What happened in the reproducible builds effort this week:
Toolchain fixes
- Colin Watson uploaded groff/1.22.3-2 which implements support for SOURCE_DATE_EPOCH.
- Colin Watson uploaded halibut/1.1-2 which implements support for
SOURCE_DATE_EPOCH.
Chris Lamb filled a bug on python-
setuptools with a
patch to make the generated requires.txt
files reproducible. The patch has been forwarded
upstream.
Chris also understood why the she-bang in some Python scripts kept being
undeterministic: setuptools as called by dh-
python could skip re-installing the
scripts if the build had been too fast (under one second).
#804339 offers a patch fixing the issue by
passing --force to setup.py install.
#804141 reported on
gettext asks for support of
SOURCE_DATE_EPOCH in gettextize. Santiago Vila pointed out that it doesn’t
felt appropriate as gettextize is supposed to be an interactive tool. The
problem reported seems to be in avahi
build system instead.
Packages fixed
The following packages became reproducible due to changes in their build dependencies: celestia, dsdo, fonts-taml- tscu, fte, hkgerman, ifrench- gut, ispell- czech, maven-assembly- plugin, maven-project- info-reports-plugin, python-avro, ruby- compass, signond, thepeg, wagon2, xjdic.
The following packages became reproducible after getting fixed:
- 4ti2/1.6.6+ds-1 uploaded by Jerome Benoit, fixed upstream.
- allegro4.4/2:4.4.2-7 uploaded by Andreas Rönnquist, original patch by Reiner Herrmann.
- axel/2.5-2 by Joao Eriberto Mota Filho.
- bastet/0.43-4 by Markus Koschany.
- bbswitch/0.8-3 uploaded by Luca Boccassi, original patch by Reiner Herrmann.
- commons-math/2.2-5 by Emmanuel Bourg.
- fatresize/1.0.2-8 by Colin Watson, reported by Chris Lamb.
- giada/0.10.2~dfsg1-1 by IOhannes m zmölnig.
- groff/1.22.3-3 by Colin Watson.
- halibut/1.1-2 by Colin Watson.
- ivy/2.4.0-2 by Emmanuel Bourg.
- libfreemarker-java/2.3.23-2 by Emmanuel Bourg.
- libjna-java/4.2.1-1 by Emmanuel Bourg.
- lmemory/0.6c-8 by Markus Koschany.
- man-db/2.7.5-1 by Colin Watson.
- maven2-core/2.2.1-23 by Emmanuel Bourg.
- ncurses/6.0+20151024-2 by Sven Joachim, report by Esa Peuha.
- netmask/2.4.3-1 by Guilhem Moulin.
- ogre-1.9/1.9.0+dfsg1-7 uploaded by Manuel A. Fernandez Montecelo, original patch by Chris Lamb.
- praat/6.0.4-2 by Rafael Laboissiere.
- soundscaperenderer/0.4.2~dfsg-5 by IOhannes m zmölnig.
- usb-modeswitch-data/20151101-1 uploaded by Didier Raboud, original patch by Reiner Herrmann.
Some uploads fixed some reproducibility issues but not all of them:
- dbconfig-common/1.8.55 by Paul Gevers.
- mondrian/1:3.11.0.1-1 by Emmanuel Bourg.
Patches submitted which have not made their way to the archive yet:
- #803893 on goaccess by Guillaume Delacour: remove
__DATE__and__TIME__macros. - #803908 on starlink-pal by Chris Lamb: pass
-info 0tolatex2html.
Chris Lamb closed a wrongly reopened bug against haskell-devscripts that was actually a problem in haddock.
reproducible.debian.net
FreeBSD tests are now run for three branches: master, stable/10, release/10.2.0. (h01ger)
diffoscope development
Support has been added for Free Pascal unit files (.ppc). (Paul Gevers)
The homepage is now available using HTTPS, thanks to Let’s Encrypt!.
Work has been done to be able to publish diffoscope on the Python Package
Index (also known as PyPI): the tlsh module is
now optional, compatibility with python-magic has been added, and the
fallback code to handle RPM has been fixed.
Documentation update
Reiner Herrmann, Paul Gevers, Niko Tyni, opi, and Dhole offered various fixes and wording improvements to the reproducible- builds.org. A mailing- list is now available to receive change notifications.
NixOS, Guix, and Baserock are featured as projects working on reproducible builds.
Package reviews
70 reviews have been removed, 74 added and 17 updated this week.
Chris Lamb opened 22 new “fail to build from source” bugs.
New issues this week: randomness_in_ocaml_provides, randomness_in_qdoc_page_id, randomness_in_python_setuptools_requires_txt, gettext_creates_ChangeLog_files_and_entries_with_current_date.
Misc.
h01ger and Chris Lamb presented “Beyond reproducible builds” at the MiniDebConf in Cambridge on November 8th. They gave an overview of where we stand and the changes in user tools, infrastructure, and development practices that we might want to see happening. Feedback on these thoughts are welcome. Slides are already available, and the video should be online soon.
At the same event, a meeting happened with some members of the release team to discuss the best strategy regarding releases and reproducibility. Minutes have been posted on the Debian reproducible- builds mailing- list.
