[Reproducible-commits] [presentations] 01/05: better explain other 66% and status in other distros

Holger Levsen holger at moszumanska.debian.org
Fri Oct 30 20:45:21 UTC 2015


This is an automated email from the git hooks/post-receive script.

holger pushed a commit to branch master
in repository presentations.

commit cea1ad10e28a348bd720afc06f65b61fffd6feda
Author: Holger Levsen <holger at layer-acht.org>
Date:   Fri Oct 30 13:49:16 2015 -0600

    better explain other 66% and status in other distros
---
 2015-10-30-FSL.mx/2015-10-30-fsl.mx.tex | 51 ++++++++++++++++++++++++---------
 2015-10-30-FSL.mx/notes                 |  3 +-
 2 files changed, 40 insertions(+), 14 deletions(-)

diff --git a/2015-10-30-FSL.mx/2015-10-30-fsl.mx.tex b/2015-10-30-FSL.mx/2015-10-30-fsl.mx.tex
index 27fc276..1ac883a 100644
--- a/2015-10-30-FSL.mx/2015-10-30-fsl.mx.tex
+++ b/2015-10-30-FSL.mx/2015-10-30-fsl.mx.tex
@@ -849,36 +849,61 @@ Build-Environment:
 
  \begin{itemize}
   \item Section 4.15: “Sources must build in a reproducible binaries.” 
+  \item\only<2-3> {I hope this will happen in early 2017 = after the Stretch
+  (Debian 9) release}
+  \item\only<3> {in 2016, hopefully: “Sources shall be build in a reproducible
+  binaries.”}
  \end{itemize}
 \end{frame}
 
+\begin{frame}
+ \frametitle{Reproducible builds demand a defined build environment}
+ \begin{itemize}
+  \item Re-creating an identical build environment is mandatory too.
+  \item Without an identical build environment reproducible builds
+  will only happen by sheer luck, thus that's not really reproducible.
+  \item\only<2>{This is only solved for Debian right now - and currently it's
+  still a proof of concept only…}
+ \end{itemize}
+\end{frame}
 
 \begin{frame}
- \frametitle{Next steps in other distributions}
+ \frametitle{Reproducible builds are just the first 33\%}
  \begin{itemize}
-  \item Yo que se
-  \item seriously: I don't know. 
-  \item 2016 will be a very interesting year.
+  \item Continuous rebuilds need to happen in a systematic way and the
+  resulting checksums need to be properly published.
+  \item \only<2>{ Integration in end user tools\\
+  "Do you really want to install this unreproducible software (y/N)" \\
+  "Which rebuilders do you want to trust?"}
  \end{itemize}
 \end{frame}
 
 \begin{frame}
- \frametitle{Reproducible builds are just the beginning}
+ \frametitle{Status of reproducible builds in other distros}
+
  \begin{itemize}
-  \item Re-creating the build environment is mandatory too, and only really solved
-  for Debian so far.
+  \item As shown we're also testing Coreboot, OpenWrt, NetBSD, FreeBSD,
+  Archlinux and soon Fedora.
+  \item But the work needs to be done within those projects.
+  \item \only<2-3>{And we are only testing for reproducible builds. No work
+  has been done on the other
+  66\% yet. (Systematic rebuilds and sharing the checksum \& end-user tool
+  integration)}
  \end{itemize}
 \end{frame}
 
+
 \begin{frame}
- \frametitle{Reproducible builds are just the beginning, cont.}
+ \frametitle{Android, Windows and all the rest}
  \begin{itemize}
-  \item Continuous rebuilds need to happen in a systematic way and the
-  results need to be properly published.
-  \item\only<2>{ Integration in end user tools\\
-  "Do you really want to install this unreproducible software (y/N)" \\
-  "Which rebuilders do you want to trust?"}
+  \item Android: some work on making Cyanogenmod reproducible (but with
+  \texttt{faketime})
+  \item IOS: in very short: it's a mess, might work with jailbreaked devices
+  only - but where's the source code?
+  \item MacOS: no idea.
+  \item Windows: why not, Microsoft is sharing\^ wselling the source at least… 
  \end{itemize}
+ \only<2> {Let's focus on Free Software first!}
 \end{frame}
 
 
diff --git a/2015-10-30-FSL.mx/notes b/2015-10-30-FSL.mx/notes
index 906d55c..ef94cd1 100644
--- a/2015-10-30-FSL.mx/notes
+++ b/2015-10-30-FSL.mx/notes
@@ -1,7 +1,8 @@
 todo
 ----
+  - open pages in browser...
   - explain diff by checksum!
-  - maybe mention android, windows, maco
+  - bold: must and shall (policy)
   - update SOURCE_DATE_EPOCH adaption
 
 nice to have

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/presentations.git



More information about the Reproducible-commits mailing list