[blog] 01/01: 135: update from generate-draft script and turn into prose

Mon Nov 27 10:24:52 UTC 2017

This is an automated email from the git hooks/post-receive script.

infinity0 pushed a commit to branch master
in repository blog.

commit c3e2715e2fb3866f63086ff6f70d3531f1456313
Author: Ximin Luo <infinity0 at debian.org>
Date:   Mon Nov 27 11:24:45 2017 +0100

    135: update from generate-draft script and turn into prose
---
 drafts/135.mdwn | 140 +++++++++++++++++++++++++++++++++++++++++++++++---------
 1 file changed, 119 insertions(+), 21 deletions(-)

diff --git a/drafts/135.mdwn b/drafts/135.mdwn
index 935b500..c8242b9 100644
--- a/drafts/135.mdwn
+++ b/drafts/135.mdwn
@@ -1,46 +1,144 @@
+[[!meta title="Reproducible Builds: Weekly report #135"]]
+
+Here's what happened in the [Reproducible
+Builds](https://reproducible-builds.org) effort between Sunday November 19 and
+Saturday November 25 2017:
+
 
 Reproducible Arch Linux
 -----------------------
 
-Since November 23 2017 [Arch Linux](https://www.archlinux.org) is again [constantly tested for reproducibility](https://tests.reproducible-builds.org/archlinux/),
-however this time a patched pacman is used which can create reproducible packages. After 4 days of testing, 18% of all packages in the <em>core, extra, multilib and community</em> Arch repos has been tested, with these - very preliminary - results:
+Since November 23 2017 [Arch Linux](https://www.archlinux.org) is again
+[continuously tested for
+reproducibility](https://tests.reproducible-builds.org/archlinux/), however
+this time a patched pacman is used which can create reproducible packages.
+After 4 days of testing, 18% of all packages in the <em>core, extra, multilib
+and community</em> Arch repos has been tested, with these - very preliminary -
+results:
 
 * core: 77.1% reproducible, all 197 packages tested.
 * extra: 75.2% reproducible, 514 packages (of 2250 total) tested.
 * multilib: 82.6% reproducible, all 259 packages tested.
 * community: 76.5% reproducible, 487 packages (of 7739 total) tested.
 
-Jelle van der Waa also wrote a blog post [explaining some more details and how this alreay had lead to more QA work in Arch Linux.](http://vdwaa.nl/arch/linux/reproducible/builds/security/reproducible-builds-arch/)
+Jelle van der Waa also wrote a blog post [explaining some more details and how
+this alreay had lead to more QA work in Arch
+Linux.](http://vdwaa.nl/arch/linux/reproducible/builds/security/reproducible-builds-arch/)
 
-So all in all, <em>it looks like</em>77.2% of the tested Arch Linux packages are now reproducible! With an unreleased pacman version and without some variations we apply when testing Debian… still this is a very good start! Kudos to all involved.
+So all in all, <em>it looks like</em> 77.2% of the tested Arch Linux packages
+are now reproducible! With an unreleased pacman version and without some
+variations we apply when testing Debian… still this is a very good start! Kudos
+to all involved.
 
 
-Upstream patches:
-* [bitz-server](https://github.com/uditha-atukorala/bitz-server/pull/7) merged, build path
-* [systemtap](https://sourceware.org/ml/systemtap/2017-q4/msg00149.html) date
-* [nfoview](https://github.com/otsaloma/nfoview/pull/13) merged, sort python glob
-* [libvma](https://github.com/Mellanox/libvma/pull/515) date/SDE
-* [openSUSE/cloud-init](https://bugzilla.opensuse.org/show_bug.cgi?id=1069635) randomness from mktemp
-* [openSSUE/kernel-obs-build](https://build.opensuse.org/request/show/545254) random filesystem UUID
+Packages reviewed and fixed, and bugs filed
+-------------------------------------------
 
-[jenkins archlinux FIXME](https://lists.reproducible-builds.org/pipermail/rb-general/2017-November/000713.html)
+Patches filed upstream:
 
-Database scheme discussion: https://lists.reproducible-builds.org/pipermail/rb-general/2017-November/000713.html
+* Bernhard M. Wiedemann:
+  * [bitz-server](https://github.com/uditha-atukorala/bitz-server/pull/7) (merged) - build path
+  * [libvma](https://github.com/Mellanox/libvma/pull/515) - date, `SOURCE_DATE_EPOCH` support
+  * [nfoview](https://github.com/otsaloma/nfoview/pull/13) (merged) - file ordering, python `glob`
+  * [systemtap](https://sourceware.org/ml/systemtap/2017-q4/msg00149.html) - date
+* Chris Lamb:
+  * [gpaw](https://gitlab.com/gpaw/gpaw/merge_requests/286) - embedded logging output
 
-https://gitlab.com/gpaw/gpaw/merge_requests/286
+Patches filed in Debian:
 
-tests.reproducible-builds.org
------------------------------
+* Chris Lamb:
+    * [[!bug 882112]] filed against [[!pkg bitz-server]].
+    * [[!bug 882277]] filed against [[!pkg atk1.0]].
+    * [[!bug 882383]] filed against [[!pkg json-glib]].
+    * [[!bug 882446]] filed against [[!pkg geocode-glib]].
+    * [[!bug 882447]] filed against [[!pkg pyzor]].
+    * [[!bug 882462]] filed against [[!pkg bugs-everywhere]].
+    * [[!bug 882578]] filed against [[!pkg pymongo]].
+    * [[!bug 882579]] filed against [[!pkg landslide]].
+    * [[!bug 882580]] filed against [[!pkg ruby-mmap2]].
+    * [[!bug 882638]] filed against [[!pkg gpaw]].
+    * [[!bug 882639]] filed against [[!pkg sfepy]].
+    * [[!bug 882727]] filed against [[!pkg libffi-platypus-perl]].
 
-Holger moved irc notifications for jenkins.debian.net from #debian-reproducible to #reproducible-builds (and kept them on #debian-qa as well).
+Patches filed in OpenSUSE:
 
-* FIXME, add git commits
+* Bernhard M. Wiedemann:
+  * [cloud-init](https://bugzilla.opensuse.org/show_bug.cgi?id=1069635) - randomness from `mktemp(1)`
+  * [kernel-obs-build](https://build.opensuse.org/request/show/545254) - random filesystem UUID
+
+
+Reviews of unreproducible packages
+----------------------------------
+
+97 package reviews have been added, 56 have been updated and 42 have been removed in this week,
+adding to our knowledge about [identified issues](https://tests.reproducible-builds.org/debian/index_issues.html).
 
-Tools updates
--------------
+2 issue types have been updated:
 
-* [reproducible-faketools](https://github.com/bmwiedemann/reproducible-faketools) got a 0.3.10 release with support for
+- [Add new timestamps\_in\_rcc\_files\_generated\_by\_rcc toolchain issue.](https://anonscm.debian.org/git/reproducible/notes.git/commit/?id=893323fa)
+- [Add new build\_path\_in\_files\_generated\_by\_qdbusxml2cpp toolchain issue.](https://anonscm.debian.org/git/reproducible/notes.git/commit/?id=5b641d62)
+
+
+Weekly QA work
+--------------
+
+During our reproducibility testing, FTBFS bugs have been detected and reported by:
+
+ - Adrian Bunk (62)
+ - Gilles Filippini (1)
+ - Gregor Riepl (1)
+ - James Cowgill (1)
+ - Laurent Bigonville (1)
+ - Matthias Klose (1)
+ - Sylvestre Ledru (2)
+ - gregor herrmann (1)
+
+
+reproducible-faketools
+----------------------
+
+* [reproducible-faketools](https://github.com/bmwiedemann/reproducible-faketools)/0.3.10 was released with support for:
   * reduced randomness (/dev/random and urandom are actually /dev/zero)
   * disabled ASLR and
   * building with fixed PIDs.
   * Also the tar wrapper script got a bug fix.
+
+
+reprotest development
+---------------------
+
+- Ximin Luo:
+    - [build: comment about why we do 'sudo -h localhost'](https://anonscm.debian.org/git/reproducible/reprotest.git/commit/?id=3143efa)
+    - [build: add num\_cpu variation](https://anonscm.debian.org/git/reproducible/reprotest.git/commit/?id=d5dd4df)
+    - [build: add aslr variation](https://anonscm.debian.org/git/reproducible/reprotest.git/commit/?id=f0182b0)
+    - [build: just use "sudo -h localhost" instead of messing around with mount namespaces](https://anonscm.debian.org/git/reproducible/reprotest.git/commit/?id=4e57b19)
+
+
+reproducible-website development
+--------------------------------
+
+- Chris Lamb:
+    - [Add a (redirecting) /docs/source-date-epoch/ page so we have a canonical URL on r-b.org.](https://anonscm.debian.org/git/reproducible/reproducible-website.git/commit/?id=cb3f76f)
+    - [Add a 'blank' Jekyll layout.](https://anonscm.debian.org/git/reproducible/reproducible-website.git/commit/?id=7ee39da)
+- Holger Levsen:
+    - [Add Qubes OS to the list of involved projects - thanks to Andew David Wong](https://anonscm.debian.org/git/reproducible/reproducible-website.git/commit/?id=8760c33)
+
+
+tests.reproducible-builds.org
+-----------------------------
+
+Holger moved irc notifications for jenkins.debian.net from #debian-reproducible
+to #reproducible-builds (and kept them on #debian-qa as well).
+
+There was discussion to [generalise the database schema to cover Arch
+Linux](https://lists.reproducible-builds.org/pipermail/rb-general/2017-November/000713.html)
+
+* FIXME, add git commits
+
+
+Misc.
+-----
+
+This week's edition was written by Ximin Luo, Bernhard M. Wiedemann and Holger
+Levsen & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing
+lists.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git

