Re: Please review the draft for August's report

2024-09-04 Thread Holger Levsen
On Wed, Sep 04, 2024 at 11:14:16AM +0100, Chris Lamb wrote: > > I still need to publish my slides for both my r-b talks at DebConf24 > > and then the 2nd talk needs to be mentioned in the report as well. :) > Ooh, good idea. I'll hold off on publishing until you can land those. I've pushed my slid

Re: Please review the draft for August's report

2024-09-02 Thread Holger Levsen
Hi Chris, thank you for writing these great monthly reports! On Mon, Sep 02, 2024 at 10:49:14AM -0400, Chris Lamb wrote: > Please review the draft for August's Reproducible Builds report: > https://reproducible-builds.org/reports/2024-08/?draft I still need to publish my slides for both my r-b

Re: (java) Builds not reproducible on armhf

2024-08-25 Thread Holger Levsen
On Mon, Aug 26, 2024 at 06:46:35AM +0200, Mechtilde Stehmann wrote: > > I'll note that fakeroot was probably broken on armel, armhf since > > the t64 migration until mid-August. > > Is fakeroot involved in any way? If so, it might make sense to > > discard any results from that period. > Thanks for

Re: Reproducible Builds Summit 2024

2024-07-11 Thread Holger Levsen
On Wed, Jul 10, 2024 at 09:46:41PM +0200, Marek Marczykowski-Górecki wrote: > This conflicts with Linux Plumbers, and almost conflicts with Qubes OS > Summit :( we've been aware of this, however we couldn't really schedule it at a different time. and sadly (though probably rather: gladly) there wi

Reproducible Builds Summit 2024

2024-07-10 Thread Holger Levsen
Hi, I'm very glad to be able to announce that we will be having the Reproducible Builds summit in 2024 from September 17 to 19 in Hamburg, in the same venue we've been in 2023: https://reproducible-builds.org/events/hamburg2024/ Again and as previously, the exact content of the meeting will be

Re: Nearly reproducible Bookworm 12.6 live images

2024-07-03 Thread Holger Levsen
Hi Roland, On Wed, Jul 03, 2024 at 06:44:37PM +0200, Roland Clobus wrote: > I'm sooo close... [...] hehe, congrats & thanks for keeping us in the loop! In honor of your work I've manually written the signature of this email...! :) -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|re

Re: mitigating non-determinism

2024-06-19 Thread Holger Levsen
Dear Bernhard. On Tue, Jun 18, 2024 at 12:57:33PM +0200, Bernhard M. Wiedemann via rb-general wrote: > In https://github.com/bmwiedemann/theunreproduciblepackage/ I had collected > the many issues that introduce non-determinism. > > Today it is time to talk about mitigations - how can we avoid w

Re: Reproducible Builds Summit 2024

2024-06-05 Thread Holger Levsen
Hi Justin, On Thu, May 30, 2024 at 12:55:46PM -0400, Justin Cappos wrote: > I'd love to help host this in NYC. We can certainly provide space to meet > and work. that's an interesting offer! thank you! > I'm not sure if cost / travel time would be prohibitive though. true. -- cheers,

Reproducible Builds Summit 2024

2024-05-30 Thread Holger Levsen
hi, I'm very happy to announce that this year we'll be holding the eighth Reproducible Builds Summit! The dates and location are not fixed yet, however if you don' help us with finding a suitable location *soon*, it is very likely that we'll meet again in Hamburg in the 2nd half of September 2024

Re: May 2024: whatsrc.org distro status

2024-05-30 Thread Holger Levsen
On Wed, May 29, 2024 at 08:36:05PM +0200, Simon Josefsson via rb-general wrote: > > As of May 2024, I have imported source code data from the following > > distributions: > This is awesome! indeed! thanks and kudos, kpcyrd, both for the code in the first place as well as taking time & efford to an

Re: Please review the draft for March's report

2024-04-11 Thread Holger Levsen
Dear Chris et al, On Thu, Apr 11, 2024 at 07:52:39PM +0100, Chris Lamb wrote: > > Please review the draft for March's Reproducible Builds report: > This has now been published — thanks to all who contributed. great, thank you and everyone involved indeed! I also like the final order of the entri

Re: Please review the draft for March's report

2024-04-10 Thread Holger Levsen
On Wed, Apr 10, 2024 at 10:02:56AM -0400, David A. Wheeler via rb-general wrote: > I agree, this one is HUGE news. There's been a lot of awesome work related to > reproducible builds, but "minimal container userland is a 100% reproducible > build in a real-world widely-used distro" is a big step

Re: Two questions about build-path reproducibility in Debian

2024-04-08 Thread Holger Levsen
On Tue, Mar 12, 2024 at 08:45:03AM -0700, Vagrant Cascadian wrote: > >> Note: I confused myself when writing this; in fact Salsa-CI reprotest > >> _does_ > >> continue to test build-path variance, at least until we decide otherwise. > > this is in fact a bug and should be fixed with the next repro

Re: Reproducible Arch Linux in 2024/Q1 (irregular status update)

2024-03-13 Thread Holger Levsen
hi, from irc: kpcyrd: may i quote on rb-general what you wrote here? [11:56] < h01ger> kpcyrd: many thanks for your arch linux status update! i just wonder: does archlinux re-build in the same path as the original build or not? :) [11:59] < kpcyrd> | h01ger: yes, the build path always st

Re: Two questions about build-path reproducibility in Debian

2024-03-12 Thread Holger Levsen
On Mon, Mar 11, 2024 at 06:24:22PM +, James Addison via rb-general wrote: > Please find below a draft of the message I'll send to each affected bugreport. looks good to me, thank you for doing this! > Note: I confused myself when writing this; in fact Salsa-CI reprotest _does_ > continue to

Re: Two questions about build-path reproducibility in Debian

2024-03-06 Thread Holger Levsen
On Tue, Mar 05, 2024 at 11:51:16PM +, Richard Purdie wrote: > FWIW Yocto Project is a strong believer in build reproducibiity > independent of build path and we've been quietly chipping away at those > issues. [...] > OpenEmbedded-Core (around 1000 pieces of software) is 100% reproducible > an

Re: Two questions about build-path reproducibility in Debian

2024-03-04 Thread Holger Levsen
On Mon, Mar 04, 2024 at 11:52:07AM -0800, John Gilmore wrote: > Why would these become "wishlist" bugs as opposed to actual reproducibility > bugs > that deserve fixing, just because one server at Debian no longer invokes this > bug because it always uses the same build directory? because it's "n

Re: Why is not everything reproducible yet?

2024-02-14 Thread Holger Levsen
Hi Bernhard, (this got lost in post end of the year busyness...) On Wed, Dec 20, 2023 at 09:42:53AM +0100, Bernhard M. Wiedemann via rb-general wrote: > Sometimes people wonder: > Why is not everything reproducible yet? > > And the general reason is that there are other interests that result in

Re: no more F-Droid RB updates

2023-12-05 Thread Holger Levsen
Hi Fay, On Sun, Nov 26, 2023 at 10:30:05PM +0100, Fay Stegerman wrote: > Sadly, I've had to leave F-Droid. I will thus no longer be working on > Android reproducible builds or update the monthly overview of F-Droid > apps published with reproducible builds. AFAIK no one is planning to > take ove

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-17 Thread Holger Levsen
On Fri, Nov 17, 2023 at 01:12:40PM +0100, наб wrote: > If the scissors didn't give it away, this is a "proper" scissor-patch, > which uses headers from the mail (herein: From:) > and overrides under the cut line (herein: Subject:), > but you do need -c or --scissors to apply it: TIL, thanks. --

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-17 Thread Holger Levsen
hi, On Wed, Nov 15, 2023 at 10:42:25PM +0100, наб wrote: > -- >8 -- > Subject: [PATCH] jenkins.d.n: AddEncoding gzip .gz, such that the files aren't > re-compressed as gzip, which some clients can't deal with, and it's a waste > of time > > The current approach, under bookworm apache 2.4.57-2,

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-15 Thread Holger Levsen
hi, On Wed, Nov 15, 2023 at 03:23:59PM +0100, наб wrote: > > so good on linux and bad on windows? > This is what I kept coming back to, but refused to accept firefox would > do something this weird just based on the target. > > Forgot, of course, that both bad machines have ESET running, > and di

Re: reproducible-builds.org is down

2023-11-15 Thread Holger Levsen
On Wed, Nov 15, 2023 at 02:14:31PM +0100, Julien Malka wrote: > To whom it may concern, it looks like the > https://reproducible-builds.org/ website is down. thanks, it's back now. -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org ⢿⡄⠘⠷⠚⠋⠀ OpenPGP

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-15 Thread Holger Levsen
Hi, On Tue, Nov 14, 2023 at 11:05:02PM +0100, наб wrote: > Keep me in CC please. ack, done. > On opening > > https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/systemd-cron.html > I see garbage in the log view > (screenshot at https://101010.pl/@nabijaczleweli/111410835559109

Re: Priority claim re bootstrapping

2023-11-13 Thread Holger Levsen
On Sun, Nov 12, 2023 at 04:28:42PM -0800, John Gilmore wrote: > I do think the topic is a suitable one for the Reproducible Builds > community to discuss. Politely conducted disputes should not be > dismissed as "nonsense" with a suggestion that the parties unsubscribe > from the list. Inflating

Re: GNU Mes 0.25 released

2023-11-12 Thread Holger Levsen
On Sun, Nov 12, 2023 at 09:00:55AM +0100, aho...@0w.se wrote: > I only react on it being *explicitly referred* in the announcements > on *this list* time and time again nobody forced you to subscribe to this list, nobody forces you to reply (I hope), unsubscribing is easy. > P.S. Calling somethi

Re: GNU Mes 0.25 released

2023-11-11 Thread Holger Levsen
On Sat, Nov 11, 2023 at 09:16:38AM +0100, aho...@0w.se wrote: > On Sat, Nov 11, 2023 at 07:38:42AM +0100, Janneke Nieuwenhuizen wrote: > > We are happy to announce the release of GNU Mes 0.25! > Regrettably, the post includes a reference to [...] an, stop this *now*. Your repeated hostile nonsens

Re: Please review the draft for October's report

2023-11-11 Thread Holger Levsen
On Sat, Nov 11, 2023 at 11:02:47AM +0100, Pol Dellaiera wrote: > I just pushed a commit to actually publish it, hope it's ok ! I've seen those two commits pass by on IRC and the fact that they were not coming from Chris *and* included the words "report for November" (albeit in the commit message

strip-nondeterminism usages (was Re: LibreOffice success story)

2023-11-08 Thread Holger Levsen
On Tue, Nov 07, 2023 at 07:28:37PM +0100, Pol Dellaiera wrote: > First, it is available in Nix: > https://search.nixos.org/packages?channel=23.05&show=perl536Packages.strip-nondeterminism&from=0&size=50&sort=relevance&type=packages&query=nondeterminism > > A quick text search of `strip-nondetermi

Re: Reproducibility terminology/definitions

2023-11-08 Thread Holger Levsen
Hi Pol, On Wed, Nov 08, 2023 at 04:38:19PM +0100, Pol Dellaiera wrote: > I'm writing to express my enthusiasm for the discussions and initiatives that > took place during the meeting in Hamburg. Although I was regrettably unable > to attend, I have been closely following the outcomes and I'm par

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 01:48:22PM +0100, Pol Dellaiera wrote: > [...] it was strip-determinism that I was talking about, sorry for the > confusion ! oh, that's interesting! are you using strip-nonderminism on all NixOS builds or only on some and if only on some, how do you opt-in (or -out)? --

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 11:46:12AM +0100, Pol Dellaiera wrote: > @Holger: I'm also using Diffoscope with Nix/NixOS when something goes wrong, > so yeah that useful tool is used outside Debian! diffoscope is widely used for sure. I was however speaking about strip-nondeterminism. -- cheers,

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 10:11:47AM +0100, Bernhard M. Wiedemann via rb-general wrote: > Now there were only mtimes left in .jar and .zip files that were easily > normalized with strip-nondeterminism. nice to see strip-nondeterminism is used outside Debian. > So today I hold in my hands the firs

Re: Website translation

2023-11-06 Thread Holger Levsen
On Wed, Nov 01, 2023 at 06:37:55PM +0100, Marcus Hoffmann via rb-general wrote: > I maintain the weblate insatallation for Codeberg at > https://translate.codeberg.org which might be another potential option. > We can (probably) also configure that to work with the gitlab api at salsa, > which enab

Re: Website translation

2023-11-06 Thread Holger Levsen
Hi Julien, On Wed, Nov 01, 2023 at 05:16:01PM +0100, Julien Lepiller wrote: > I've learned at the rb meeting that the website could be translated. > Currently, the translation process looks like this: you clone the repo, > figure that you need to add your language to _config.yml (languages), > run

Re: Blog post about a talk by Ken Thompson and the original Trusting Trust attack finally released

2023-10-26 Thread Holger Levsen
On Thu, Oct 26, 2023 at 11:36:32AM +0200, Marcel Fourné wrote: > Russ Cox posted https://research.swtch.com/nih and disseminates the original > Ken Thompson compiler backdoor in this, together with a link > https://research.swtch.com/v6/ to follow along in a simulator. > More of historical import

Re: Registration open for the 2023 Reproducible Builds Summit in Hamburg, Germany

2023-10-16 Thread Holger Levsen
hi, it seems we didnt mail rb-general once more about this fantastic event taking place in two weeks tomorrow: https://reproducible-builds.org/events/hamburg2023/ read on for much more info On Mon, Aug 07, 2023 at 12:24:28AM +0200, Mattia Rizzolo wrote: > Hello everybody! > > Many of you shoul

Re: Upcoming changes to Debian Linux kernel packages

2023-09-27 Thread Holger Levsen
On Mon, Sep 25, 2023 at 10:52:26AM +, Holger Levsen wrote: > FYI, "this will make the build unreproducible"... :/ fwiw, after reading the replies to this thread (on the debian kernel list, not here) I don't think this proposal will be implemented... -- chee

Upcoming changes to Debian Linux kernel packages

2023-09-25 Thread Holger Levsen
FYI, "this will make the build unreproducible"... :/ - Forwarded message from Bastian Blank - Date: Sun, 24 Sep 2023 15:01:47 +0200 From: Bastian Blank To: debian-ker...@lists.debian.org Cc: debian-b...@lists.debian.org, debian-rele...@lists.debian.org, debian-secur...@lists.debian.org

Re: Irregular status update about reproducible live-build ISO images

2023-07-04 Thread Holger Levsen
Hi Roland, On Sun, Jul 02, 2023 at 05:37:30PM +0200, Roland Clobus wrote: > here is the 18th update of the status for reproducible live-build ISO images many thanks for those 18 reports, i'm looking forward to the 19th! :) > Reproducible status: > * All major desktops build reproducibly with bul

Re: Introducing: Semantically reproducible builds

2023-06-02 Thread Holger Levsen
hi, I was busy with the Debian Hamburg Reunion 2023 last week and the first half of this, so I only started catching up on this thread yesterday... On Fri, Jun 02, 2023 at 10:46:16AM -0400, David A. Wheeler wrote: > Fair enough. The immediate issue is to reduce confusion. > > The OSSGadget devel

Re: GCC, binutils, and Debian's build-essential set

2023-05-12 Thread Holger Levsen
hi Vagrant, On Sun, Apr 30, 2023 at 09:54:58PM -0700, Vagrant Cascadian wrote: > I have been poking at gcc and binutils this month; they take a good long > while to build... [...] wheee, kudos & thanks for sharing your progress here! -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(de

Re: Build the ring rust crate with a stable build path

2023-05-08 Thread Holger Levsen
hi kpcyrd, On Mon, May 08, 2023 at 02:08:09AM +0200, kpcyrd wrote: > I was using github actions to compile my project but had trouble matching > the binary, even when[...] thanks for sharing your findings here! [...] > This can be run without root privileges if user namespaces are enabled. The >

Re: Full-Source Bootstrap has landed on Guix master

2023-04-27 Thread Holger Levsen
On Wed, Apr 26, 2023 at 04:41:21PM +0200, Janneke Nieuwenhuizen wrote: > Now that the core-updates development branch has been merged, the > Full-Source Bootstrap has come to GNU Guix! This means we're building > packages from source all the way down. Read all about it in this new > post: > >

Re: Sphinx: localisation changes / reproducibility

2023-04-27 Thread Holger Levsen
On Wed, Apr 26, 2023 at 12:40:09PM -0700, Vagrant Cascadian wrote: > Yes, ideally SOURCE_DATE_EPOCH does not matter. It is a workaround to > embed a (hopefully meaningful) timestamp, when from a reproducible > builds perspective, ideally there would be no timestamp at all in the > resulting artifac

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2023-04-24 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 24h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we ai

Re: Sphinx: localisation changes / reproducibility

2023-04-14 Thread Holger Levsen
Dear James, many thanks also from me for your work on this and sharing your findings here. I'm another happy sphinx user affected by those problems. :) somewhat related: i'm wondering whether distro-info should respect SOURCE_DATE_EPOCH: src:developers-reference builds different content based

Re: Real World Reproducibility in Debian (was Re: Debian and reproducible-builds.org incoherence?)

2023-04-14 Thread Holger Levsen
On Thu, Apr 13, 2023 at 02:43:43PM -0700, Vagrant Cascadian wrote: > > Any progress on that front? What can be done to change things so that the > > packages people normally *use* are reproducible? the Debian packages people normally use *are* already reproducible (well, 80-90% of them, at least),

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2023-03-27 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 24h. As usual we meet at 15 UTC on irc.oftc.net, which for many this time is a different localtime than last month! The meeting is supp

Re: Reproducible builds stickers and flyers needed for Chemnitz Linux Days 2023

2023-03-05 Thread Holger Levsen
On Wed, Mar 01, 2023 at 11:54:34PM +0100, Mattia Rizzolo wrote: > TTBOMK, the only person with some sticker in Europe at this time is > Holger, and he should still have a few with him. no, I gave them all away at FOSDEM and the 'we <3 free software' event of fsfe... > Otherwise, it seems to me

Re: hiding data/code in Android APK embedded signatures

2023-02-02 Thread Holger Levsen
On Wed, Feb 01, 2023 at 08:40:46PM -0500, David A. Wheeler wrote: > Maybe call it "Ways to combine reproducible builds with signatures and other > metadata"? "other metadata" brings .buildinfo files^w^wSBOMs to my mind and indeed we have (at least) two concepts here, including the .buildinfo int

Re: hiding data/code in Android APK embedded signatures

2023-02-01 Thread Holger Levsen
On Wed, Feb 01, 2023 at 12:53:24PM -0500, David A. Wheeler wrote: > I recommend that the reproducible-builds website have a short article > *specifically* recommending how signatures, OmniBOR data, & similar metadata > should be shared. [...] > Is there agreement on adding such a page? Yes, I'd s

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2023-01-30 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit less than 19h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we a

Re: Reproducible Builds Summit 2023 in Hamburg

2023-01-02 Thread Holger Levsen
hi, On Sun, Jan 01, 2023 at 12:58:06PM +, Chris Lamb wrote: > > with 2022 soon coming to an end, I'd like to announce the date and > > and the location of the next Reproducible Builds Summit in 2023! > > When: October 30th, November 1st-2nd 2023. > > What: Three days to continue the growth o

Reproducible Builds Summit 2023 in Hamburg

2022-12-30 Thread Holger Levsen
Moin! :) with 2022 soon coming to an end, I'd like to announce the date and and the location of the next Reproducible Builds Summit in 2023! When: October 30th, November 1st-2nd 2023. What: Three days to continue the grow of the Reproducible Builds effort. As previously, the exact conten

Re: Journal article in reproducible builds

2022-12-08 Thread Holger Levsen
Hi Simon, On Thu, Dec 01, 2022 at 06:36:46PM +, Simon Butler wrote: > LGTM - everybody is there. One small issue, the closing parenthesis is > missing from the link > > There are 4 papers referenced in the bibliography that may also be of > interest. thanks you for providing merge requests

Re: F-Droid: overview of apps using reproducible builds

2022-12-08 Thread Holger Levsen
On Tue, Dec 06, 2022 at 02:14:11AM +0100, FC Stegerman wrote: > TL;DR: we added 11 new apps using reproducible builds in November, > making for a total of 31 RB apps in F-Droid as of December 1st [1]. > [1] https://gitlab.com/fdroid/fdroiddata/-/issues/2844 that's really cool, thank you for sharin

Re: On android "secure messengers" and reproducible builds (or lack thereof)

2022-12-08 Thread Holger Levsen
On Tue, Dec 06, 2022 at 02:17:02AM +0100, FC Stegerman wrote: > I looked at how several android messenger apps claiming to have > reproducible builds actually verify that they do [1]. > TL;DR: It's quite possible these messengers actually have reproducible > builds, but the verification scripts the

Re: Journal article in reproducible builds

2022-11-30 Thread Holger Levsen
Hi Simon, On Wed, Nov 30, 2022 at 07:47:46PM +, Simon Butler wrote: > >> I'm pleased to announce that Software Quality Journal have published a > >> article on reproducible builds. The article is open access and is at > >> https://link.springer.com/article/10.1007/s11219-022-09607-z > > wow, a

Re: Journal article in reproducible builds

2022-11-30 Thread Holger Levsen
Hi Simon, On Tue, Nov 29, 2022 at 07:36:58AM +, Simon Butler via rb-general wrote: > I'm pleased to announce that Software Quality Journal have published a > article on reproducible builds. The article is open access and is at > https://link.springer.com/article/10.1007/s11219-022-09607-z wow

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2022-11-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit less than 22h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we a

Re: Debian NMU Sprints in December, Thursdays 17:00 UTC!

2022-11-21 Thread Holger Levsen
hi Vagrant, On Sun, Nov 20, 2022 at 04:28:10PM -0800, Vagrant Cascadian wrote: > Since the previous sprints were fun and productive, I am planning on > doing NMU sprints every Thursday in December (1st, 8th, 15th, 22nd, > 29th). We are planning on meeting on irc.oftc.net in the > #debian-reproduci

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2022-09-26 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 27h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we a

#r-b irc meeting, Tuesday, *today*, 15 UTC

2022-08-30 Thread Holger Levsen
hi, this is a very late reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is TODAY, in a bit more than 3h. As usual we meet at 15 UTC on irc.oftc.net. I'm sorry for the late reminder and hope you already had it in your calendar anyway! ;) The meeti

Re: Reproducible builds stickers and flyers needed for FrOSCon 2022

2022-08-05 Thread Holger Levsen
On Fri, Aug 05, 2022 at 08:55:42AM +0200, Fabian Keil wrote: > FrOSCon 2022 [0] is coming up and I registered a booth > for ElectroBSD [1] (and Privoxy [2] and zogftw [3]). yay! > I usually also offer project-related materials and am > thus currently looking for reproducible builds stickers > an

#r-b irc meeting, Tuesday, *today*, 15 UTC

2022-07-26 Thread Holger Levsen
hi, this is a very late reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is TODAY, in 4h. As usual we meet at 15 UTC on irc.oftc.net. I'm sorry for the late reminder and hope you already had it in your calendar anyway! ;) The meeting is supposed to

Re: translations for the r-b.o website

2022-06-09 Thread Holger Levsen
On Wed, Jun 08, 2022 at 07:30:28PM +0200, Mattia Rizzolo wrote: > I hoped to find some settings on how to prevent that in the weblate's > project settings. I would have liked something that makes weblate only > propose merging languages that are… I don't know… probably 75% or more > translated. e

#r-b irc meeting, Tuesday, May 31st, 15 UTC

2022-05-30 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 31st of May. As usual we meet at 15 UTC on irc.oftc.net, which is in slightly less than 23h from now ;) The meeting is supposed to last between 1-2h, maybe rather an ho

Re: JDK 19+21 early-access build is reproducible

2022-05-12 Thread Holger Levsen
Hi John, On Fri, May 06, 2022 at 01:48:20PM -0700, John Neffenger wrote: > Starting yesterday, for the first time, the JDK can create reproducible > builds of the JDK! [...] > That also means there's nothing in the JDK that's holding back any Java > application from having reproducible builds. [.

Re: faketime breaks quilt patched file times in Debian

2022-05-01 Thread Holger Levsen
Hi Roland, On Sat, Apr 30, 2022 at 03:53:13PM +0200, Roland Rosenfeld wrote: > [tl;dr faketime results on broken file timestamps for quilt patched > files on salsa] which is one of several reasons why (in 2014 or so) we choose not to use faketime to achieve reproducible-builds. > Since some tim

Re: #r-b irc meeting, Tuesday, April 26th, 15 UTC

2022-04-25 Thread Holger Levsen
On Mon, Apr 25, 2022 at 03:12:56PM +, Holger Levsen wrote: > this is a reminder for our next IRC meeting on #reproducible-builds on the > last Tuesday of the month, which is tomorrow, the 25th of April. As usual > we meet at 15 UTC on irc.oftc.net, which is in slightly less than 24h f

#r-b irc meeting, Tuesday, April 25th, 15 UTC

2022-04-25 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 25th of April. As usual we meet at 15 UTC on irc.oftc.net, which is in slightly less than 24h from now ;) The meeting is supposed to last between 1-2h, maybe rather an

Re: Request regarding SquashFS documentation

2022-04-25 Thread Holger Levsen
Hi Larry, On Sat, Apr 23, 2022 at 09:53:11PM -0700, Larry Doolittle wrote: > In https://reproducible-builds.org/docs/system-images/ there's a paragraph > about SquashFS metadata & compression. It's superficially OK, but points > to IMHO an obsolete fork of mksquashfs. No offense to lynxis! He d

Re: Reproducible Central hits the 500 fully reproduced builds of upstream projects releases for the JVM

2022-04-05 Thread Holger Levsen
On Tue, Mar 29, 2022 at 08:11:57AM +0200, Hervé Boutemy wrote: > > to bring things into perspective, when you say "500 fully reproduced builds > > of upstream projects releases", out of how many upstream projects in total? > > 550? 5000? 5? :) > I don't have the statistics on releases published

Re: SOURCE_DATE_EPOCH and timezone with FAT images

2022-03-29 Thread Holger Levsen
ps://reproducible-builds.org/docs/source-date-epoch/ would be helpful. I'm also sure this is far from perfect, so please improve: commit 3764949f50fe3d8f557de2b4d26e740f55760c31 (HEAD -> master, origin/master) Author: Holger Levsen Date: Wed Mar 30 01:42:39 2022 +0200 explain SOURCE_DATE_E

#r-b irc meeting, Tuesday, March 29th, 15 UTC

2022-03-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 29th of March. As usual we meet at 15 UTC on irc.oftc.net, which is in less than 23h from now ;) (mind the DST changes!) The meeting is supposed to last between 1-2h, m

Re: Reproducible Central hits the 500 fully reproduced builds of upstream projects releases for the JVM

2022-03-28 Thread Holger Levsen
Hi Hervé, On Sun, Mar 27, 2022 at 08:27:11AM +0200, Hervé Boutemy wrote: > I just wanted to share how the number of projects that produce reproducible > releases for the JVM is growing, year after year. > > This forced me to rewrite the reporting system, that did not work any more in > one uniq

Re: rb meetup at openSUSE conference in Nuremberg

2022-03-12 Thread Holger Levsen
Hi Bernhard, On Thu, Mar 10, 2022 at 04:23:06AM +0100, Bernhard M. Wiedemann wrote: > I submitted a rb workshop session proposal for > https://events.opensuse.org/conferences/oSC22 > > Even if that is not accepted, this conf would be an opportunity for a > small meetup of rb people. coolio! >

Re: Thinking of our next summit this year

2022-03-04 Thread Holger Levsen
On Wed, Mar 02, 2022 at 09:08:39AM +0100, Hans-Christoph Steiner wrote: > I live in Vienna, which has lots of good train connections all over Europe, > but it is more expensive to fly to. I'm happy to help the organizers if its > in Vienna. Fr example, I can recommend this hotel, which is a funky

Re: Thinking of our next summit this year

2022-03-03 Thread Holger Levsen
hey, On Thu, Mar 03, 2022 at 06:25:04PM -, Chris Lamb wrote: > Mattia, I could see myself travelling this September for an RB summit. > Like others have mentioned, I would prefer somewhere Europe for a > variety of reasons. same for me. and yay, already looking forward to that! :) -- cheer

#r-b irc meeting, Tuesday, February 22nd, 15 UTC

2022-02-19 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, so 22nd of February, at 15 UTC on irc.oftc.net, which is in roughly 62h from now ;) The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after

#r-b irc meeting, Tuesday, January 25th, 15 UTC

2022-01-22 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, so 25th of January, at 15 UTC on irc.oftc.net, which is in roughly 70h from now. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23

#r-b irc meeting, Tuesday, November 30th, 15 UTC

2021-11-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, so 30th of November, at 15 UTC on irc.oftc.net. This is two days from now. :) Also please note that 15 UTC this month is likely a different local time than 15 UTC last month... The meeting i

Re: #r-b irc meeting, Tuesday, October 26th, 15 UTC

2021-10-25 Thread Holger Levsen
hi, this is just a quick reminder that this is today, in 7.5h! On Thu, Oct 21, 2021 at 04:32:45PM +, Holger Levsen wrote: > this is a reminder for our next IRC meeting on #reproducible-builds on the > last Tuesday of the month (so 26th of October) at 15 UTC on irc.oftc.net. > Thi

#r-b irc meeting, Tuesday, October 26th, 15 UTC

2021-10-21 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 26th of October) at 15 UTC on irc.oftc.net. This is five days from now. :) The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42

Re: Please review the draft for September's report

2021-10-04 Thread Holger Levsen
On Mon, Oct 04, 2021 at 10:54:19PM +, Holger Levsen wrote: > On Mon, Oct 04, 2021 at 10:34:03PM -, Chris Lamb wrote: > > Sorry for the slight delay; been under the weather over the weekend. Anyway, > > please review the draft for September's Reproducible Builds

Re: Please review the draft for September's report

2021-10-04 Thread Holger Levsen
hi, On Mon, Oct 04, 2021 at 10:34:03PM -, Chris Lamb wrote: > Sorry for the slight delay; been under the weather over the weekend. Anyway, > please review the draft for September's Reproducible Builds report: > https://reproducible-builds.org/reports/2021-09/?draft jenkins is also not doing

Re: stage0-posix release

2021-10-03 Thread Holger Levsen
On Sun, Oct 03, 2021 at 09:38:50PM +, jerem...@pdp10.guru wrote: > Thanks to the incredible efforts of Andrius Štikonas over the last 4 > months, today we announce the release of version 1.4 of stage0-posix. [...] > As always all supported architectures are able to cross-verify all other > ar

#r-b irc meeting, tomorrow, Tuesday, 15 UTC

2021-09-27 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 28th of September) at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42m on one topic we move on any

FYI: Debian hackmeeting in Hamburg open for R-B folks

2021-09-16 Thread Holger Levsen
hi, FYI: from Sep 26 til Oct 1 there will be a small Debian hackmeeting taking place in Hamburg, Germany, where we would be delighted to welcome people working on Reproducible Builds in general! (IOW: this not limited to Debian) If you are located somewhat nearby, please check out https://wiki.de

Re: Recoding the configuration for live-build images

2021-09-06 Thread Holger Levsen
Hi Janneke, On Mon, Sep 06, 2021 at 12:41:49PM +0200, Jan Nieuwenhuizen wrote: > I'm thinking about the binary seed that's used to produce a new release, > as far as I understand it, Debian's binary seed is "build-essential". > > I imagine that for a new Debian binary release, e.g., Bullseye, fir

Re: Recoding the configuration for live-build images

2021-09-04 Thread Holger Levsen
On Sat, Sep 04, 2021 at 09:18:16AM +0200, Jan Nieuwenhuizen wrote: > [...] It would be amazing to get > a GNU Mes based reduced binary seed bootstrap into Debian. what does or would that mean? Debian is a binary distribution and sadly Debian is only bootstrapped once per port. (Not trying to dis

#r-b irc meeting, tuesday in 4 days, 15 UTC

2021-08-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 31st of August) at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42m on one topic we move on anyway

Reproducible Buster, Bullseye & Bookworm - where we come from and where we are going

2021-08-23 Thread Holger Levsen
lseye & Bookworm - where we come from and where we are going Speaker: Holger Levsen Language: English Track: Introduction to Free Software & Debian Type: Long talk (45 minutes) Room: Talks 1 Time: Aug 24 (Tue): 19:00 UTC Duration: 0:45 In this talk Holger Levsen will give an update on Reproduci

Re: i-probably-didnt-backdoor-this: Reproducible Builds for upstreams

2021-08-20 Thread Holger Levsen
hi kpcyrd, On Thu, Aug 19, 2021 at 11:16:29PM +, kpcyrd wrote: > I uploaded a github repo that distributes a Hello World in various > formats (ELF binary, Docker image, 3rd party(!) Arch Linux package) and > documented every file and command needed to reproduce the artifacts > bit-for-bit: >

Re: Help us map the reproducible builds ecosystem

2021-08-11 Thread Holger Levsen
Hi Richard, thanks for your feedback! On Thu, Aug 05, 2021 at 04:46:27PM +0100, Richard Purdie wrote: > For yocto, we can generate packages and we do run tests of our default config  > on those: > > https://www.yoctoproject.org/reproducible-build-results/ > > so 36 exclusions (known issues, eff

Re: [Git][reproducible-builds/reproducible-website][master] Migrate 'history' from the Debian wiki.

2021-08-10 Thread Holger Levsen
On Mon, Aug 09, 2021 at 08:53:48PM +, Holger Levsen wrote: > And then, those lists are formatted incorrectly on > https://reproducible-builds.org/docs/history/ > and I fail to find a fix right this. This affects not only the list of > contributors but also lists, like the

Re: [Git][reproducible-builds/reproducible-website][master] Migrate 'history' from the Debian wiki.

2021-08-09 Thread Holger Levsen
Hi, On Sat, Jul 31, 2021 at 01:21:48PM +, Chris Lamb (@lamby) wrote: > Chris Lamb pushed to branch master at Reproducible Builds / > reproducible-website > > > Commits: > 1b5838fe by Chris Lamb at 2021-07-31T14:21:01+01:00 > Migrate 'history' from the Debian wiki. yay, thank you Chris for

Re: Help us map the reproducible builds ecosystem

2021-08-05 Thread Holger Levsen
On Thu, Aug 05, 2021 at 02:51:17PM +0100, Chris Lamb wrote: > There is definitely an argument to be as complete as possible, but I > think the best thing from the perspective of the ecosystem map is to > be as consistent as possible across similar entities. I'm not sure there is so much consistanc

Re: Help us map the reproducible builds ecosystem

2021-08-02 Thread Holger Levsen
On Mon, Aug 02, 2021 at 11:07:21AM +0100, Chris Lamb wrote: > Thanks to everyone who contributed to this so far. I've spent a little > time this morning tidying up, merging and elaborating all of your > input — it is looking a lot more useful and complete now. > > However, can everyone have anothe

  1   2   3   >