Reproducible Builds: Weekly report #150

Here’s what happened in the Reproducible Builds effort between Sunday March 4 and Saturday March 10 2018:

• On Saturday 10th March, Chris Lamb presented at SCALE 16x on Reproducible Builds.

• Dan Mux posted about moving away from Bazel referencing reproducibility.

• Chris Lamb demonstrated that the Reproducible Builds can also find quality assurance issues, such as in todoman where a non-fatal missing build-dependency was causing the output to be unreproducibile.

• The Yocto project’s feature page lists “Binary Reproducibility” as their number one feature.

diffoscope development

diffoscope is our in-depth and content-aware diff utility that can locate and diagnose reproducibility issues.

Mattia Rizzolo backported version 91 to the Debian backports repository.

• Chris Lamb:
  • Support the case where the python3-xattr package is installed but python3-pyxattr is not. (Closes: #892240)
  • Move documentation for maybe_decode into a docstring on the method itself.
  • Avoid decoding strings by opening source files in binary mode.
• Mattia Rizzolo:
  • tests: binary: fix test after 934dfff
  • tests: test_dos_mbr: explicitly use utf8 for reading files
  • comparators.utils.file: don’t try to decode a string

In addition, Juliana — our Outreachy intern — continued her work on parallel processing.

Bugs filed

• Adrian Bunk:
  • #892459 filed against simpleitk.
• Bernhard M. Wiedemann:
  • racket
  • python-datrie (sort readdir(2))
  • yubioath-desktop (sort readdir(2))
  • mango-doc (date, orphaned)
  • lilypond (SOURCE_DATE_EPOCH/date)
  • perl-Glib (update => fixes perl-Goo-Canvas)
  • fbreader (filed upstream: 1, 2 & 3)
  • yudit (SOURCE_DATE_EPOCH/date, upstreamable)
  • python-pycryptopp (sort readdir(2))
  • autogen (compile-time benchmarking, SOURCE_DATE_EPOCH, .tar.gz)
• Chris Lamb:
  • #892019 filed against python-meshio.
  • #892020 filed against python-diskimage-builder.
  • #892021 filed against kronosnet.
  • #892419 filed against gnocchi (upstream).
  • #892420 filed against nova (nova).
  • #892425 filed against node-package-preamble .
  • #892496 filed against yt.
  • #892515 filed against meson (upstream).
  • #892565 filed against codespell.
  • node-rollup

In addition, package reviews have been added, 44 have been updated and 26 have been removed in this week, adding to our knowledge about identified issues.

Lastly, two issue classification types have been added:

• nondeterminstic_output_in_pkgconfig_files_generated_by_meson (patch sent upstream)
• timestamps_in_preamble_generated_by_node_package_preamble (patch sent upstream)

jenkins.debian.net development

• Hans-Christoph Steiner (F-Droid):
  • Include newly packaged dependencies.
  • Timeout build jobs after 48 hours.
• Holger Levsen (F-Droid:)
  • Timeout to build jobs after 36 hours.

Weekly QA work

During our reproducibility testing, FTBFS bugs have been detected and reported by:

• Adrian Bunk (49)
• Antonio Terceiro (1)
• James Cowgill (1)
• Ole Streicher (1)

Misc.

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Mattia Rizzolo & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.