Agenda

Day 1

Tuesday, December 13

• 09.15 Breakfast
• 10.00 Opening Session
• 11.00 Project Showcase
  • Reproducible FreeBSD
  • Status stretch and buster
  • buildinfo.debian.net
  • openSUSE
  • Test reproducible-builds.org. How we constantly test Debian
  • Eliminating absolute build paths from debusgging info and other things
  • OpenWrt, coreboot, LEDE
  • F-Droid. Reproducible Adroid apps
  • Building reproducible Tails ISO images [work in progress]
• 11.50 Break

• 12.15 Agenda Brainstorming

• 13.20 Lunch Break
• 14.30 Working Sessions I
  • diffoscope
  • reprotest
  • Documentation I
  • User verification
  • Embedded / Coreboot
  • RPM

• 16.00 Closing Session

• Proposals for hacking sessions to take place later in the afternoon:
  • SquashFS
  • FreeBSD filesystems
  • Python packages in git
  • Gettext
  • Make diffoscope deal with Android apks
  • Markdowns
• 16:20 Adjourn
• 16:30 Hacking
  • http://pkgsrc.se/files.php?messageId=20161213154459.CB044FBA6@cvs.NetBSD.org

Day 2

Wednesday, December 14

• 09.15 Breakfast
• 10.00 Opening Session

• 10:20 Working Sessions II

  • .buildinfo files
  • RPM II
  • Reproducible images
  • Defining Reproducible Builds I
  • User policies
  • Test infrastructure
  • Gettext
• 11.45 Break

• 12.30 Skill Share

  Participants are invited to choose a skill they’d like to share. Focused 1-3 person 30-minute conversations

  • git-based packaging
  • How to use C sanitizers + fuzzing
  • How to make storage deduplicate and incentivize reproducible builds hash
  • How to use buildinfos to analyze/test reproducibility
  • Fedora AMA
  • How to use emacs
  • How to run a start-up
  • How to apply for funding from CII
  • How to improve cross-distro packaging https://maintainer.zq1.de
  • How (not) to use iframes on awesome webpages *reproducible-bla.org
  • How to sign code in git (and correctly verify the signatures)
  • Ask me anything about building on OSX
  • How to do automatic hardware testing
• 13.00 Lunch Break

• 14.20 Working Sessions III

  • What else for the Auditable Ecosystem?
  • What else instead of Binary Transparency
  • SOURCE_PREFIX_MAP
  • Documentation II
  • Defining Reproducible Builds definition II
  • Bootstrapping I
  • Use cases
  • GPL compliance

• 16.00 Closing Session

• Proposals for hacking sessions to take place later in the afternoon:
  • Secure GIT
  • Make build images reproducible
  • diffoscope
  • Documentation
  • Funding and CII
  • RPM and hacking
  • Nix build stuff to be incorporated with tests at https://tests.reproducible-builds.org
  • Bootstrap test jenkins to replicate https://tests.reproducible-builds.org
  • Embedded images cross-distro
• 16:30 Adjourn
• 16.40 Hacking

Day 3

Thursday, December 15

• 09.15 Breakfast
• 10.00 Opening Session

• 10:20 Working Sessions VI

  • Cross-distro collaboration
  • Bootstrapping II
  • Documentation III
  • Binary Transparency II
  • State of Reproducible Builds
• 11:50 Break
• 12:05 Reporting session outcomes

Proposals for hacking sessions to take place today:

• Diffoscope Debugging
• diffoscope everything
• RPM
• Documentation
• buildinfo
• looking at buildinfo coming from different architectures
• Gettext
• FreeBSD filesystems
• Android documentation
• Reproducing the test environment and documenting it
• bootstrapped.org
• Debian infrastructure
• Binary transparency log

• Android infrastructure

• 12:30 Hacking
  • ** F-droid and append-only publication log** (documented through pictured sketch)
• 13:15 Lunch Break
• 14:30 2017 Look Ahead
• 15.00 Closing Session
• 15.30 Adjourn