form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 267 includes the following changes:
[ Chris Lamb ]
* Include "xz --verbose --verbose" (ie. double --verbose) output, not just
the single --verbose. (Closes: #1069329)
* Only include
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 266 includes the following changes:
[ Chris Lamb ]
* Use "xz --list" to supplement the output when comparing .xz archives;
essential when some underlying metadata differs. (Closes
2024/04/08/8
[11] https://www.openwall.com/lists/oss-security/
[12] https://www.openwall.com/lists/oss-security/2024/04/20/3
§
Website updates
---
There were a number of improvements made to our website this month,
including Chris Lamb updating the archive page
Chris Lamb wrote:
> Please review the draft for April's Reproducible Builds report:
This has now been published — thanks to all who contributed. :)
If possible, please share the following link:
https://reproducible-builds.org/reports/2024-04/
.. and also consider retweeting:
ht
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
_key(self):
return str(uuid4())
... in ./sphinx_panels/tabs.py in the sphinx-panels source package.
Disabling parallelism won't help in this situation.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
ng future RB
locations and dates. The difficulty, as you no doubt are aware, is
that conference dates must perforce be picked long in advance, and
they are dictated in no small part by the blunt reality of the venue's
availability rather than organisers' good intentions. :(
Best wishes,
--
ed. Done :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 265 includes the following changes:
[ Chris Lamb ]
* Ensure that tests with ">=" version constraints actually print the
corresponding tool name. (Closes: reproducible-builds/d
han FOSDEM… :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
bian packages were added, 38 were
updated and 23 were removed this month adding to ever-growing knowledge
about identified issues [32]. As part of this effort, a number of issue
types were updated, including Chris Lamb adding a new
ocaml_include_directories toolchain issue [33] and James Addison ad
ne, but haven't for a while. Still, the
bumper amount of news in this month's report month does seem to ask
for one... Added and pushed.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 264 includes the following changes:
[ Chris Lamb ]
* Don't crash on invalid zipfiles, even if we encounter 'badness'
through through the file. (Re: #1068705)
[ FC (Fay) Stegerman ]
* Add note
Chris Lamb wrote:
> Please review the draft for March's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2024-03/
.. and also consider retweeting:
ht
the feedback so far. Unless someone makes these
changes to the draft themselves, I will attend to this (and all the
other critiques here and on Salsa) before publishing.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
thanks. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 263 includes the following changes:
[ Chris Lamb ]
* Add support for the zipdetails(1) tool included in the Perl distribution.
Thanks to Larry Doolittle et al. for the pointer to this tool.
* Don't
reads like this. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
t. :)
Just to underscore that this is simply my curiosity before you
reassign: in the particular case of *buildpath* AND toolchain, these
should almost certainly be wishlist anyway because, as discussed, we
"aren't testing buildpath".
Best wishes,
--
o
⬋ ⬊ Ch
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 262 includes the following changes:
[ Chris Lamb ]
* Factor out Python version checking in test_zip.py. (Re: #362)
* Also skip some zip tests under 3.10.14 as well; a potential regression may
have
iated deliverables don't quite, alas, match your
summary. Still, the important thing here is that your passion is
infectious. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 261 includes the following changes:
[ Chris Lamb ]
* Don't crash if we encounter an .rdb file without an equivalent .rdx file.
(Closes: #1066991)
* In addition, don't identify Redis database dumps
TZ=UTC unzip "$zipfile". See
> #
> https://lists.reproducible-builds.org/pipermail/rb-general/2023-April/002927.html
Ah, interesting! Does that -X mean that
https://reproducible-builds.org/docs/archives/
... is incomplete? I'm happy to update this document myself if need be. :)
B
tps://www.sphinx-doc.org/en/master/
Elsewhere, Bernhard M. Wiedemann posted another monthly update [41] for
his work elsewhere in openSUSE.
[41]
https://lists.opensuse.org/archives/list/fact...@lists.opensuse.org/thread/I66U56F5R3TR4ZTLYGPSGWINNOLZ7XP4/
§
diffoscope
--
Chris Lamb wrote:
> Please review the draft for February's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2024-02/
.. and also consider retweeting:
ht
; 002E Extra ID #00027875 'ux: Unix Extra Type 3'
> 0030 Length 000B
> 0032 Version 01
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 260 includes the following changes:
[ Chris Lamb ]
* Actually test 7z support in the test_7z set of tests, not the lz4
functionality. (Closes: reproducible-builds/diffoscope#359)
* In addition
900035164ea655164ea6575780b000104e80304e803
> + 55540900035164ea655464ea6575780b000104e80304e803
> - extra (entry) atime=2024-03-08 01:05:21
> + extra (entry) atime=2024-03-08 01:05:24
>
> - Fay
>
> [1] https://github.com/obfusk/reproducible-apk-tools#diff-zip-me
y do not have access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
, allow me to do that for you:
[1] https://salsa.debian.org/reproducible-builds/reprotest/-/merge_requests/23
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 259 includes the following changes:
[ Chris Lamb ]
* Don't error-out with a traceback if we encounter "struct.unpack"-related
errors when parsing .pyc files. (Closes: #1064973)
* Fix com
only really used the usertags to do some rough-and-ready statistics
on broad issue categories.)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
factoring will be needed to make this
> possible. In particular, how --auto-build is implemented […]
(I think this is implemented internally to reprotest, on a different
abstraction layer to the command-line argument handling.)
Any strong opinions from elsewhere...?
Best wishes,
--
o
t DDs? Would their new pushes to Salsa now suddenly fail in the
reprotest job of the pipeline? If so, that's not too awful, given that
the prominent error message would presumably let them know precisely
how to fix it.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o r
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 258 includes the following changes:
[ Chris Lamb ]
* Use the 7zip package (over p7zip-full) after package transition.
(Closes: #1063559)
* Update debian/tests/control.
[ Vagrant Cascadian
code to comply with the latest version of Black (24.1.1).
[ Chris Lamb ]
* Expand the previous changelog entry to include the CVE number that was
subsequently assigned.
* Bump the miniumum Black requirement to run the "Black clean" test and make
test_zip.py Black clean.
#
s://salsa.debian.org/reproducible-builds/diffoscope
- Issues and feature requests
https://salsa.debian.org/reproducible-builds/diffoscope/issues
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠C
ttps://lists.reproducible-builds.org/pipermail/rb-general/2024-January/003232.html
[13] https://github.com/kpcyrd/archlinux-userland-fs-cmp
[14] https://asciinema.org/a/MFefYEdvU2O5LlIzseQnyBky5
§
Issues with our SOURCE_DATE_EPOCH code?
--
Chris Lamb wrote:
> Please review the draft for January's Reproducible Builds report:
This has now been published — thanks to all who contributed. We didn't
know what to do with the FOSDEM stuff (technically February, not January
so I will do a separate post tomorrow).
Anyway, please sh
y do not have access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 255 includes the following changes:
[ Vekhir ]
* Add/fix compatibility for Python progressbar 2.5 & 3.0 etc.
[ Chris Lamb ]
* Update copyright years.
## Download
Version 255 is available
/
systems programming can jump in and iron out any potential issues with
Alejandro.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 254 includes the following changes:
[ Chris Lamb ]
* Reflow some code according to black.
[ Seth Michael Larson ]
* Add support for comparing the 'eXtensible ARchive' (.XAR/.PKG) file format
E Software "Best Paper" award
-
In February 2022, we announced in these reports [2] that a paper written
by Chris Lamb [3] and Stefano Zacchiroli [4] was now available in the
March/April 2022 issue of IEEE Software [5].
Chris Lamb wrote:
> Please review the draft for December's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-12/
.. and also consider retweeting:
ht
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
cess… and to be implemented
after community feedback. We'll post more on this in January.
In the meantime, we wish all of you a fine rest of 2023, and excellent
(and reproducible…) 2024!
Regards,
— Chris, Gunner, Holger, Mattia & Vagrant
Chris Lamb wrote:
> Dear all,
>
> Thank you
ian.org/reproducible-builds/diffoscope
- Issues and feature requests
https://salsa.debian.org/reproducible-builds/diffoscope/issues
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o
m/
[41] https://github.com/drupol
[42]
https://github.com/drupol/ipc2023/releases/tag/v23-79efbb4c24ab0d42c73906d16233a79d9659c5ca
§§§
## diffoscope changes
diffoscope [43] is our in-depth and content-aware diff utility that
can locate and diagnose reproducibility issues. This month, Chris
Chris Lamb wrote:
> Please review the draft for November's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-11/
.. and also consider retweeting:
ht
If you
currently do not have access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
hat
a formal CoC is incoming and that list participants should treat
other members of the community with respect and always help foster a
welcoming environment for all.
Thanks,
— Chris, Holger, Mattia, Vagrant and Gunner
Chris Lamb wrote:
> Hello,
>
> Thank you to those of you w
Hello,
Thank you to those of you who have reached out to us with concerns
regarding the tone and content of posts on this list in recent weeks.
We realise and appreciate that the sometimes-confrontational
interactions on the list have really not been what we expect or
desire from our community.
and feature requests
https://salsa.debian.org/reproducible-builds/diffoscope/issues
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
qemu [77] (date and Sphinx issue)
* qpid [78] (sorting problem)
* rakudo [79] (filesystem ordering issue)
* SLOF [80] (date-related issue)
* spack [81] (CPU counting issue)
* xemacs-packages [82] (date-related issue)
* Chris Lamb:
* #1053353 [83] filed against dacite [84].
* #
s what remote/origin/master was as well.
Weird.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
Chris Lamb wrote:
> Please review the draft for October's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-10/
.. and also consider retweeting:
ht
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
red 20/25 Reproducible Builds badges that I'll bring to the
Summit. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
https://salsa.debian.org/reproducible-builds/diffoscope/issues
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
rer, scheme?)
Best wishes,
--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org chris-lamb.co.uk
`-
Chris Lamb wrote:
> Please review the draft for September's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-09/
.. and also consider re-tweeting:
ht
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
Chris Lamb wrote:
> Please review the draft for August's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-08/
.. and also consider retweeting:
ht
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 250 includes the following changes:
[ Chris Lamb ]
* Fix compatibility with file 5.45. (Closes:
reproducible-builds/diffoscope#351)
[ Vagrant Cascadian ]
* Add external tool references for GNU Guix
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 249 includes the following changes:
[ FC Stegerman ]
* Add specialize_as() method, and use it to speed up .smali comparison in
APKs. (Closes: reproducible-builds/diffoscope!108)
[ Chris Lamb
egards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 247 includes the following changes:
[ Chris Lamb ]
* Fix compataibility with file(1) version 5.45.
* Use assert_diff in test_uimage and test_cpio.
[ Roland Clobus ]
* xb-tool has moved in Debian
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 245 includes the following changes:
[ Chris Lamb ]
* Don't include file size in image metadata; it is, at best, distracting and
it is already in the directory metadata.
* Move to using assert_diff
inutes or so); and then b) running
through all of the outstanding requests. I'll watch the queue logs
out of the corner of my eye until they are back to zero. Thanks again.
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 244 includes the following changes:
[ Chris Lamb ]
* Address compatibility with python-libarchive-c version 5.
(Closes: reproducible-builds/diffoscope#344)
* Testsuite changes:
- Mark
Chris Lamb wrote:
> Please review the draft for June's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-06/
.. and also consider retweeting:
ht
igured as an advisory—if important—part of the build
pipeline rather than failures "breaking the build".
[0] https://tails.boum.org/
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 243 includes the following changes:
[ Chris Lamb ]
* Drop Jenkins build reference in README.rst.
[ Ed Maste ]
* Update FreeBSD package names
[ Mattia Rizzolo ]
* Improve the documentation
Chris Lamb wrote:
> Please review the draft for May's Reproducible Builds report:
This has now been published — thanks to all who contributed. If
you have a moment, please share the following link:
https://reproducible-builds.org/reports/2023-05/
… and also consider retweeting:
ht
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
Chris Lamb wrote:
> Please review the draft for April's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-04/
.. and also consider retweeting:
ht
https://salsa.debian.org/reproducible-builds/diffoscope/issues
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
prior to publishing,
though. If you currently do not have access to the above repository,
you can request access by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 241 includes the following changes:
[ Chris Lamb ]
* Add a missing 'raise' statement dropped in 2d95ae41e. Thanks, Mattia!
[ Mattia Rizzolo ]
* document sending out an email upon release
ducible".
Regarding precisely why there is a difference, I can't write more at
the moment, but have you tried comparing "your"
fbreader_0.12.10dfsg2-4_amd64.deb with one shipped by Debian using
diffoscope? Happy to run that for you if you can provide your file.
Regards,
--
o
uot; PR. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
Chris Lamb wrote:
> Please review the draft for March's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-03/
.. and also consider retweeting:
ht
fab/"?
> The diff is so small, it seems silly to post both files, but I'll
> do that anyway.
(Assuming I'm parsing this right, I think you forgot to attach or
link them.)
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
es
- Contribution instructions (eg. to file an issue)
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 239 includes the following changes:
[ Chris Lamb ]
* Fix compatibility with pypdf 3.x, and correctly restore test data.
(Closes: reproducible-builds/diffoscope#335)
* Rework PDF annotations
Chris Lamb wrote:
> Please review the draft for February's Reproducible Builds report:
This has now been published — thanks to all who contributed.
If possible, please share the following link:
https://reproducible-builds.org/reports/2023-02/
.. and also consider retweeting:
ht
y do not have access to the above repository, you can request access
by following the instructions at:
https://reproducible-builds.org/contribute/salsa/
Regards,
--
o
⬠⬠Chris Lamb
o o reproducible-builds.org ð
⬠â¬
o
great:
https://salsa.debian.org/reproducible-builds/diffoscope/-/issues
(And just for clarity, the ".wic" files are files containing raw
partitions, but the ".disk" files contain entire disk images including
a partition table?)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
uild reproducibly in Debian. Hope
this helps.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
form to compare them. It can compare two tarballs, ISO images, or PDF
just as easily.
Version 236 includes the following changes:
[ FC Stegerman ]
* Update code to match latest version of Black. (Closes: #1031433)
[ Chris Lamb ]
* Require at least Black version 23.1.0 to run the internal
timestamp" one, or
bc6a7787? Happy to try either for you, but would need a pointer
to where to find bc6a7787. :)
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
---++
| a, b | b, a | Unreproducible |
+-+-++
| b, a | b, a | "Reproducible" |
+-+-++
That might explain why there is no "logic" to the diffoscope results
on tests.reproducible-builds.org.
hatsoever about this tuple & set: it's really just a regular tuple
and set.
Best wishes,
--
o
⬋ ⬊ Chris Lamb
o o reproducible-builds.org
⬊ ⬋
o
1 - 100 of 447 matches
Mail list logo
