View all weekly reports

Reproducible Builds: Weekly report #33

Published: Jan 2, 2016.


What happened in the reproducible builds effort between December 6th and December 12th:

Toolchain fixes

  • Steven Chamberlain uploaded makefs/20100306-6 which adds a -T flag which will clamp superblock and file timestamps to a given time in epoch format.
  • Emmanuel Bourg uploaded maven-debian-helper/2.0~exp3 which disable the timestamps and set the locale to en_US when generating the javadoc.

Reiner Herrmann rebased our experimental version of doxygen on version 1.8.9.1-6.

Chris Lamb submitted a patch to make the manpages generated by ruby-ronn reproducible by using the locale-agnostic %Y-%m-%d for the dates.

Daniel Kahn Gillmor took another shot at the issue of source path captured in DWARF symbols. A patch has been sent for review by GCC upstream to add the ability to read an environment variable with -fdebug-prefix-map.

Packages fixed

The following 24 packages have become reproducible due to changes in their build dependencies: gkeyfile-sharp, gprbuild, graphmonkey, gthumb, haskell-yi- language, ion, jackson- databind, jackson-dataformat- smile, jackson- dataformat-xml, jnr- ffi, libcommons-net- java, libproxy, maven-shared- utils, monodevelop- database, mydumper, ndesk- dbus, nini, notify- sharp, pixz, protozero, python-rtslib- fb, slurm- llnl, taglib- sharp, tomboy- latex.

The following packages became reproducible after getting fixed:

Some uploads fixed some reproducibility issues, but not all of them:

  • aptitude/0.7.5-1 by Manuel A. Fernandez Montecelo.
  • asc/2.6.1.0-1 by Markus Koschany.
  • grib-api/1.14.3-2 by Enrico Zini.
  • jacal/1b9-6 uploaded by Barak A. Pearlmutter, original patch by Chris Lamb.

These uploads might have fixed reproducibility issues but could not be tested yet:

Patches submitted which have not made their way to the archive yet:

  • #807159 on monit by Chris Lamb: add support for setting the build date using SOURCE_DATE_EPOCH (already fixed upstream).
  • #807161 on suomi-malaga by Chris Lamb: add support for setting the build date using SOURCE_DATE_EPOCH.
  • #807475 on glance by Chris Lamb: stop recording the number of CPUs on the build system.
  • #807605 on guiqwt by Chris Lamb: add support for setting the copyright year using SOURCE_DATE_EPOCH.

reproducible.debian.net

Files created with diffoscope now have diffoscope in their name instead debbindiff. (h01ger)

Hostnames of first and second build node are now recorded and shown in the build history. (Mattia Rizzolo)

Exchanges have started with F-Droid developers to better understand what would be required to test F-Droid applications. (h01ger)

A first small set of Fedora 23 packages is now also being tested while development on a new framework for testing RPMs in general has begun. A new Jenkins job has been added to set up to mock, the build system used by Fedora. Another new job takes care of testing RPMs from Fedora 23 on x86_64. So far only 151 packages from the buildsys-build group are tested (currently all unreproducible), but the plan is to build all 17,000 source packages in Fedora 23 and rawhide. The page presenting the results should also soon be improved. (h01ger, Dhiru Kholia)

For Arch Linux, all 2223 packages from the “extra” repository will also be tested from now on. Packages in “extra” are tested every four weeks, while those from “core” every week. Statistics are now displayed alongside the results. (h01ger)

jenkins.debian.net has been updated to jenkins-job-builder version 1.3.0. Many job configurations have been simplified and refactored using features of the new version. This was another milestone for the jenkins.debian.org migration. (Phil Hands, h01ger)

diffoscope development

Chris Lamb announced try.diffoscope.org: an online service that runs diffoscope on user provided files.

Screenshot of try.diffoscope.org

Improvements are welcome. The application is licensed under the AGPLv3.

On diffoscope itself, most pending patches have now been merged. Expect a release soon!

Most of the code implementing parallel processing has been polished. Sadly, unpacking archive is CPU-bound in most cases, so the current thread-only implementation does not offer much gain on big packages. More work is still require to also add concurrent processes.

Documentation update

Ximin Luo has started to write a specification for buildinfo files that could become a larger platform than the limited set of features that were thought so far for Debian .buildinfo.

Package reviews

113 reviews have been removed, 111 added and 56 updated in the previous week.

42 new FTBFS bugs were opened by Chris Lamb and Niko Tyni.

New issues identified this week: timestamps_in_documentation_generated_by_docbook_dbtimestamp, timestamps_in_sym_l_files_generated_by_malaga, timestamps_in_edj_files_generated_by_edje_cc.

Misc.

Chris Lamb presented reproducible builds at skroutz.gr.


View all weekly reports