Here’s what happened in the Reproducible Builds effort between Sunday February 18 and Saturday February 24 2018:
Logo and Outreachy/GSoC
- Vagrant Cascadian posted the minutes our recent logo IRC meeting (notes and full logs. On Wednesday, 21st March at 19h00 UTC we will have another meeting on this.
- Mattia Rizzolo posted about our possible inclusion in this round of Outreachy/GSOC which will only happen if more people volunteer to mentor.
Reproducible work in other projects
There were a number of blog posts related to reproducible builds published this week:
- Russ Cox wrote a blog post about Golang version packaging with respect to enabling to reproducible builds.
- Maria Camenzuli posted about Reproducible Builds in Java.
- Finally, Marc Scholten wrote a blog post entiled “You Are Most Likely Misusing Docker” which references reproducible builds.
- kpcyrd discovered a regression in rustc
Development and fixes in Debian key packages
As part of the work on reproducible builds for openSUSE, Bernhard M. Wiedemann built packages 15 years in the future and discovered a widespread systematic errors in how Perl’s Time::Local functions are used.
This affected a diverse set of software - including
git and our
strip-nondeterminism (via Archive::Zip)
grep was run on 16,896 tarballs in openSUSE’s
devel:languages:perl project and 102 of them contained
timelocal calls. Of those, over 30 were problematic and some more need to be analyzed:
Archive::Tarbroken 2020 on MacOS
perl-Archive-ZipFTBFS and broken in 2030
perl-IO-Compress-Zlibbroken in 2030
perl-Math-Calc-Unitsbroken in 2025
perl-HTTP-Messagebroken test in 2020 on MacOS
perl-HTTP-Cookiesbroken in 2020 on MacOS
perl-DateTime-Format-HTTPTest broken in 2020 on MacOS
perl-Convert-ASN1breakage for years < 2000
perl-Convert-BERbreakage for years < 2000
perl-Calendar-Simplebreakage for years < 2000
perl-Date-ICalbreakage for years < 2000
perl-Date-Businessbreakage for years < 2000
perl-CAM-PDFbreakage for years < 2000
perl-BioPerlbreakage for years < 2000?
perl cpan/libnetperl cpan/libnet
git- some breakage in 2020 and for dates < 2000
Packages reviewed and fixed, and bugs filed
- Adrian Bunk:
- Chris Lamb:
Reviews of unreproducible packages
60 package reviews have been added, 32 have been updated and 30 have been removed in this week, adding to our knowledge about identified issues.
Two new toolchain issue types have been added:
Weekly QA work
During our reproducibility testing, FTBFS bugs have been detected and reported by:
- Adrian Bunk (41)
- Andreas Beckmann (1)
- Boyuan Yang (1)
- Mattia Rizzolo updated the key used to sign our repository.
This week’s edition was written by Bernhard M. Wiedemann, kpcyrd, Chris Lamb, Holger Levsen & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.