Reproducible Builds: Weekly report #189

Here’s what happened in the Reproducible Builds effort between Sunday December 2 and Saturday December 8 2018:

• We are very much looking forward to the upcoming Reproducible Builds summit in Paris this week!

• diffoscope is our in-depth “diff-on-steroids” utility which helps us diagnose reproducibility issues in packages. This week, Chris Lamb implemented a request (via Debian bug #901757) from Paul Wise to add the ability to compare ZIP file comments using the zipnote tool […]. He then uploaded it to Debian unstable as version 107.

• Bernhard M. Wiedemann posted to our mailing list providing a detailed update on the status of reproducible builds with the RPM-based ecospace. In addition, Juan Picca posted a query regarding requesting a field in .buildinfo files.

• Muz recently gave a talk on reproducible builds talk from The Long Con 2018 in Winnipeg, Canada was published. (YouTube)

• Chris Lamb updated strip-nondeterminism (our tool to post-process files to remove known non-deterministic output) to remove the .ar and javaproperties handlers due to updates from upstream. He then uploaded it to Debian unstable as version 1.0.0, closing Debian bugs #914289, #781262 & #843811.

• 20 Debian package reviews were added, 56 were updated and 27 were removed in this week, adding to our knowledge about identified issues. Chris Lamb added two new toolchain issue types: random_hashes_in_cython_output and build_date_in_manpage_generated_by_spf13_cobra.

• Holger Levsen updated our website project to add Protocol Labs as a sponsor at our upcoming Paris Summit. […].

• Bernhard M. Wiedemann updated theunreproduciblepackage to simplify the pgo example and to add a runmany target to make nondeterminism more visible.

Packages reviewed and fixed, and bugs filed

• Andreas Henriksson:
  • #915240 filed against fence-agents (usrmerge).
  • #915293 filed against systraq (usrmerge).
  • #915294 filed against sptk (usrmerge).
  • #915295 filed against rp-pppoe (usrmerge)
  • #915296 filed against mpb (usrmerge).
  • #915300 filed against mailman (usrmerge).
  • #915303 filed against mailagent (usrmerge).
  • #915304 filed against lmod (usrmerge).
  • #915309 filed against libktoblzcheck (usrmerge).
  • #915312 filed against heartbeat (usrmerge).
  • #915314 filed against icecc (usrmerge).
  • #915348 filed against foomatic-db-engine (usrmerge).
• Ansgar Burchardt:
  • #915423 filed against xfce4-session (usrmerge).
• Bernhard M. Wiedemann:
  • hpx (CPU detection, also proposed upstream)
  • libqt5-qtwebengine (date, FTBFS in 2038)
  • python-botocore (FTBFS in 2020, merged)
  • valgrind (GCC’s link time optimization non-determinism)
• Chris Lamb:
  • #915503 filed against tracker (build path).

Test framework development

There were a number of updates to our Jenkins-based testing framework that powers tests.reproducible-builds.org this week, including:

• Chris Lamb:
  • Re-add support for calculating a PureOS package set. (MR: 115)
  • Support arbitrary package filters when generating deb822 output. (MR: 22)
  • Add missing DBDJSON_PATH import. (MR: 21)
  • Correct Tails’ build manifest URL. (MR: 20)
• Holger Levsen:
  • Ignore disk full false-positives building the GNU C Library. […]
  • Various node maintenance. (eg. […], […], etc.)
  • Exclusively use the database to track blacklisted packages in Arch Linux. […]

---

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb, Muz & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.