[blog] 01/01: Initial draft of 151.

Sun Mar 18 14:32:12 UTC 2018

This is an automated email from the git hooks/post-receive script.

lamby pushed a commit to branch master
in repository blog.

commit 3ce5211ceb9db127320aa6f619e1fbadb8aa945c
Author: Chris Lamb <lamby at debian.org>
Date:   Sun Mar 18 10:32:01 2018 -0400

    Initial draft of 151.
---
 drafts/151.mdwn | 82 ++++++++++++++++++++++++++++++++++++++++++++-------------
 1 file changed, 63 insertions(+), 19 deletions(-)

diff --git a/drafts/151.mdwn b/drafts/151.mdwn
index c714382..e4c62d5 100644
--- a/drafts/151.mdwn
+++ b/drafts/151.mdwn
@@ -1,23 +1,67 @@
- * [npm pack: use a specific mtime when packing](https://github.com/npm/npm/commit/58d2aa58d5f9c4db49f57a5f33952b3106778669)
- * [The latest release of Tails (3.6) is no longer reproducible.](https://tails.boum.org/news/version_3.6/index.en.html)
- * [FIXME](https://motherboard.vice.com/en_us/article/a34b7b/phantom-secure-sinaloa-drug-cartel-encrypted-blackberry)
- * mattia updated our patched gcc to 7.3.0-11
- * the arm64 build network came back after a fairly long (more than a month?) downtime due to a hardware issue.
- * [FIXME](https://www.heise.de/security/meldung/Trojanisierte-Version-des-BitTorrent-Clients-MediaGet-infizierte-400-000-Computer-3995514.html)
- * [FIXME](https://www.tweag.io/posts/2018-03-15-bazel-nix.html)
+[[!meta title="Reproducible Builds: Weekly report #151"]]
 
+Here's what happened in the [Reproducible Builds](https://reproducible-builds.org) effort between Sunday March 11 and Saturday March 17 2018:
 
- * Bernhard M. Wiedemann:
-    * [nautilus-dropbox](https://build.opensuse.org/request/show/585725) (date/SDE)
-    * [pencil](https://build.opensuse.org/request/show/585798) (date)
+* Mattia Rizzolo updated our patched version of GCC to `7.3.0-11`. This includes our patches to support [`BUILD_PATH_PREFIX_MAP`](https://wiki.debian.org/ReproducibleBuilds/BuildPathProposal).
+
+* Chris Lamb added support for comparing [Gnumeric](http://www.gnumeric.org/) spreadsheets to our [diffoscope](https://diffoscope.org) tool ([[!bug 893311]]) as well as updated the tests tests for `openjdk-9` ([[!bug 893183]]).
+
+* The `arm64` network in our test build framework came back after some protracted downtime. This was caused by a hardware issue.
+
+* 63 package reviews were added to our [package notes](https://anonscm.debian.org/git/reproducible/notes.git), 43 were updated and 38 were been removed this week, adding to our [knowledge about identified issues](https://tests.reproducible-builds.org/debian/index_issues.html). A [timestamps\_in\_pdf\_generated\_by\_inkscape](https://anonscm.debian.org/git/reproducible/notes.git/commit/?id=a746991a) toolchain issue was added.
+
+* [Isaac Z. Schlueter](http://izs.me/) updated the [npm](https://www.npmjs.com/) package manager for JavaScript applications to [use a fixed, deterministic modification time when creating archives](https://github.com/npm/npm/commit/58d2aa58d5f9c4db49f57a5f33952b3106778669). Due to a limitation in the ZIP archive format, they opted for [26th October 1985](http://backtothefuture.wikia.com/wiki/Back_to_the_Future_timeline) instead.
+
+* The [latest release of Tails](https://tails.boum.org/news/version_3.6/index.en.html) (3.6) is no longer reproducible.
+
+* Heise [reported on a trojaned version of a BitTorrent client that infected 400,000 computers](https://www.heise.de/security/meldung/Trojanisierte-Version-des-BitTorrent-Clients-MediaGet-infizierte-400-000-Computer-3995514.html) (German). We believe such attacks would be detected quicker with a combination of free software and reproducible builds.
+
+* Mathieu Boespflug and Théophane Hufschmitt posted about [using Bazel and Nix to achieve fully-reproducible builds](https://www.tweag.io/posts/2018-03-15-bazel-nix.html).
+
+* Holger Levsen [added yocto to our list of partner projects](https://anonscm.debian.org/git/reproducible/reproducible-website.git/commit/?id=ce5f0a8) as [they mention "Binary Reproducibility"](https://www.yoctoproject.org/software-overview/features/) as a feature.
+
+
+Upcoming events
+---------------
+
+* On Tuesday March 20th, Chris Lamb [will speak about reproducible builds at the New York Linux Users Group](https://www.meetup.com/nylug-meetings/events/248246544/).
+
+* Chris Lamb will also be presenting at [LibrePlanet 2018](https://www.libreplanet.org/2018/) on reproducible builds on Saturday 24th March.
+
+
+Patches submitted
+-----------------
+
+* Bernhard M. Wiedemann:
+    * [epic](https://build.opensuse.org/request/show/586708) (sent upstream via email)
     * [icinga2](https://build.opensuse.org/request/show/585980) (hostname)
-    * [uisp](https://build.opensuse.org/request/show/586030) (date/SDE)
-    * [python-bjoern](https://build.opensuse.org/request/show/586121) (sort readdir)
+    * [kubernetes](https://github.com/kubernetes/kubernetes/issues/48710) (parallelism, copyright year)
+    * [lilypond](https://sourceforge.net/p/testlilyissues/issues/5290/) (use `convert -strip`)
     * [marisa](https://build.opensuse.org/request/show/586304) (drop date)
-    * [wyrd](https://build.opensuse.org/request/show/586334) (date/SDE)
-    * [epic](https://build.opensuse.org/request/show/586708) (sent upstream via email to jnelson at epicsol)
-    * [lilypond](https://sourceforge.net/p/testlilyissues/issues/5290/) use convert -strip
-    * [perl](https://rt.cpan.org/Public/Bug/Display.html?id=124787) Time::Local FTBFS-2020
-    * [kubernetes](https://github.com/kubernetes/kubernetes/issues/48710) updated: TODO parallelism, copyright year
-    * [mono](https://bugzilla.opensuse.org/show_bug.cgi?id=1085258) TODO date
- * [inkscape upstream](https://gitlab.com/inkscape/inkscape/merge_requests/219)
+    * [mono](https://bugzilla.opensuse.org/show_bug.cgi?id=1085258) (date)
+    * [nautilus-dropbox](https://build.opensuse.org/request/show/585725) (date/`SOURCE_DATE_EPOCH`)
+    * [pencil](https://build.opensuse.org/request/show/585798) (date)
+    * [perl](https://rt.cpan.org/Public/Bug/Display.html?id=124787) (`Time::Local` FTBFS in 2020)
+    * [python-bjoern](https://build.opensuse.org/request/show/586121) (sort, `readdir(2)`)
+    * [uisp](https://build.opensuse.org/request/show/586030) (date/`SOURCE_DATE_EPOCH`)
+    * [wyrd](https://build.opensuse.org/request/show/586334) (date/`SOURCE_DATE_EPOCH`)
+
+* Chris Lamb:
+    * [[!bug 893314]] filed against [[!pkg inkscape]] ([sent upstream](https://gitlab.com/inkscape/inkscape/merge_requests/219)).
+
+
+Weekly QA work
+--------------
+
+During our reproducibility testing, FTBFS bugs have been detected and reported by:
+
+ - Adrian Bunk (168)
+ - Emmanuel Bourg (2)
+ - Pirate Praveen (1)
+ - Tiago Stürmer Daitx (1)
+
+
+Misc.
+-----
+
+This week's edition was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Mattia Rizzolo & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/reproducible/blog.git

