[blog] 01/01: 131: update from generate-draft script and turn into prose

Wed Nov 1 15:21:22 UTC 2017

This is an automated email from the git hooks/post-receive script.

infinity0 pushed a commit to branch master
in repository blog.

commit 5d1c87f4df3e05bd750e81d4c00939194cbff8bf
Author: Ximin Luo <infinity0 at debian.org>
Date:   Wed Nov 1 16:21:03 2017 +0100

    131: update from generate-draft script and turn into prose
---
 drafts/131.mdwn | 142 ++++++++++++++++++++++++++++++++++++++++++++++++++++----
 1 file changed, 133 insertions(+), 9 deletions(-)

diff --git a/drafts/131.mdwn b/drafts/131.mdwn
index ccf6e21..7d4f734 100644
--- a/drafts/131.mdwn
+++ b/drafts/131.mdwn
@@ -1,17 +1,141 @@
-https://lintian.debian.org/tags/latest-changelog-entry-without-new-date.html
-https://github.com/MyHush/hush/issues/60
+[[!meta title="Reproducible Builds: Weekly report #131"]]
+
+Here's what happened in the [Reproducible
+Builds](https://reproducible-builds.org) effort between Sunday October 22 and
+Saturday October 28 2017:
+
+Documentation updates
+---------------------
+
+Bernhard Wiedemann started [The Unreproducible
+Package](https://github.com/bmwiedemann/theunreproduciblepackage) which "is
+meant as a practical way to demonstrate the various ways that software can
+break reproducible builds using just low level primitives without requiring
+external existing programs that implement these primitives themselves.
+
+It is structured so that one subdirectory demonstrates one class of issues in
+some variants observed in the wild."
+
+
+Reproducible work in other projects
+-----------------------------------
+
+Hush, a fork of ZCash, [opened an issue](https://github.com/MyHush/hush/issues/60)
+into reproducible builds.
+
+A [new
+tag](https://lintian.debian.org/tags/latest-changelog-entry-without-new-date.html)
+was added to lintian (lint checker for Debian packages) to ensure that
+changelog entry timestamps are strictly increasing. This avoids certain
+real-world issues with identical timestamps, documented in Debian [[!bug
+843773]].
+
+
+Packages reviewed and fixed, and bugs filed
+-------------------------------------------
 
 Patches sent upstream:
 
 * Bernhard M. Wiedemann:
-  * [gtranslator](https://bugzilla.gnome.org/show_bug.cgi?id=789380) date
-  * [libgda](https://bugzilla.gnome.org/show_bug.cgi?id=789382) date
-  * [mariadb](https://github.com/MariaDB/server/pull/472) date
-  * [nim](https://github.com/nim-lang/Nim/pull/6581) date
+  * [gtranslator](https://bugzilla.gnome.org/show_bug.cgi?id=789380), embedded
+    build timestamps
+  * [libgda](https://bugzilla.gnome.org/show_bug.cgi?id=789382), embedded build
+    timestamps
+  * [mariadb](https://github.com/MariaDB/server/pull/472), embedded build
+    timestamps
+  * [nim](https://github.com/nim-lang/Nim/pull/6581), embedded build timestamps
 
-Documentation updates
+Debian bug reports:
+
+* Chris Lamb:
+    * [[!bug 879569]] filed against [[!pkg argagg]].
+    * [[!bug 879913]] filed against [[!pkg sdlgfx]].
+    * [[!bug 879914]] filed against [[!pkg fmtlib]].
+
+
+Reviews of unreproducible packages
+----------------------------------
+
+14 package reviews have been added, 35 have been updated and 28 have been
+removed in this week, adding to our knowledge about [identified
+issues](https://tests.reproducible-builds.org/debian/index_issues.html).
+
+1 issue type has been updated:
+
+ - Add [[!issue nondeterministic_ordering_in_documentation_generated_by_doxygen]].
+
+
+Weekly QA work
+--------------
+
+During our reproducibility testing, FTBFS bugs have been detected and reported
+by:
+
+ - Adrian Bunk (4)
+
+
+strip-nondeterminism development
+--------------------------------
+
+Version [0.040-1](https://tracker.debian.org/news/882433) was uploaded to unstable by Mattia Rizzolo.
+It included [contributions](https://anonscm.debian.org/git/reproducible/strip-nondeterminism.git/log/?h=debian/0.040-1)
+already covered by posts of the previous weeks, as well as new ones from:
+
+- Mattia Rizzolo:
+    - png.pm: Don't open the original file in write mode
+
+
+reprotest development
 ---------------------
 
-Bernhard Wiedemann started [The Unreproducible Package](https://github.com/bmwiedemann/theunreproduciblepackage) which "is meant as a practical way to demonstrate the various ways that software can break reproducible builds using just low level primitives without requiring external existing programs that implement these primitives themselves.
+Development continued in [git](https://anonscm.debian.org/cgit/reproducible/reprotest.git/log/):
+
+- Ximin Luo:
+  - New features:
+    - Support a `domain_host` variation.
+    - Support a `--print-sudoers` feature.
+  - Documentation:
+    - Note some caveats about the existing git versions as a self-reminder
+      not to release it yet.
+    - Updates about our assumptions and rearrange sudo into its own section.
+  - Bug fixes:
+    - main: When dropping privs, make sure the user can still move in theroot.
+    - tests: fix, need to preserve env for su
+    - build: Don't fail when the build produces a broken symlink
+    - main, presets: Properly drop privs when running the build. (Closes: [[!bug 877813]])
+  - Code quality:
+    - Improve logging to try to get to the bottom of the jenkins failures
+    - Tweak tests to avoid some build dependencies
+    - build: Name temporary directories after reprotest not autopkgtest
+
+
+buildinfo.debian.net development
+--------------------------------
+
+Development continued in [git](https://anonscm.debian.org/cgit/reproducible/buildinfo.debian.net.git/log/):
+
+- Chris Lamb:
+  - New features:
+    - Add API endpoint to fetch specific .buildinfo files for a certain
+      package/version/architecture, and optimise it. (Closes: #25)
+  - Bug fixes:
+    - Always show SHA256, regardless of viewport size. (Closes: #27)
+    - Actually filter by source package (!)
+
+
+reproducible-website development
+--------------------------------
+
+- Holger Levsen:
+  - RWS3 Berlin 2017:
+    - Add CoyIM, Arch Linux, LEDE, LEAP, subuser.org, Bazel, coreboot.
+    - Make some sponsors visible.
+    - Add short paragraph explaining that registration is mandatory.
+
+
+Misc.
+-----
 
-It is structured so that one subdirectory demonstrates one class of issues in some variants observed in the wild."
+This week's edition was written by Ximin Luo, Chris Lamb, Bernhard M. Wiedemann
+and Holger Levsen & reviewed by a bunch of Reproducible Builds folks on IRC &
+the mailing lists.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git

