Here’s what happened in the Reproducible Builds effort between Sunday September 23 and Saturday September 29 2018:

  • Another reminder that the fourth Reproducible Builds summit will take place in December 11th—13th 2018 at Mozilla’s offices in Paris, France. If you are interested in attending please register by sending an email to holger@layer-acht.org. More details may be found on the associated event page.

  • Holger Levsen is requesting review and comments on a multi-project syntax notes proposal. He hopes to implement this in the next few weeks.

  • A pull request was proposed to CPython to ensure SOURCE_DATE_EPOCH only influences the default type of .pyc files (yet does not enforce it).

  • Guillem Jover uploaded dpkg 1.19.1 to Debian unstable, adding support for dumping database package records in alphabetical order in order to provide reproducible status and available database files, and further make it possible to output other “deb822“-formatted data in a deterministic way. In addition, the Dpkg::Vendor::Debian library gained support for a reproducibility-related fixfilepath feature.

  • Jelle van der Waa started a TODO list to fix unreproducible PKGBUILD files in Arch Linux which use the Imagemagick graphics library’s convert(1) utility for image manipulation which embeds the date:create and date:modify file headers.

  • disorderfs version 0.5.4-1 (our FUSE-based filesystem that deliberately introduces non-determinism into filesystem metadata) was uploaded to Debian unstable by Chris Lamb. It included a number of contributions covered previously.

  • A fix to ensure to that fontconfig — a library for configuring and customizing font access — landed in Debian unstable (via upstream).

  • Chris Lamb added four Debian package reviews. In addition, three were updated and 11 were removed in this week, adding to our knowledge about identified issues.

  • Bernhard M. Wiedemann discovered problems from arch-dependent noarch packages in openSUSE; there are actually over 1,000 of these.

Patches filed

diffoscope development

diffoscope (our in-depth “diff-on-steroids” utility which helps us diagnose reproducibility issues in packages) was updated in Debian unstable by Mattia Rizzolo. It included contributions already covered in previous weeks but also included new changes from:

Test framework development

There were a huge number of updates to our Jenkins-based testing framework that powers tests.reproducible-builds.org by Holger Levsen this week, including:

In addition, Eli Schwartz refactored the grepping of build logs into a helper function, and Mattia Rizzolo made the following changes:

Misc.

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Daniel Shahaf, Holger Levsen, Jelle van der Waa & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.