same exact binary artifact..buildinfo
files can coexist for the same .deb
as long as the listed
checksums match the source and binary package in the archive..buildinfo
can be signed in-line to certify where a build comes from.metview
script.SOURCE_DATE_EPOCH
in grub image generator (#787795).
reproducible.debian.net
An issue with some armhf
build nodes was tracked down to a bad interaction between uname26 personality and new glibc (Vagrant Cascadian).
A Debian package was created for koji, the RPM building and tracking system used by Fedora amongst others. It is currently waiting for review in the NEW queue. (Ximin Luo, Marek Marczykowski-G recki)
diffoscope development
diffoscope now has a dedicated mailing list to better accommodate its growing user and developer base.
Going through diffoscope's guts together enabled several new contributors. Baptiste Daroussin, Ed Maste, Clemens Lang, Mike McQuaid, Joachim Breitner all contributed their first patches to improve portability or add new features. Regular contributors Chris Lamb, Reiner Herrmann, and Levente Polyak also submitted improvements.
Debian is undertaking a huge effort to develop a reproducible builds system. I'd like to thank you for that. This could be Debian's most important project, with how badly computer security has been going.
PerniciousPunk in Reddit's Ask me anything! to Neil McGovern, DPL. What happened in the reproducible builds effort this week: Toolchain fixes More tools are getting patched to use the value of the SOURCE_DATE_EPOCH environment variable as the current time:
SOURCE_DATE_EPOCH
to the time of the latest debian/changelog
entry when exporting build flags, patch sent as #791823 (Dhole),texlive-bin
(akira) and libxslt
(Dhole) with the aforementioned support for SOURCE_DATE_EPOCH
.debhelper
exported TZ=UTC
and this made packages capturing the current date (without the time) reproducible in the current test environment.
The following packages became reproducible after getting fixed:
debian/changelog
date in the manpage.debian/changelog
date as build date and use debian
as the builder hostname.debian/changelog
date as bui
ld date.reproducible.debian.net
.
aptitude search '?for x:
?x:installed
?x:automatic
?x:provides(?virtual ?reverse-depends(?installed))
?not(?x:reverse-depends(?installed(?depends(?=x))))'
#!/usr/bin/make -f
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/class/qmake.mk
DEB_QMAKE_CONFIG_VAL += build64
DEB_QMAKE_ARGS = qcs.pro
build/qutecsound::
[ -f bin/qutecsound ] mv bin/qutecsound-d bin/qutecsound
clean::
rm -f bin/qutecsound
QMAKE = qmake-qt4
DEB_BUILD_PARALLEL = 1
DEB_INSTALL_MANPAGES_qutecsound = debian/qutecsound.1
#!/usr/bin/make -f
# Uncomment this to turn on verbose mode.
#export DH_VERBOSE=1
include /usr/share/cdbs/1/rules/debhelper.mk
include /usr/share/cdbs/1/class/qmake.mk
QMAKE = qmake-qt4
DEB_QMAKE_CONFIG_VAL += build64
DEB_QMAKE_ARGS = qcs.pro
DEB_BUILD_PARALLEL = 1
DEB_INSTALL_MANPAGES_qutecsound = debian/qutecsound.1
build/qutecsound::
[ -f bin/qutecsound ] mv bin/qutecsound-d bin/qutecsound
clean::
rm -f bin/qutecsound
ldd /usr/lib32/alsa-lib/libasound_module_pcm_pulse.so grep 'not found' \ awk ' print $1 ' xargs dlocate cut -f1 -d: sort -u \ while read name; do \ apt-cache show $name grep Filename: \ cut -f2 -d: sed -e 's/_amd64/_i386/' \ xargs -l -I' ' \ wget http://ftp.cl.debian.org/debian/' ' dpkg -x $ name _* $ name sudo cp -i $ name /**/lib/* /usr/lib32 doneIterate a few times, since missing deps are found incrementally. After there are no missing libs (check with the ldd command above), you are done.
"Why is it that nuclear power isn't green? If residues are disposed of securely, then there should be no problem with it."It's not green mainly because we cannot yet dispose of nuclear waste. All we do is reprocess it, bury it in high concentrations and pray that the containers don't leak or get vandalised while it's being transported through our major cities, within arm's length of the public on train platforms or after burial, until it has decomposed enough to be "mostly harmless". There are also the problems of the amount of energy used in constructing and operating the power plants with all their security measures; and energy security for England, because current nuclear fuels are relatively rare and imported, and nuclear power stations are often built in flood-risk areas. Our nuclear power system seems very fragile. Read more from Friends of the Earth and Greenpeace UK about why nuclear is not green.