Here’s what happened in the Reproducible Builds effort between Sunday August 26 and Saturday September 1 2018:
Bernhard M. Wiedemann wrote an article on the SUSE Blog entitled “Extending trust in our binaries: No backdoors have been found” on the current status of reproducible builds in SUSE.
Mes (a Scheme-based compiler for our “sister” bootstrappable builds effort) announced their 0.17 release and them becoming a GNU project
There were further updates for our website including Arnout Engelen adding Maven and the sbt build tool projects and introducing a link from the footer to sections in ‘who’. Chris Lamb also added Jelle van der Waa talk to our resources page […], added Monero to the Who is Involved? page and added the relevant DebConf 18 presentations to our database […].
6 Debian package reviews were added, 7 were updated and 9 were removed in this week by Chris Lamb, adding to our knowledge about identified issues.
Bernhard M. Wiedemann:
- amazon-ecs-init (random buildpath(go))
- bind-formula (sort a hash in saltstack/jinja2)
- godot (merged, 3xsort +bugfix, date / year)
- ImageMagick to not add a build date into
- python-Fabric3 (FTBFS/timeout -j1)
- python-dukpy-kovidgoyal (merged, sort
- python-pyodbc (sort
- rpm to ensure
SOURCE_DATE_EPOCHis in the past (for mtime-clamping).
- vrui (drop time)
- Chris Lamb:
- Holger Levsen:
- Mattia Rizzolo:
This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Mattia Rizzolo & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.