Day 1

Tuesday, October 31

Day 2

November 1, 2017

  • 09:45 Opening session – The second day of the Summit opened with a summary of the work done during the previous day, and a brief overview of the plan for the day ahead.
  • 09:55 Working Sessions III (Session notes start on page 36)
    • Improving reproducible builds in Java – Gábor
    • Bootstrapping: Mapping the problem space – Ricardo
    • Best practices and open issues in regards to engaging upstreams – Chris
    • How can policies help the end user to define what they want in terms of reproducibility? – dkg
  • 11:30 Break
  • 12:00 Skill share sessions (No notes taken in these sessions)
    • How to rebuild a specific .deb from its .buildinfo
    • How to do everything* in Emacs (*conditions apply)
    • Ask Me Anything coreboot
    • Binwalk arbitrary firmware images
    • How/why not reproducible tar format is
    • How to build NetBSD
    • How to use reprotest
    • How to autoclassify nondeterminism
    • How to snapshot Debian to build reproducible system images
    • AMA F-Droid
    • How to integrate with Travis CI
  • 12:30 Lunch
  • 13:30 Working sessions IV (Session notes start on page 49)
    • Mapping out archive formats – Eric
    • Building a system image from existing binaries – intrigeri
    • How to preserve software integrity in different legal contexts? – dkg
    • Marketing: Why is it valuable to support the reproducible builds work and who is our audience? – Beatrice
  • 14.45 Break
  • 15:00 Closing plenary – The day was brought to a close with the invitation to share proposals for the next day’s working sessions, and the invitation to use the meeting space to hack together during the rest of the afternoon.
  • 15:20 Adjourn
  • 15:20 – 17:30 Hack time

Day 3

November 2, 2017

  • 09:45 Opening session – The final day of the Summit opened with the encouragement to focus the last day of the meeting on drafting action plans to be carried out during the following weeks and months.
  • 10:05 Working sessions V (Session notes start on page 58)
    • Defining terminology: reproducible, bootstrappable, reliable – Timothy
    • SOURCE_DATE_EPOCH specification: Overview and improvements needed – Ximin
    • Setting up build environments for reproducibility – Marcus
    • What is needed to run rebuilders? – dkg
  • 11:05 Break
  • 11:20 Working sessions VI (Session notes start on page 71)
    • Mapping out our short- and long-term goals – Holger
    • How to onboard new contributors – Mattia
    • Identifying next actionable steps for marketing outreach – Beatrice
    • Funding reproducible builds work – Elisa, Chris
  • 12:40 Lunch
  • 13:40 Working sessions VII (Session notes start on page 84)
    • Enabling cross-distro reproducibility – Janneke
    • Exploring reproducibility for Mac and Windows – Nicolas
    • What does code-signing means in terms of reproducibility? – Chris, dkg
    • Prioritizing the minimum viable set of tools needed for end users – Ricardo, intrigeri
    • Discussing current status and potential improvements in regards to .buildinfo files for rpm and iso – Marek
    • Brainstorming the reproducible builds logo design – Holger, Brennan
  • 15:30 Closing plenary – The Summit ended with notes of appreciation for everyone who participated in the meeting and contributed to its success.
  • 16:00 Adjourn
  • 16:00 – 17:30 Hack time

Follow us on Twitter @ReproBuilds, Mastodon & Reddit and please consider making a donation. • Content licensed under CC BY-SA 4.0, style licensed under MIT. Templates and styles based on the Tor Styleguide. Logos and trademarks belong to their respective owners. • Patches for this website welcome via our Git repository (instructions) or via our mailing list. • Full contact info