What happened in the reproducible builds effort between February 21th and February 27th:
Toolchain fixes
Didier Raboud uploaded pyppd/1.0.2-4 which makes PPD generation deterministic.
Emmanuel Bourg uploaded plexus-maven- plugin/1.3.8-10 which sorts the components in the components.xml files generated by the plugin.
Guillem Jover has
implemented
stable ordering for members of the control archives in .debs.
Chris Lamb submitted another patch to improve reproducibility of files generated by cython.
Packages fixed
The following packages have become reproducible due to changes in their build dependencies: dctrl-tools, debian- edu, dvdwizard, dymo-cups- drivers, ekg2, epson-inkjet-printer- escpr, expeyes, fades, foomatic- db, galternatives, gnuradio, gpodder, gutenprint icewm, invesalius, jodconverter- cli latex- mk, libiio, libimobiledevice, libmcrypt, libopendbx, lives, lttnganalyses, m2300w, microdc2, navit, po4a, ptouch- driver, pxljr, tasksel, tilda, vdr-plugin- infosatepg, xaos.
The following packages became reproducible after getting fixed:
- afterstep/2.2.12-7 by Robert Luberda.
- arachne-pnr/0~20150927gitefdb026-2 uploaded by Ruben Undheim, patch by Dhole.
- astroquery/0.3.1+dfsg-2 by Vincent Prat.
- compton-conf/0.1.0+20151226-2 uploaded by Alf Gaida, original patch by Dhole.
- disque/1.0~rc1-5 uploaded by Chris Lamb, issue identified by Reiner Herrmann.
- foo2zjs/20151024dfsg0-2 by Didier Raboud.
- gnugo/3.8-9 uploaded by Martin A. Godisch, original patch by Reiner Herrmann.
- hplip/3.16.2+repack0-4 by Didier Raboud.
- ibus-braille/0.1.2.99+git1.a95477d-4 by Samuel Thibault.
- iputils/3:20150815-1 by Noah Meyerhans, original patch by Juan Picca.
- jimtcl/0.76-2 by Didier Raboud.
- jodconverter/2.2.2-8 uploaded by Samuel Thibault, original patch by Reiner Herrmann.
- jts/1.14+ds-1~exp1 by Bas Couwenberg.
- loadlin/1.6f-5 by Samuel Thibault.
- lximage-qt/0.4.0+20160108-3 by ChangZhuo Chen (陳昌倬), patch by Dhole.
- modello/1.8.3-2 by Emmanuel Bourg.
- obconf-qt/0.9.0+20151227-2 uploaded by Alf Gaida, original patch by Dhole.
- pcmanfm-qt/0.10.1-2 uploaded by Alf Gaida, original patch by Dhole.
- pnm2ppa/1.13-7 by Didier Raboud.
- screengrab/1.95+20160128-2 uploaded by Alf Gaida, original patch by Dhole.
- sip4/4.17+dfsg-2 uploaded by Scott Kitterman, original patch by Reiner Herrmann.
- spades/3.7.0+dfsg-1 by Sascha Steinbiss.
- sphinxtrain/1.0.8+5prealpha-4 by Samuel Thibault.
- tcsh/6.18.01-5 uploaded by Thomas Lange, original patch by Reiner Herrmann.
- ubertooth/2015.09.R2-4 by Ruben Undheim.
- watchdog/5.15-1 by Michael Meskes.
- xfonts-a12k12/1-12 uploaded by Nobuhiro Iwamatsu, original patch by Chris Lamb.
Some uploads fixed some reproducibility issues, but not all of them:
- gridsite/2.2.6-2 by Mattias Ellert.
- gsoap/2.8.28-2 by Mattias Ellert.
- natbraille/2.0rc3-3 by Samuel Thibault.
- pairs/4:15.04.3-1 uploaded by Maximiliano Curia, original patch by Scarlett Clark.
tests.reproducible-builds.org
The reproducibly tests for Debian now vary the provider of /bin/sh between
bash and dash. (Reiner Herrmann)
diffoscope development
diffoscope version
50 was released on February 27th. It
adds a new comparator for PostScript files, makes the directory tests pass on
slower hardware, and line ordering variations in .deb md5sums files will
not be hidden anymore.
Version 51 uploaded the next day re- added test data missing from the previous tarball.
diffoscope is looking for a new primary maintainer.
Package reviews
87 reviews have been removed, 61 added and 43 updated in the previous week.
New issues: captures_shell_variable_in_autofoo_script, varying_ordering_in_data_tar_gz_or_control_tar_gz.
30 new FTBFS have been reported by Chris Lamb, Antonio Terceiro, Aaron M. Ucko, Michael Tautschnig, and Tobias Frost.
Misc.
The release team reported on their discussion about the topic of rebuilding all of Stretch to make it self-contained (in respect to reproducibility).
Christian Boltz is hoping someone could talk about reproducible builds at the openSUSE conference happening June 22nd-26th in Nürnberg, Germany.
