[blog] 01/01: 93: fill in from generate-drafts script and turn into prose

Thu Feb 9 15:58:11 UTC 2017

This is an automated email from the git hooks/post-receive script.

infinity0 pushed a commit to branch master
in repository blog.

commit 4353f6bfcbf53b24df0a836a246760932f09d857
Author: Ximin Luo <infinity0 at debian.org>
Date:   Thu Feb 9 16:57:53 2017 +0100

    93: fill in from generate-drafts script and turn into prose
---
 drafts/93.mdwn                                  | 162 ++++++++++++++++++++----
 images/reproducible-heads-firmware-20170131.jpg | Bin 269275 -> 208914 bytes
 2 files changed, 138 insertions(+), 24 deletions(-)

diff --git a/drafts/93.mdwn b/drafts/93.mdwn
index 2b1f0f2..e7fc3e9 100644
--- a/drafts/93.mdwn
+++ b/drafts/93.mdwn
@@ -1,47 +1,161 @@
+[[!meta title="Reproducible Builds: week 93 in Stretch cycle"]]
+
+Here's what happened in the [Reproducible
+Builds](https://wiki.debian.org/ReproducibleBuilds) effort between Sunday
+January 29 and Saturday February 4 2017:
 
 Media coverage
 --------------
 
-Dennis Gilmore and Holger Levsen presented "Reproducible Builds and Fedora"  ([https://www.youtube.com/watch?v=d8oEg0p6QLE](Video), [http://reproducible.alioth.debian.org/presentations/2017-01-27-devconf.cz-reproducible-builds+fedora.pdf](Slides)) at [Devconf.cz](https://devconf.cz/) on February 27th 2017.
+Dennis Gilmore and Holger Levsen presented "Reproducible Builds and Fedora"
+([Video](https://www.youtube.com/watch?v=d8oEg0p6QLE),
+[Slides](http://reproducible.alioth.debian.org/presentations/2017-01-27-devconf.cz-reproducible-builds+fedora.pdf))
+at [Devconf.cz](https://devconf.cz/) on February 27th 2017.
+
+On February 1st,
+[stretch/armhf](https://tests.reproducible-builds.org/debian/testing/index_suite_armhf_stats.html)
+reached 90% reproducible packages in our test framework, so that now all four
+tested architectures are ≥ 90% reproducible in stretch. Yay! For armhf this
+means 22472 reproducible source packages (in main); for amd64, arm64 and i386
+these figures are 23363, 23062 and 22607 respectively.
+
+Chris Lamb [appeared on the Changelog
+podcast](https://changelog.com/podcast/237) to talk about reproducible builds:
+
+<audio data-theme="night" data-src="https://changelog.com/podcast/237/embed"
+src="https://cdn.changelog.com/uploads/podcast/237/the-changelog-237.mp3"
+preload="none" class="changelog-episode" controls></audio><script async
+src="https://cdn.changelog.com/embed.js"></script>
+
+Holger Levsen pitched Reproducible Builds and our need for a
+[logo](wiki.debian.org/ReproducibleBuilds/Logo) in the "Open Source Design"
+room at FOSDEM 2017
+([Video](http://video.fosdem.org/2017/AW1.121/osd_pitch_your_project.mp4),
+09:36 - 12:00).
+
+
+Reproducible work in other projects
+-----------------------------------
+
+We learned that the "slightly more secure" [Heads
+firmware](https://github.com/osresearch/heads) (a Coreboot payload) [is now
+reproducibly built regardless of host system or build
+directory](https://twitter.com/qrs/status/826060202042494976/photo/1).
+
+[<img width="50%" alt="reproducible heads build on two machines"
+src="/blog/images/reproducible-heads-firmware-20170131.jpg"
+/>](/blog/images/reproducible-heads-firmware-20170131.jpg)
+
+Docker started [preliminary work](https://github.com/docker/docker/pull/30611)
+on making image builds reproducible.
+
+
+Toolchain development and fixes
+-------------------------------
+
+Ximin Luo continued to write [code and test
+cases](https://github.com/infinity0/rb-prefix-map) for the
+`BUILD_PATH_PREFIX_MAP` environment variable. He also did extensive research on
+cross-platform and cross-language issues with enviroment variables, filesystem
+paths, and character encodings, and started preparing a draft specification
+document to describe all of this.
 
-On February 1st stretch/armhf also reached 90% reproducible packages in our current test framework, so that now all four tested architectures are >=90% reproducible in stretch. Yay! For armhf this means 22472 source packages in main, while for amd64 this means 23363 reproducible source packages! (23062 for arm64 and 22607 for i386.)
+Chris Lamb asked Python to implement an environment variable
+[PYTHONREVERSEDICTKEYORDER](https://bugs.python.org/issue29431) to randomise
+the iteration order of keys in a `dict`.  However this was rejected because
+they are planning to formally fix this order in the next language version.
 
-Chris Lamb [https://changelog.com/podcast/237](appeared on the Changelog podcast) to talk about reproducible builds:
+Bernhard Wiedemann and Florian Festi [added
+support](https://github.com/rpm-software-management/rpm/pull/143) for our
+`SOURCE_DATE_EPOCH` environment variable, to the RPM Package Manager.
 
-<audio data-theme="night" data-src="https://changelog.com/podcast/237/embed" src="https://cdn.changelog.com/uploads/podcast/237/the-changelog-237.mp3" preload="none" class="changelog-episode" controls></audio><script async src="https://cdn.changelog.com/embed.js"></script>
+James McCoy uploaded [[!pkg devscripts]] 2.17.1 with a change from Guillem
+Jover for `dscverify(1)`, adding support for .buildinfo files. (Closes: [[!bug
+852801]])
 
-Holger Levsen pitched Reproducible Builds and our need for a [wiki.debian.org/ReproducibleBuilds/Logo](logo) in the "Open Source Design" room at FOSDEM 2017 ([http://video.fosdem.org/2017/AW1.121/osd_pitch_your_project.mp4](Video, just 3 minutes starting at 09:36)).
+Piotr Ożarowski uploaded [[!pkg dh-python]] 2.20170125 with a change from Chris
+Lamb for a patch to fix [[!bug 835805]].
+
+Chris Lamb added documentation to diffoscope, strip-nondeterminism, disorderfs,
+reprotest and trydiffoscope about uploading signed tarballs when releasing. He
+also added a link to these on our website's [tools
+page](https://reproducible-builds.org/tools/).
+
+
+Packages reviewed and bugs filed
+--------------------------------
+
+Bugs filed:
+
+* "Z. Ren":
+  * [[!bug 854293]] filed against [[!pkg manpages-tr]].
+  * [[!bug 854294]] filed against [[!pkg regina-rexx]].
+* Chris Lamb:
+  * [[!bug 853039]] filed against [[!pkg fontypython]].
+  * [[!bug 853912]] filed against [[!pkg python-testfixtures]], merged upstream
+    as [PR #56](https://github.com/Simplistix/testfixtures/pull/56).
+  * [[!bug 854111]] filed against [[!pkg aprx]].
+  * [[!bug 854112]] filed against [[!pkg pnmixer]].
+* Reiner Herrmann:
+  * [[!bug 854145]] filed against [[!pkg daemontools]].
+  * [[!bug 854146]] filed against [[!pkg diploma]].
+
+
+Reviews of unreproducible packages
+----------------------------------
+
+83 package reviews have been added, 86 have been updated and 276 have been
+removed in this week, adding to our knowledge about [identified
+issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+
+2 issue types have been updated:
+
+- [[!issue captures_build_path_via_assert]]
+- [[!issue randomness_in_documentation_generated_by_epydoc]]
+
+
+Weekly QA work
+--------------
 
-Toolchain development
----------------------
+During our reproducibility testing, the following FTBFS bugs have been detected
+and reported by:
 
-http://bugs.python.org/issue29431 (lamby)
+ - Chris Lamb (6)
 
-Bernhard Wiedemann made https://github.com/rpm-software-management/rpm/pull/141 "rpm: set SOURCE\_DATE\_EPOCH from changelog"
 
-James McCoy uploaded devscripts (2.17.1) with a change
-from Guillem Jover for dscverify, adding support for .buildinfo files.  (Closes: #852801)
+diffoscope development
+----------------------
 
-< themill > 2.20170125 just hit stretch, with thanks to Chris Lamb for the patch 835805
+Work on the next version (71) continued in git this week:
 
+- Mattia Rizzolo:
+  - Override a lintian warning.
+- Chris Lamb:
+  - Update and consolidate documentation
+  - Many test additions and improvements
+  - Various code quality and software architecture improvements
+- anthraxx:
+  - Update arch package, cdrkit -> cdrtools.
 
-Patches sent upstream
----------------------
 
-- https://github.com/Simplistix/testfixtures/pull/56 (lamby)
+reproducible-website development
+--------------------------------
 
-Other projects:
----------------
+Daniel Shahaf added more notes on our "[How to chair a
+meeting](https://anonscm.debian.org/git/reproducible/reproducible-website.git/tree/how-to-chair-a-meeting.md)"
+document.
 
-We learned that the "slightly more secure" [https://github.com/osresearch/heads](Heads firmware) (a Coreboot payload) [https://twitter.com/qrs/status/826060202042494976/photo/1](is now reproducibly built regardless of host system or build directory). 
 
-<img style="margin-top: 10px; vertical-align: top;"
-src="/blog/images/reproducible-heads-firmware-20170131.jpg" alt="reproducible heads build on two machines" />
+tests.reproducible-builds.org
+-----------------------
 
-https://github.com/docker/docker/pull/30611 - work on making Docker image builds reproducible
+Holger unblacklisted [[!pkg pspp]] and [[!pkg tiledarray]]. If you think
+further packages should also be unblacklisted (possibly only on some
+architectures), please tell us.
 
 
-tests.r-b.o/Debian:
--------------------
+Misc.
+-----
 
-- h01ger unblacklisted [[!pkg pspp]] and [[!pkg tiledarray]] - if you think other packages should be unblacklisted (maybe only on some architectures), please do tell us.
+This week's edition was written by Ximin Luo, Holger Levsen and Chris Lamb &
+reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.
diff --git a/images/reproducible-heads-firmware-20170131.jpg b/images/reproducible-heads-firmware-20170131.jpg
index 2ba95bc..a34db1b 100644
Binary files a/images/reproducible-heads-firmware-20170131.jpg and b/images/reproducible-heads-firmware-20170131.jpg differ

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git

