View all weekly reports

Reproducible Builds: Weekly report #130

Published: Oct 24, 2017.

Here’s what happened in the Reproducible Builds effort between Sunday October 15 and Saturday October 21 2017:

  • The Tails project published a report on how they made their ISO images reproducible.

  • dpkg 1.19.0 was uploaded, including support for:

    • Ordering the “unused substitution” warnings to prevent superfluous differences between logs of package builds on the Reproducible Builds test framework. (#870221)

    • A new Build-Kernel-Version field in .buildinfo files that can be generated with a new dpkg-genbuildinfo --always-include-kernel option. (#873937)

Past events

Upcoming events

New York University sessions

A three week session will be held at New York University to work on reproducibilty issues in conjunction with the reproducible builds community. Students from the Application Security course will be working for two weeks to work on the reproducible builds effort.

  • On Tuesday 24th Oct Ed Maste from FreeBSD will be presenting some reproducible builds work for students.

  • On From Tuesday 24th of October to Monday 7th of November students will work on fixing reproducibility issues brought up by the community. A milestone presentation will be held by Santiago Torres-Arias and Preston Moore.

  • On Tuesday 7th November Holger Levsen will join the NYU team to wrap up the work.

Packages reviewed and fixed, and bugs filed

The following reproducible builds-related NMUs were accepted:

Patches sent upstream:

Reviews of unreproducible packages

41 package reviews have been added, 119 have been updated and 54 have been removed in this week, adding to our knowledge about identified issues. 2 issue types were removed as they were fixed:

Weekly QA work

During our reproducibility testing, FTBFS bugs have been detected and reported by:

  • Aaron M. Ucko (1)
  • Adrian Bunk (49)
  • Anthony DeRobertis (1)
  • Daniel Schepler (1)
  • Gilles Filippini (1)
  • James Cowgill (1)
  • Matthias Klose (1)
  • Matthias Klumpp (1)
  • Nobuhiro Iwamatsu (1)

diffoscope development

strip-nondeterminism development

Version 0.039-1 was uploaded to unstable by Chris Lamb. It included contributions already covered by posts of the previous weeks, including:

  • Chris Lamb:
    • Clojure considers the .class file to be stale if it shares the same timestamp of the .clj. We thus adjust the timestamps of the .clj to always be younger. (#877418)
    • dh_strip_nondeterminism: Log which handler processed a file. (#876140)
    • bin/strip-nondeterminism: Print a warning in --verbose mode if no canonical time specified.
    • Use HTTPS URI in debian/watch.

reprotest development

  • Holger Levsen:
    • Install rustc on Jenkins for the reproducible-html-build-path-prefix-map-spec job.
  • Mattia Rizzolo:
    • health_check: Include the running kernel version when reporting multiple kernel installed in /boot.

Website updates


This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Holger Levsen, Santiago Torres & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.

View all weekly reports

Follow us on Twitter @ReproBuilds, Mastodon & Reddit and please consider making a donation. • Content licensed under CC BY-SA 4.0, style licensed under MIT. Templates and styles based on the Tor Styleguide. Logos and trademarks belong to their respective owners. • Patches for this website welcome via our Git repository (instructions) or via our mailing list. • Full contact info