Reproducible Builds: Weekly report #162

Here’s what happened in the Reproducible Builds effort between Sunday May 27 and Saturday June 2 2018:

• Allan McRae released a new version of Arch Linux’s Pacman package manager which includes support for SOURCE_DATE_EPOCH and adding environment information to a .BUILDINFO file in order that the build may be reproduced at a later date. This means future Archlinux package builds can be reproducible, finally fulfilling a long-time “TODO” for this project.

• Holger Levsen started a thread on the debian-devel mailing list enquiring about packages which may need to be rebuilt (continued here) in order that Debian buster is reproducible.

• The deprecated Alioth Debian server is now gone and has been replaced with Salsa. If you were part of the “project” on Alioth, please rejoin us on Salsa (non-Debian Developers will need to create a fresh account).

• Elio Qoshi let us know that he has almost finished the updated style guide, including CSS, and guidelines etc. to complement our new logo after we concluded voting for our new logo & typeface.

• Santiago Torres opened a poll for picking the next day for the reproducible builds IRC meeting.

• Holger Levsen uploaded strip-nondeterminism 0.041-2 and disorderfs 0.5.3-2 to Debian unstable to ensure that the URIs pointed to the new locations after their migration to Salsa.

• 7 Debian package reviews were added, 30 have been updated and 50 have been removed in this week, adding to our knowledge about identified issues. A new issue regarding Doxygen-generated documentation was created by Chris Lamb.

Packages reviewed and fixed, and bugs filed

• Bernhard M. Wiedemann
  • osmo-iuh (SOURCE_DATE_EPOCH, user)
  • pocketsphinx-python (sort)
  • python-limnoria (SOURCE_DATE_EPOCH)
• Chris Lamb:
  • #882639 re-filed against sfepy (Sphinx-related non-determinism).
  • #900409 filed against mtools (uninitialised memory).
  • #900410 filed against mtools (directory timestamps).
  • #900551 filed against nlohmann-json3 (build path).

tests-reproducible-builds.org development

There were a number of changes to our Jenkins-based testing framework that powers tests.reproducible-builds.org, including:

• Chris Lamb:
  • Move package name to the beginning of the subject line of “status change” emails.
  • Add an X-Reproducible-Builds-Source header to “status change” emails.
  • Correct broken notes URL.
• Eli Schwartz:
  • Use distribution-agnostic variable names in settings.
• Holger Levsen:
  • Move “status change” to the beginning of the subject line.
  • Large number of Salsa-migration related changes, including changes to the README, the dashboard as well to the INSTALL file, etc.
  • Fix a typo noticed by “umlaeute”.
• Mattia Rizzolo:
  • Publish reproducible-builds.org/_lfs.
  • Re-add Content-Encoding=gzip for .gz files.
  • Don’t wipe reproducilbe-lfs workspace on every build.
  • Warn when the builders are being shut down, so users are not surprised.

reproducible.org website updates

There were a number of changes to the reproducible-builds.org website this week too, including:

• Arnout Engelen:
  • Add 2-minute pitch from SHA2017.
• Bernhard M. Wiedemann:
  • Add an .SVG version of the new logo.
• Chris Lamb:
  • Generate presentations from a data file.
  • Add a number of missing presentations.
  • Show event dates if we have them.
• Mattia Rizzolo:
  • Add a link to the place where we publish PDFs.
• Sylvain Beucler:
  • Mention build-path-prefix-map on the “build paths” page.
  • Add references on the “archives” page.

Chris Lamb also updated the diffoscope.org website, including adding a progress bar animation as well as making “try it online” link more prominent and correctiing the source tarball link.

Misc.

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Jelle van der Waa, Santiago Torres & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.