Reproducible Builds: Weekly report #147

Here’s what happened in the Reproducible Builds effort between Sunday February 11 and Saturday February 17 2018:

Media coverage

• ActiveState are running a “Golang Roundtable” on February 22nd to discuss reproducible builds, environment configuration & dependency management (via Pete Garcin).

• Holger Levsen announced there will be a MiniDebConf in Hamburg, Germany from May 16th to 20th where many reproducible builds folks will be in attendance. Whilst this is foremost a “Debian” event, we do hope that people working on Reproducible Builds in other projects will attend as well - please register!

Reproducible work in other projects

• The Symfony PHP framework announced that their latest release is reproducible.

• Maria Camenzuli wrote about Reproducible Builds in Java.

• Helmut Grohne used reproducible builds practices to remove unnecessary build-dependencies in the kalzium package.

Packages reviewed and fixed, and bugs filed

• Adrian Bunk:
  • #890122 filed against kcompletion.
  • #890431 filed against grub2.
• Chris Lamb:
  • #890104 filed against octave-geometry.
  • #890193 filed against sleekxmpp.
  • #890280 filed against ufo2ft. (upstream)
  • #890311 filed against dashel.
  • #890312 filed against desmume.
  • #890313 filed against awl.
  • #890314 filed against cpl-plugin-visir.
  • #890486 filed against keepassxc.
  • #890487 filed against wreport.
  • #890551 filed against mblaze.
  • #890577 filed against tkgate.
  • #890616 filed against dialign-t.
  • #890618 filed against scowl.
  • #890620 filed against ply.
  • #890651 filed against xastir.
  • RediSearch (upstream)
  • Promise.js (upstream)

Various previous patches were merged upstream:

• libical (Chris Lamb)
• librsvg (Chris Lamb)

Reviews of unreproducible packages

38 package reviews have been added, 27 have been updated and 13 have been removed in this week, adding to our knowledge about identified issues.

4 issue types have been added:

• python-ply_lextokens
• build_dir_in_tags_generated_by_doxygen
• randomness_in_berkeley_db_files
• timestamp_in_fonts_generated_by_ufo2ft

One issue type has been updated:

• Add upstream URI for timestamps_in_pdf_generated_by_rsvg_convert

Weekly QA work

During our reproducibility testing, FTBFS bugs have been detected and reported by:

• Adrian Bunk (24)
• Boyuan Yang (1)
• Cédric Boutillier (1)
• Jeremy Bicha (1)
• Matthias Klose (1)

diffoscope development

• Chris Lamb:
  • Add support for comparing Berkeley DB files (#890528). This is currently incomplete because the Berkeley DB libraries do not return the same uid/hash reliably (it returns “random” memory contents) so we must strip those from the human-readable output.

Website development

• Holger Levsen:
  • Add reference to Symfony.com; thanks to Javier Eguiluz for the patch.

Misc.

This week’s edition was written by Chris Lamb and Holger Levsen & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.