[Reproducible-commits] [blog] 01/01: 69: fill in yet-unformatted details for this week around holger's existing notes
Ximin Luo
infinity0 at debian.org
Mon Aug 22 16:50:12 UTC 2016
This is an automated email from the git hooks/post-receive script.
infinity0 pushed a commit to branch master
in repository blog.
commit 0122a4c388cb38a2c8086f91c5b25931f46ffc23
Author: Ximin Luo <infinity0 at debian.org>
Date: Mon Aug 22 18:49:37 2016 +0200
69: fill in yet-unformatted details for this week around holger's existing notes
---
drafts/69.mdwn | 221 +++++++++++++++++++++++++++++++++++++++++++++++++--------
1 file changed, 193 insertions(+), 28 deletions(-)
diff --git a/drafts/69.mdwn b/drafts/69.mdwn
index a83995a..4f51ba6 100644
--- a/drafts/69.mdwn
+++ b/drafts/69.mdwn
@@ -1,11 +1,33 @@
-week starting 14 august 00 utc
+[[!meta title="Reproducible Builds: week 69 in Stretch cycle"]]
-toolchain development:
+What happened in the [Reproducible
+Builds](https://wiki.debian.org/ReproducibleBuilds) effort between Sunday August 14 and Saturday August 20 2016:
-Thomas Schmitt uploaded is http://www.gnu.org/software/xorriso/xorriso-1.4.5.tar.gz
-which obeys SOURCE_DATE_EPOCH by stating in its man pages
- ENVIRONMENT
- ...
+Media coverage
+--------------
+
+FIXME
+
+GSoC and Outreachy updates
+--------------------------
+
+FIXME
+
+Documentation update
+--------------------
+
+FIXME
+
+Reproducible work in other projects
+-----------------------------------
+
+Thomas Schmitt uploaded
+[xorriso](http://www.gnu.org/software/xorriso/xorriso-1.4.5.tar.gz) which [now
+obeys](http://libburnia-project.org/changeset/5747) `SOURCE_DATE_EPOCH`. As
+stated in its man pages:
+
+ ENVIRONMENT
+ [...]
SOURCE_DATE_EPOCH belongs to the specs of reproducible-builds.org. It
is supposed to be either undefined or to contain a decimal number which
tells the seconds since january 1st 1970. If it contains a number, then
@@ -13,18 +35,152 @@ which obeys SOURCE_DATE_EPOCH by stating in its man pages
--gpt_disk_guid, and --set_all_file_dates. Startup files and program
options can override the effect of SOURCE_DATE_EPOCH.
-Changeset:
- http://libburnia-project.org/changeset/5747
+Packages reviewed and fixed, and bugs filed
+-------------------------------------------
+
+The following packages have become reproducible after being fixed:
+
+- [[!pkg cadencii]] is reproducible on amd64, armhf, i386 since 3.3.9+svn20110818.r1732-5 over 3.3.9+svn20110818.r1732-4 <http://metadata.ftp-master.debian.org/changelogs/main/c/cadencii/cadencii_3.3.9+svn20110818.r1732-5_changelog>.
+- [[!pkg cfengine3]] is reproducible on i386 since 3.7.4-3 over 3.7.4-2 <http://metadata.ftp-master.debian.org/changelogs/main/c/cfengine3/cfengine3_3.7.4-3_changelog>; on amd64 since 3.7.4-3 over 3.6.2-4 <http://metadata.ftp-master.debian.org/changelogs/main/c/cfengine3/cfengine3_3.7.4-3_changelog>.
+- [[!pkg findbugs]] is reproducible on amd64, armhf, i386 since 3.1.0~preview2-1 over 3.0.1-2 <http://metadata.ftp-master.debian.org/changelogs/main/f/findbugs/findbugs_3.1.0~preview2-1_changelog>.
+- [[!pkg gcpegg]] is reproducible on amd64, armhf, i386 since 5.1-14 over 5.1-13 <http://metadata.ftp-master.debian.org/changelogs/main/g/gcpegg/gcpegg_5.1-14_changelog>.
+- [[!pkg gnunet-gtk]] is reproducible on amd64, i386 since 0.10.1-4 over 0.10.1-3 <http://metadata.ftp-master.debian.org/changelogs/main/g/gnunet-gtk/gnunet-gtk_0.10.1-4_changelog>.
+- [[!pkg konwert]] is reproducible on amd64, armhf, i386 since 1.8-12 over 1.8-11.2 <http://metadata.ftp-master.debian.org/changelogs/main/k/konwert/konwert_1.8-12_changelog>.
+- [[!pkg link-grammar]] is reproducible on amd64 since 5.3.8-2 over 5.3.7-2 <http://metadata.ftp-master.debian.org/changelogs/main/l/link-grammar/link-grammar_5.3.8-2_changelog>; on armhf, i386 since 5.3.8-1 over 5.3.7-2 <http://metadata.ftp-master.debian.org/changelogs/main/l/link-grammar/link-grammar_5.3.8-1_changelog>.
+- [[!pkg metastudent-data]] is reproducible on amd64, armhf, i386 since 2.0.1-1 over 2.0.0-3 <http://metadata.ftp-master.debian.org/changelogs/main/m/metastudent-data/metastudent-data_2.0.1-1_changelog>.
+- [[!pkg pixmap]] is reproducible on amd64, armhf, i386 since 2.6pl4-20 over 2.6pl4-18 <http://metadata.ftp-master.debian.org/changelogs/main/p/pixmap/pixmap_2.6pl4-20_changelog>.
+- [[!pkg python-afl]] is reproducible on amd64, armhf, i386 since 0.5.4-2 over 0.5.4-1 <http://metadata.ftp-master.debian.org/changelogs/main/p/python-afl/python-afl_0.5.4-2_changelog>.
+- [[!pkg tf5]] is reproducible on amd64, armhf, i386 since 5.0beta8-6 over 5.0beta8-5 <http://metadata.ftp-master.debian.org/changelogs/main/t/tf5/tf5_5.0beta8-6_changelog>.
+- [[!pkg triplane]] is reproducible on armhf, i386 since 1.0.8-2 over 1.0.8-1 <http://metadata.ftp-master.debian.org/changelogs/main/t/triplane/triplane_1.0.8-2_changelog>.
+- [[!pkg vips]] is reproducible on amd64, armhf, i386 since 8.3.3-1 over 8.3.1-1 <http://metadata.ftp-master.debian.org/changelogs/main/v/vips/vips_8.3.3-1_changelog>.
+- [[!pkg wml]] is reproducible on amd64, armhf, i386 since 2.0.12ds1-10 over 2.0.12ds1-9 <http://metadata.ftp-master.debian.org/changelogs/main/w/wml/wml_2.0.12ds1-10_changelog>.
+- [[!pkg xzgv]] is reproducible on amd64, armhf, i386 since 0.9.1-4 over 0.9.1-3 <http://metadata.ftp-master.debian.org/changelogs/main/x/xzgv/xzgv_0.9.1-4_changelog>.
+
+The following updated packages appear to be reproducible now, for reasons we
+were not able to figure out. (Relevant changelogs did not mention reproducible
+builds.)
+
+- [[!pkg vulkan]] is reproducible on amd64, armhf, i386 since 1.0.21.0+dfsg1-1 over 1.0.8.0+dfsg1-1 <http://metadata.ftp-master.debian.org/changelogs/main/v/vulkan/vulkan_1.0.21.0+dfsg1-1_changelog>.
+
+The following 2 packages were not changed, but have become reproducible due
+to changes in their build-dependencies:
+
+- [[!pkg tagsoup]] is reproducible on armhf likely due to toolchain fixes.
+- [[!pkg tclx8.4]] is reproducible on armhf likely due to toolchain fixes.
+
+Some uploads have addressed some reproducibility issues, but not all of them:
+
+ 166 N Aug 20 Breno Leitao ( 50) Accepted cappuccino 0.5.1-4 (source) into unstable
+ 251 N Aug 20 Nicolas Bouleng ( 61) Accepted darkice 1.3-0.1 (source) into unstable
+ 425 N Aug 14 Ondřej Nový ( 60) Accepted flask-restful 0.3.5-1 (source) into unstable
+ 876 N Aug 18 Balint Reczey ( 68) Accepted kodi 16.1+dfsg1-2 (source) into unstable
+ 925 N Aug 17 Nicolas Bouleng ( 72) Accepted libaws 3.3.2-3 (all amd64 source) into experimental, experimental
+1041 N Aug 17 Nicolas Bouleng ( 83) Accepted liblog4ada 1.3-1 (all amd64 source) into unstable, unstable
+1155 N Aug 16 Nicolas Bouleng ( 71) Accepted libxmlezout 1.06.1-8 (amd64 source) into unstable
+1864 N Aug 16 Antonio Terceir ( 54) Accepted ruby-rmagick 2.15.4+dfsg-2 (source) into unstable
+2008 N Aug 15 Kumar Appaiah ( 57) Accepted taggrepper 0.05-2 (source amd64) into unstable
+2177 N Aug 19 Stefan Sobernig ( 74) Accepted xotcl 1.6.8-2 (source all amd64) into unstable
+
+Patches submitted that have not made their way to the archive yet:
+
+FIXME: prune the below list so it doesn't duplicate the information above, and
+perhaps also run bin/review-bugs to see if anything was missed.
+
+Patches have been submitted by:
+
+- Chris Lamb:
+ - [sheepdog: please make the build reproducible](https://bugs.debian.org/835051)
+ - [mozvoikko: please make the build reproducible](https://bugs.debian.org/834537)
+ - [vips: please make the build reproducible](https://bugs.debian.org/834758)
+ - [libquvi: please make the build reproducible](https://bugs.debian.org/834945)
+ - [pybit: please make the build reproducible](https://bugs.debian.org/834277)
+ - [ircd-irc2: please make the build reproducible](https://bugs.debian.org/834956)
+ - [eyed3: please make the build reproducible](https://bugs.debian.org/834983)
+ - [phpab: please make the build reproducible](https://bugs.debian.org/834754)
+ - [nagios-nrpe: please make the build reproducible](https://bugs.debian.org/834857)
+ - [ttf-tiresias: please make the build reproducible](https://bugs.debian.org/834896)
+ - [dicom3tools: please make the build reproducible](https://bugs.debian.org/834779)
+ - [tf5: please make the build reproducible](https://bugs.debian.org/834276)
+ - [librep: please make the build reproducible](https://bugs.debian.org/834534)
+ - [tuxpaint-config: please make the build reproducible](https://bugs.debian.org/834780)
+ - [filepp: please make the output (and build) reproducible](https://bugs.debian.org/834735)
+ - [libdc0: please make the build reproducible](https://bugs.debian.org/834452)
+ - [flashrom: please make the build reproducible](https://bugs.debian.org/834957)
+ - [botan1.10: please make the build reproducible](https://bugs.debian.org/834549)
+ - [echoping: please make the build reproducible](https://bugs.debian.org/834859)
+ - [twitter-bootstrap3: please make the build reproducible](https://bugs.debian.org/834988)
+ - [filepp: please make the output (and build) reproducible](https://bugs.debian.org/834735)
+ - [phpldapadmin: please make the build reproducible](https://bugs.debian.org/834279)
+ - [uhub: please make the build reproducible](https://bugs.debian.org/834776)
+ - [gkrellm: please make the build reproducible](https://bugs.debian.org/834774)
+ - [apt-cacher-ng: please make the build reproducible](https://bugs.debian.org/834755)
+ - [cookiecutter: please make the build reproducible](https://bugs.debian.org/834861)
+ - [nagios-nrpe: please make the build reproducible](https://bugs.debian.org/834857)
+ - [pyicu: please make the build reproducible](https://bugs.debian.org/834553)
+ - [ruby-pg: please make the build reproducible](https://bugs.debian.org/834541)
+ - [varnish: please make the build reproducible](https://bugs.debian.org/835061)
+ - [mozvoikko: please make the build reproducible](https://bugs.debian.org/834537)
+ - [jpy: please make the build reproducible](https://bugs.debian.org/834897)
+ - [gkrellm: please make the build reproducible](https://bugs.debian.org/834773)
+ - [auto-apt-proxy: FTBFS: SC2039: In POSIX sh, 'local' is undefined](https://bugs.debian.org/834976)
+ - [gr-radar: FTBFS: estimator_cw_impl.h:49:36: error: 'constexpr' needed for in-class initialization of static data member](https://bugs.debian.org/834292)
+
+- Reiner Herrmann:
+ - [libnss-ldap: please make the build reproducible](https://bugs.debian.org/834324)
+ - [pd-flite: please make the build reproducible](https://bugs.debian.org/834302)
+ - [openocd: please make the build reproducible](https://bugs.debian.org/834316)
+ - [oss4: please make the build reproducible](https://bugs.debian.org/834993)
+ - [oss4: please make the build reproducible](https://bugs.debian.org/834993)
+ - [oss4: please make the build reproducible](https://bugs.debian.org/834993)
+ - [oss4: please make the build reproducible](https://bugs.debian.org/834993)
+ - [pd-flite: please make the build reproducible](https://bugs.debian.org/834302)
+ - [libnss-ldap: please make the build reproducible](https://bugs.debian.org/834324)
+
+bugs:
+ lamby pinged 164 bugs he filed more than 90 days ago which have a patch and no maintainer reaction
+ TODO: describe number of replies, call for more replies
+
+
+Reviews of unreproducible packages
+----------------------------------
+
+55 package reviews have been added, 161 have been updated and 136 have been
+removed in this week, adding to our knowledge about [identified
+issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+
+2 issue types have been updated:
+
+- Added [user_in_documentation_generated_by_gsdoc](https://anonscm.debian.org/git/reproducible/notes.git/commit/?id=a42d8fa)
+- Added [locale_differences_in_pom](https://anonscm.debian.org/git/reproducible/notes.git/commit/?id=d698414)
+
+
+Weekly QA work
+--------------
+
+FTBFS bugs have been reported by:
+
+ - Chris Lamb (16)
+ - Santiago Vila (2)
+
+
+diffoscope development
+----------------------
+
+Chris Lamb, Holger Levsen and Mattia Rizzolo worked on diffoscope this week.
+
+Improvements were made to SquashFS and JSON comparison, the
+[https://try.diffoscope.org/](trydiffoscope) web service, documentation,
+packaging, and general code quality.
+
+diffoscope 57, 58, and 59 were uploaded to unstable by Chris Lamb. Versions 57
+and 58 were both broken, so Holger set up a job on jenkins.debian.net to test
+diffoscope on each git commit. He also wrote a CONTRIBUTING document to help
+prevent this from happening in future.
+
+From these efforts, we were able to learn that diffoscope is now reproducible
+even when built across multiple architectures:
-diffoscope development:
- Holger set up a job on jenkins.d.n to test diffoscope on each git commit.
- uploads 57+58 happened and were both broken.
- Holger wrote a CONTRIBUTING document to prevent this from happening in future
- uploaded 59 as binary upload because the broken 58 upload required that. which had the nice side effect that we could easily see this:
- < h01ger> | lamby: your diffoscope 59 upload included these binary packages:
- < h01ger> | bd21db708fe91c01ba1c9cb35b9d41a7c9b0db2b 62288 diffoscope_59_all.deb
- < h01ger> | 366200bf2841136a4c8f8c30bdc87057d59a4cdd 20146 trydiffoscope_59_all.deb
< h01ger> | https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/diffoscope.html build these packages on amd64_
< h01ger> | bd21db708fe91c01ba1c9cb35b9d41a7c9b0db2b 62288 diffoscope_59_all.deb
< h01ger> | 366200bf2841136a4c8f8c30bdc87057d59a4cdd 20146 trydiffoscope_59_all.deb
@@ -35,26 +191,25 @@ diffoscope development:
< h01ger> | bd21db708fe91c01ba1c9cb35b9d41a7c9b0db2b 62288 diffoscope_59_all.deb
< h01ger> | 366200bf2841136a4c8f8c30bdc87057d59a4cdd 20146 trydiffoscope_59_all.deb
-bugs:
- lamby pinged 164 bugs he filed more than 90 days ago which have a patch and no maintainer reaction
- TODO: describe number of replies, call for more replies
-t.r-b.o
- debian:
+tests.reproducible-builds.org
+-----------------------
+
+ debian:
- show percentage of results in the last 24/48h (h01ger)
- switch python database backend to SQLAlchemy (Valerie)
- vary build path everywhere except when testing stretch (h01ger) - FIXME: explain why + expectations…
some notes for writing this FIXME:
enable build path variation for unstable and experimental
- [00:50] < h01ger> | so, more thinking brought me to: enable build path variation for exp. and sid, disable it for testing. besides being more logical and keeping the higher percentages (testing
- is more reproducible than sid…) this has another advantage: we keep the less varying diffoscope output available (for packages which vary outside buildpath) which should make analysis
+ [00:50] < h01ger> | so, more thinking brought me to: enable build path variation for exp. and sid, disable it for testing. besides being more logical and keeping the higher percentages (testing
+ is more reproducible than sid…) this has another advantage: we keep the less varying diffoscope output available (for packages which vary outside buildpath) which should make analysis
easier. and debian can decide whether
[00:50] < h01ger> | we want to keep build pathes in .buildinfo files or ...
-[00:50] < h01ger> | ... not…
-[00:51] < h01ger> | and probabyl we as debian should keep them, and we as reproducible debian project should test with build path variation…
+[00:50] < h01ger> | ... not…
+[00:51] < h01ger> | and probabyl we as debian should keep them, and we as reproducible debian project should test with build path variation…
[00:51] < h01ger> | and maybe then we should do two kinds of rebuilds: with a different path than the original archive build and (only) if that fails, with the same path
[00:53] < HW42> sounds good
-[00:53] < h01ger> | because besides academia we also have another goal: enable users to indipendantly verify builds. and if they only can do this in /home/holger, than this is not so good, but
+[00:53] < h01ger> | because besides academia we also have another goal: enable users to indipendantly verify builds. and if they only can do this in /home/holger, than this is not so good, but
maybe acceptable with s#/home/holger/#/tmp/buildd/#g
^^ rewrite
@@ -65,6 +220,16 @@ unstable/i386 24693 21182 / 85.7% 2349 / 9.5% 972 / 3.9% 76 / .3% 103 / .4% 10
unstable/armhf 24693 20889 / 84.6% 2050 / 8.3% 1126 / 4.5% 199 / .8% 296 / 1.1% 129 / .5%
+Misc.
+-----
+
+Ximin Luo updated our git setup scripts to make it easier for people to write
+proper descriptions for our repositories.
+
+Daniel Stender blogged about [python
+packaging](http://www.danielstender.com/blog/python-packaging-notes1.html) and
+explained some caveats regarding reproducible builds.
+
+This week's edition was written by Ximin Luo and Holger Levsen and reviewed by
+a bunch of Reproducible Builds folks on IRC.
-misc:
- Daniel Stender blogged about [python packaging](http://www.danielstender.com/blog/python-packaging-notes1.html) and explained some caveats regarding reproducible builds.
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git
More information about the Reproducible-commits
mailing list