Reproducible Builds: Weekly report #142

Here’s what happened in the Reproducible Builds effort between Sunday December 31 and Saturday January 13 2018:

Media coverage

• Reproducible builds were mentioned on an episode of a Bryan Lunduke interview with Brendan Eich, the creator of the Javascript programming language. (link)

• Julien (jvoisin) Voisin wrote a short blog post detailing their success in reproducing the recent Tails ISO release.

Development and fixes in key packages

Chris Lamb implemented two reproducibility checks in the lintian Debian package quality-assurance tool:

• Warn about packages that ship Hypothesis example files. (#886101, report)
• Warn about packages that override dh_fixperms without calling dh_fixperms as this makes the build vary depending on the current umask(2). (#885910, report)

Packages reviewed and fixed, and bugs filed

• Adrian Bunk:
  • #886355 filed against libpar-packer-perl.
  • #886361 filed against apertium.
• Bernhard M. Wiedemann:
  • ibus-typing-booster (gz-mtime)
  • console-setup (random,gz-mtime)
  • fwupd (gz-mtime)
  • libosmo-dsp (drop LaTeX log)
  • libsamplerate (merged, PGO)
  • aelfred (merged, time)
  • jformatstring (merged, time)
  • log4j (merged, upstreamable?, time)
  • tanukiwrapper (merged, time)
  • drbd-utils (enable rb)
• Chris Lamb:
  • #885909 filed against node-crc32.
  • #886001 filed against node-jquery.
  • #886002 filed against node-deflate-js.
  • #886003 filed against python-pysnmp4.
  • #886100 filed against todoman.
  • #886105 filed against klystrack.
  • #886130 filed against libmsv.
  • #886239 filed against librsvg.
  • #886277 filed against node-promise (filed upstream).
  • #886306 filed against python-pyocr.
  • #886386 filed against mstflint.
  • #886522 filed against python-stdnum (filed upstream)
  • #886523 filed against python-hpack.
  • #886703 filed against normaliz.
  • #886898 filed against dtkwm.
  • #886902 filed against clanlib.
  • #886952 filed against hwinfo (filed upstream)
  • #886988 filed against texlive-extra.
  • #886989 filed against fox1.6.

Reviews of unreproducible packages

60 package reviews have been added, 43 have been updated and 76 have been removed in this week, adding to our knowledge about identified issues.

4 new issue types have been added:

• randomness_in_binaries_generated_by_d_compiler_gdc
• serial_numbers_in_ogg_via_sox
• nondeterminism_in_files_generated_by_rime_deployer
• buildpath_in_binaries_generated_by_d_compiler_gdc

The notes of one issue type was updated:

• build_dir_in_documentation_generated_by_doxygen: 1, 2

Weekly QA work

During our reproducibility testing, FTBFS bugs have been detected and reported by:

• Adam Borowski (2)
• Adrian Bunk (16)
• Niko Tyni (1)
• Chris Lamb (6)
• Jonas Meurer (1)
• Simon McVittie (1)

diffoscope development

• Chris Lamb:
  • Bug fixes:
    • Return “unknown” if we can’t parse the readelf version number eg. for FreeBSD. (#886963)
    • If the LLVM disassembler does not work, try the internal one. (#886736)
  • Features/improvements:
    • comparators.macho: Always strip the filename, not just when by itself
    • Clarify “Unidentified file” log message; we tried and lookup via the comparators first
  • Cleanups
    • Drop an unnecessary else after return
    • Drop whitespaces from end of file
    • flake8 files
    • Invert some logic as we use unconditional control flow
    • Tidy some long lines
    • Ensure block comments start with #
    • Ensure we use a multiple of 4 spaces
    • Drop an unused os.path import
    • Add spaces around operators
    • Mark special imports as noqa
    • Tidy ListToolsAction action command
    • Don’t shadow an os import
• Juliana Oliveira:
  • Fix a python-progressbar test case
  • Add support for modules on skip\_unless annotations
  • Work on parallelism:
    • Add a thread manager
    • Add a comparison\_pool class
    • Add a “jobs” flag
    • Add map method to the comparison pool
• Daniel Shahaf:
  • Document feeders. (#863880)
  • Optimize the most common case of feeders. [#863879

disorderfs development

• Chris Lamb:
  • Correct an “explicitly” typo
  • Bump Standards-Version to 4.1.3
  • Drop trailing whitespace in debian/control
• Mattia Rizzolo:
  • Add header listing the keys present in the GPG key export

jenkins.debian.net development

• Eli Schwartz (Reproducible Arch linux):
  • Correctly list date build variation
  • Fix pacman-git package from AUR fails to build
  • Disable SSL checks for pacman-git
• Holger Levsen:
  • Update scripts to deal with the latest Ubuntu LTS changes
  • Arch Linux:
    • Drop harmless continue statement
    • Only sleep if there are no scheduled packages
    • increase threshold and maximum amount of rescheduled packages
• kpcyrd:
  • Ignore that Arch Linux certificates expire in the future
• Mattia Rizzolo:
  • Check if we are running the latest kernel in the node health check

Misc.

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb and Vagrant Cascadian & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.