Re: Please review the draft for March's report

2024-04-11 Thread Holger Levsen
Dear Chris et al, On Thu, Apr 11, 2024 at 07:52:39PM +0100, Chris Lamb wrote: > > Please review the draft for March's Reproducible Builds report: > This has now been published — thanks to all who contributed. great, thank you and everyone involved indeed! I also like the final order of the

Re: Please review the draft for March's report

2024-04-10 Thread Holger Levsen
On Wed, Apr 10, 2024 at 10:02:56AM -0400, David A. Wheeler via rb-general wrote: > I agree, this one is HUGE news. There's been a lot of awesome work related to > reproducible builds, but "minimal container userland is a 100% reproducible > build in a real-world widely-used distro" is a big step

Re: Two questions about build-path reproducibility in Debian

2024-04-08 Thread Holger Levsen
On Tue, Mar 12, 2024 at 08:45:03AM -0700, Vagrant Cascadian wrote: > >> Note: I confused myself when writing this; in fact Salsa-CI reprotest > >> _does_ > >> continue to test build-path variance, at least until we decide otherwise. > > this is in fact a bug and should be fixed with the next

Re: Reproducible Arch Linux in 2024/Q1 (irregular status update)

2024-03-13 Thread Holger Levsen
hi, from irc: kpcyrd: may i quote on rb-general what you wrote here? [11:56] < h01ger> kpcyrd: many thanks for your arch linux status update! i just wonder: does archlinux re-build in the same path as the original build or not? :) [11:59] < kpcyrd> | h01ger: yes, the build path always

Re: Two questions about build-path reproducibility in Debian

2024-03-12 Thread Holger Levsen
On Mon, Mar 11, 2024 at 06:24:22PM +, James Addison via rb-general wrote: > Please find below a draft of the message I'll send to each affected bugreport. looks good to me, thank you for doing this! > Note: I confused myself when writing this; in fact Salsa-CI reprotest _does_ > continue to

Re: Two questions about build-path reproducibility in Debian

2024-03-06 Thread Holger Levsen
On Tue, Mar 05, 2024 at 11:51:16PM +, Richard Purdie wrote: > FWIW Yocto Project is a strong believer in build reproducibiity > independent of build path and we've been quietly chipping away at those > issues. [...] > OpenEmbedded-Core (around 1000 pieces of software) is 100% reproducible >

Re: Two questions about build-path reproducibility in Debian

2024-03-04 Thread Holger Levsen
On Mon, Mar 04, 2024 at 11:52:07AM -0800, John Gilmore wrote: > Why would these become "wishlist" bugs as opposed to actual reproducibility > bugs > that deserve fixing, just because one server at Debian no longer invokes this > bug because it always uses the same build directory? because it's

Re: Why is not everything reproducible yet?

2024-02-14 Thread Holger Levsen
Hi Bernhard, (this got lost in post end of the year busyness...) On Wed, Dec 20, 2023 at 09:42:53AM +0100, Bernhard M. Wiedemann via rb-general wrote: > Sometimes people wonder: > Why is not everything reproducible yet? > > And the general reason is that there are other interests that result

Re: no more F-Droid RB updates

2023-12-05 Thread Holger Levsen
Hi Fay, On Sun, Nov 26, 2023 at 10:30:05PM +0100, Fay Stegerman wrote: > Sadly, I've had to leave F-Droid. I will thus no longer be working on > Android reproducible builds or update the monthly overview of F-Droid > apps published with reproducible builds. AFAIK no one is planning to > take

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-17 Thread Holger Levsen
On Fri, Nov 17, 2023 at 01:12:40PM +0100, наб wrote: > If the scissors didn't give it away, this is a "proper" scissor-patch, > which uses headers from the mail (herein: From:) > and overrides under the cut line (herein: Subject:), > but you do need -c or --scissors to apply it: TIL, thanks. --

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-17 Thread Holger Levsen
hi, On Wed, Nov 15, 2023 at 10:42:25PM +0100, наб wrote: > -- >8 -- > Subject: [PATCH] jenkins.d.n: AddEncoding gzip .gz, such that the files aren't > re-compressed as gzip, which some clients can't deal with, and it's a waste > of time > > The current approach, under bookworm apache 2.4.57-2,

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-15 Thread Holger Levsen
hi, On Wed, Nov 15, 2023 at 03:23:59PM +0100, наб wrote: > > so good on linux and bad on windows? > This is what I kept coming back to, but refused to accept firefox would > do something this weird just based on the target. > > Forgot, of course, that both bad machines have ESET running, > and

Re: reproducible-builds.org is down

2023-11-15 Thread Holger Levsen
On Wed, Nov 15, 2023 at 02:14:31PM +0100, Julien Malka wrote: > To whom it may concern, it looks like the > https://reproducible-builds.org/ website is down. thanks, it's back now. -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org ⢿⡄⠘⠷⠚⠋⠀

Re: tests.reproducible-builds.org: build logs sent as gzip but no content-encoding, but only sometimes?

2023-11-15 Thread Holger Levsen
Hi, On Tue, Nov 14, 2023 at 11:05:02PM +0100, наб wrote: > Keep me in CC please. ack, done. > On opening > > https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/systemd-cron.html > I see garbage in the log view > (screenshot at

Re: Priority claim re bootstrapping

2023-11-13 Thread Holger Levsen
On Sun, Nov 12, 2023 at 04:28:42PM -0800, John Gilmore wrote: > I do think the topic is a suitable one for the Reproducible Builds > community to discuss. Politely conducted disputes should not be > dismissed as "nonsense" with a suggestion that the parties unsubscribe > from the list. Inflating

Re: GNU Mes 0.25 released

2023-11-12 Thread Holger Levsen
On Sun, Nov 12, 2023 at 09:00:55AM +0100, aho...@0w.se wrote: > I only react on it being *explicitly referred* in the announcements > on *this list* time and time again nobody forced you to subscribe to this list, nobody forces you to reply (I hope), unsubscribing is easy. > P.S. Calling

Re: GNU Mes 0.25 released

2023-11-11 Thread Holger Levsen
On Sat, Nov 11, 2023 at 09:16:38AM +0100, aho...@0w.se wrote: > On Sat, Nov 11, 2023 at 07:38:42AM +0100, Janneke Nieuwenhuizen wrote: > > We are happy to announce the release of GNU Mes 0.25! > Regrettably, the post includes a reference to [...] an, stop this *now*. Your repeated hostile

Re: Please review the draft for October's report

2023-11-11 Thread Holger Levsen
On Sat, Nov 11, 2023 at 11:02:47AM +0100, Pol Dellaiera wrote: > I just pushed a commit to actually publish it, hope it's ok ! I've seen those two commits pass by on IRC and the fact that they were not coming from Chris *and* included the words "report for November" (albeit in the commit

strip-nondeterminism usages (was Re: LibreOffice success story)

2023-11-08 Thread Holger Levsen
On Tue, Nov 07, 2023 at 07:28:37PM +0100, Pol Dellaiera wrote: > First, it is available in Nix: > https://search.nixos.org/packages?channel=23.05=perl536Packages.strip-nondeterminism=0=50=relevance=packages=nondeterminism > > A quick text search of `strip-nondeterminism` in `nixpkgs` showed that

Re: Reproducibility terminology/definitions

2023-11-08 Thread Holger Levsen
Hi Pol, On Wed, Nov 08, 2023 at 04:38:19PM +0100, Pol Dellaiera wrote: > I'm writing to express my enthusiasm for the discussions and initiatives that > took place during the meeting in Hamburg. Although I was regrettably unable > to attend, I have been closely following the outcomes and I'm

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 01:48:22PM +0100, Pol Dellaiera wrote: > [...] it was strip-determinism that I was talking about, sorry for the > confusion ! oh, that's interesting! are you using strip-nonderminism on all NixOS builds or only on some and if only on some, how do you opt-in (or -out)?

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 11:46:12AM +0100, Pol Dellaiera wrote: > @Holger: I'm also using Diffoscope with Nix/NixOS when something goes wrong, > so yeah that useful tool is used outside Debian! diffoscope is widely used for sure. I was however speaking about strip-nondeterminism. -- cheers,

Re: LibreOffice success story

2023-11-07 Thread Holger Levsen
On Tue, Nov 07, 2023 at 10:11:47AM +0100, Bernhard M. Wiedemann via rb-general wrote: > Now there were only mtimes left in .jar and .zip files that were easily > normalized with strip-nondeterminism. nice to see strip-nondeterminism is used outside Debian. > So today I hold in my hands the

Re: Website translation

2023-11-06 Thread Holger Levsen
Hi Julien, On Wed, Nov 01, 2023 at 05:16:01PM +0100, Julien Lepiller wrote: > I've learned at the rb meeting that the website could be translated. > Currently, the translation process looks like this: you clone the repo, > figure that you need to add your language to _config.yml (languages), >

Re: Blog post about a talk by Ken Thompson and the original Trusting Trust attack finally released

2023-10-26 Thread Holger Levsen
On Thu, Oct 26, 2023 at 11:36:32AM +0200, Marcel Fourné wrote: > Russ Cox posted https://research.swtch.com/nih and disseminates the original > Ken Thompson compiler backdoor in this, together with a link > https://research.swtch.com/v6/ to follow along in a simulator. > More of historical

Re: Registration open for the 2023 Reproducible Builds Summit in Hamburg, Germany

2023-10-16 Thread Holger Levsen
hi, it seems we didnt mail rb-general once more about this fantastic event taking place in two weeks tomorrow: https://reproducible-builds.org/events/hamburg2023/ read on for much more info On Mon, Aug 07, 2023 at 12:24:28AM +0200, Mattia Rizzolo wrote: > Hello everybody! > > Many of you

Re: Upcoming changes to Debian Linux kernel packages

2023-09-27 Thread Holger Levsen
On Mon, Sep 25, 2023 at 10:52:26AM +, Holger Levsen wrote: > FYI, "this will make the build unreproducible"... :/ fwiw, after reading the replies to this thread (on the debian kernel list, not here) I don't think this proposal will be implemented... -- cheers,

Upcoming changes to Debian Linux kernel packages

2023-09-25 Thread Holger Levsen
FYI, "this will make the build unreproducible"... :/ - Forwarded message from Bastian Blank - Date: Sun, 24 Sep 2023 15:01:47 +0200 From: Bastian Blank To: debian-ker...@lists.debian.org Cc: debian-b...@lists.debian.org, debian-rele...@lists.debian.org,

Re: Irregular status update about reproducible live-build ISO images

2023-07-04 Thread Holger Levsen
Hi Roland, On Sun, Jul 02, 2023 at 05:37:30PM +0200, Roland Clobus wrote: > here is the 18th update of the status for reproducible live-build ISO images many thanks for those 18 reports, i'm looking forward to the 19th! :) > Reproducible status: > * All major desktops build reproducibly with

Re: Introducing: Semantically reproducible builds

2023-06-02 Thread Holger Levsen
hi, I was busy with the Debian Hamburg Reunion 2023 last week and the first half of this, so I only started catching up on this thread yesterday... On Fri, Jun 02, 2023 at 10:46:16AM -0400, David A. Wheeler wrote: > Fair enough. The immediate issue is to reduce confusion. > > The OSSGadget

Re: GCC, binutils, and Debian's build-essential set

2023-05-12 Thread Holger Levsen
hi Vagrant, On Sun, Apr 30, 2023 at 09:54:58PM -0700, Vagrant Cascadian wrote: > I have been poking at gcc and binutils this month; they take a good long > while to build... [...] wheee, kudos & thanks for sharing your progress here! -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀ ⣾⠁⢠⠒⠀⣿⡁

Re: Build the ring rust crate with a stable build path

2023-05-08 Thread Holger Levsen
hi kpcyrd, On Mon, May 08, 2023 at 02:08:09AM +0200, kpcyrd wrote: > I was using github actions to compile my project but had trouble matching > the binary, even when[...] thanks for sharing your findings here! [...] > This can be run without root privileges if user namespaces are enabled. The

Re: Sphinx: localisation changes / reproducibility

2023-04-27 Thread Holger Levsen
On Wed, Apr 26, 2023 at 12:40:09PM -0700, Vagrant Cascadian wrote: > Yes, ideally SOURCE_DATE_EPOCH does not matter. It is a workaround to > embed a (hopefully meaningful) timestamp, when from a reproducible > builds perspective, ideally there would be no timestamp at all in the > resulting

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2023-04-24 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 24h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we

Re: Sphinx: localisation changes / reproducibility

2023-04-14 Thread Holger Levsen
Dear James, many thanks also from me for your work on this and sharing your findings here. I'm another happy sphinx user affected by those problems. :) somewhat related: i'm wondering whether distro-info should respect SOURCE_DATE_EPOCH: src:developers-reference builds different content

Re: Real World Reproducibility in Debian (was Re: Debian and reproducible-builds.org incoherence?)

2023-04-14 Thread Holger Levsen
On Thu, Apr 13, 2023 at 02:43:43PM -0700, Vagrant Cascadian wrote: > > Any progress on that front? What can be done to change things so that the > > packages people normally *use* are reproducible? the Debian packages people normally use *are* already reproducible (well, 80-90% of them, at

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2023-03-27 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 24h. As usual we meet at 15 UTC on irc.oftc.net, which for many this time is a different localtime than last month! The meeting is

Re: Reproducible builds stickers and flyers needed for Chemnitz Linux Days 2023

2023-03-05 Thread Holger Levsen
On Wed, Mar 01, 2023 at 11:54:34PM +0100, Mattia Rizzolo wrote: > TTBOMK, the only person with some sticker in Europe at this time is > Holger, and he should still have a few with him. no, I gave them all away at FOSDEM and the 'we <3 free software' event of fsfe... > Otherwise, it seems to me

Re: hiding data/code in Android APK embedded signatures

2023-02-02 Thread Holger Levsen
On Wed, Feb 01, 2023 at 08:40:46PM -0500, David A. Wheeler wrote: > Maybe call it "Ways to combine reproducible builds with signatures and other > metadata"? "other metadata" brings .buildinfo files^w^wSBOMs to my mind and indeed we have (at least) two concepts here, including the .buildinfo

Re: hiding data/code in Android APK embedded signatures

2023-02-01 Thread Holger Levsen
On Wed, Feb 01, 2023 at 12:53:24PM -0500, David A. Wheeler wrote: > I recommend that the reproducible-builds website have a short article > *specifically* recommending how signatures, OmniBOR data, & similar metadata > should be shared. [...] > Is there agreement on adding such a page? Yes, I'd

Re: Reproducible Builds Summit 2023 in Hamburg

2023-01-02 Thread Holger Levsen
hi, On Sun, Jan 01, 2023 at 12:58:06PM +, Chris Lamb wrote: > > with 2022 soon coming to an end, I'd like to announce the date and > > and the location of the next Reproducible Builds Summit in 2023! > > When: October 30th, November 1st-2nd 2023. > > What: Three days to continue the growth

Reproducible Builds Summit 2023 in Hamburg

2022-12-30 Thread Holger Levsen
Moin! :) with 2022 soon coming to an end, I'd like to announce the date and and the location of the next Reproducible Builds Summit in 2023! When: October 30th, November 1st-2nd 2023. What: Three days to continue the grow of the Reproducible Builds effort. As previously, the exact

Re: Journal article in reproducible builds

2022-12-08 Thread Holger Levsen
Hi Simon, On Thu, Dec 01, 2022 at 06:36:46PM +, Simon Butler wrote: > LGTM - everybody is there. One small issue, the closing parenthesis is > missing from the link > > There are 4 papers referenced in the bibliography that may also be of > interest. thanks you for providing merge requests

Re: F-Droid: overview of apps using reproducible builds

2022-12-08 Thread Holger Levsen
On Tue, Dec 06, 2022 at 02:14:11AM +0100, FC Stegerman wrote: > TL;DR: we added 11 new apps using reproducible builds in November, > making for a total of 31 RB apps in F-Droid as of December 1st [1]. > [1] https://gitlab.com/fdroid/fdroiddata/-/issues/2844 that's really cool, thank you for

Re: On android "secure messengers" and reproducible builds (or lack thereof)

2022-12-08 Thread Holger Levsen
On Tue, Dec 06, 2022 at 02:17:02AM +0100, FC Stegerman wrote: > I looked at how several android messenger apps claiming to have > reproducible builds actually verify that they do [1]. > TL;DR: It's quite possible these messengers actually have reproducible > builds, but the verification scripts

Re: Journal article in reproducible builds

2022-11-30 Thread Holger Levsen
Hi Simon, On Wed, Nov 30, 2022 at 07:47:46PM +, Simon Butler wrote: > >> I'm pleased to announce that Software Quality Journal have published a > >> article on reproducible builds. The article is open access and is at > >> https://link.springer.com/article/10.1007/s11219-022-09607-z > > wow,

Re: Journal article in reproducible builds

2022-11-30 Thread Holger Levsen
Hi Simon, On Tue, Nov 29, 2022 at 07:36:58AM +, Simon Butler via rb-general wrote: > I'm pleased to announce that Software Quality Journal have published a > article on reproducible builds. The article is open access and is at > https://link.springer.com/article/10.1007/s11219-022-09607-z

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2022-11-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit less than 22h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we

Re: Debian NMU Sprints in December, Thursdays 17:00 UTC!

2022-11-21 Thread Holger Levsen
hi Vagrant, On Sun, Nov 20, 2022 at 04:28:10PM -0800, Vagrant Cascadian wrote: > Since the previous sprints were fun and productive, I am planning on > doing NMU sprints every Thursday in December (1st, 8th, 15th, 22nd, > 29th). We are planning on meeting on irc.oftc.net in the >

#r-b irc meeting, Tuesday, tomorrow, 15 UTC

2022-09-26 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow in most timezones, in a bit more than 27h. As usual we meet at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, as of course we

#r-b irc meeting, Tuesday, *today*, 15 UTC

2022-08-30 Thread Holger Levsen
hi, this is a very late reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is TODAY, in a bit more than 3h. As usual we meet at 15 UTC on irc.oftc.net. I'm sorry for the late reminder and hope you already had it in your calendar anyway! ;) The

Re: Reproducible builds stickers and flyers needed for FrOSCon 2022

2022-08-05 Thread Holger Levsen
On Fri, Aug 05, 2022 at 08:55:42AM +0200, Fabian Keil wrote: > FrOSCon 2022 [0] is coming up and I registered a booth > for ElectroBSD [1] (and Privoxy [2] and zogftw [3]). yay! > I usually also offer project-related materials and am > thus currently looking for reproducible builds stickers >

#r-b irc meeting, Tuesday, *today*, 15 UTC

2022-07-26 Thread Holger Levsen
hi, this is a very late reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is TODAY, in 4h. As usual we meet at 15 UTC on irc.oftc.net. I'm sorry for the late reminder and hope you already had it in your calendar anyway! ;) The meeting is supposed

Re: translations for the r-b.o website

2022-06-09 Thread Holger Levsen
On Wed, Jun 08, 2022 at 07:30:28PM +0200, Mattia Rizzolo wrote: > I hoped to find some settings on how to prevent that in the weblate's > project settings. I would have liked something that makes weblate only > propose merging languages that are… I don't know… probably 75% or more > translated.

#r-b irc meeting, Tuesday, May 31st, 15 UTC

2022-05-30 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 31st of May. As usual we meet at 15 UTC on irc.oftc.net, which is in slightly less than 23h from now ;) The meeting is supposed to last between 1-2h, maybe rather an

Re: JDK 19+21 early-access build is reproducible

2022-05-12 Thread Holger Levsen
Hi John, On Fri, May 06, 2022 at 01:48:20PM -0700, John Neffenger wrote: > Starting yesterday, for the first time, the JDK can create reproducible > builds of the JDK! [...] > That also means there's nothing in the JDK that's holding back any Java > application from having reproducible builds.

Re: #r-b irc meeting, Tuesday, April 26th, 15 UTC

2022-04-25 Thread Holger Levsen
On Mon, Apr 25, 2022 at 03:12:56PM +, Holger Levsen wrote: > this is a reminder for our next IRC meeting on #reproducible-builds on the > last Tuesday of the month, which is tomorrow, the 25th of April. As usual > we meet at 15 UTC on irc.oftc.net, which is in slightly less than 24h f

#r-b irc meeting, Tuesday, April 25th, 15 UTC

2022-04-25 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 25th of April. As usual we meet at 15 UTC on irc.oftc.net, which is in slightly less than 24h from now ;) The meeting is supposed to last between 1-2h, maybe rather an

Re: Reproducible Central hits the 500 fully reproduced builds of upstream projects releases for the JVM

2022-04-05 Thread Holger Levsen
On Tue, Mar 29, 2022 at 08:11:57AM +0200, Hervé Boutemy wrote: > > to bring things into perspective, when you say "500 fully reproduced builds > > of upstream projects releases", out of how many upstream projects in total? > > 550? 5000? 5? :) > I don't have the statistics on releases

#r-b irc meeting, Tuesday, March 29th, 15 UTC

2022-03-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, which is tomorrow, the 29th of March. As usual we meet at 15 UTC on irc.oftc.net, which is in less than 23h from now ;) (mind the DST changes!) The meeting is supposed to last between 1-2h,

Re: Reproducible Central hits the 500 fully reproduced builds of upstream projects releases for the JVM

2022-03-28 Thread Holger Levsen
Hi Hervé, On Sun, Mar 27, 2022 at 08:27:11AM +0200, Hervé Boutemy wrote: > I just wanted to share how the number of projects that produce reproducible > releases for the JVM is growing, year after year. > > This forced me to rewrite the reporting system, that did not work any more in > one

Re: rb meetup at openSUSE conference in Nuremberg

2022-03-12 Thread Holger Levsen
Hi Bernhard, On Thu, Mar 10, 2022 at 04:23:06AM +0100, Bernhard M. Wiedemann wrote: > I submitted a rb workshop session proposal for > https://events.opensuse.org/conferences/oSC22 > > Even if that is not accepted, this conf would be an opportunity for a > small meetup of rb people. coolio! >

Re: Thinking of our next summit this year

2022-03-04 Thread Holger Levsen
On Wed, Mar 02, 2022 at 09:08:39AM +0100, Hans-Christoph Steiner wrote: > I live in Vienna, which has lots of good train connections all over Europe, > but it is more expensive to fly to. I'm happy to help the organizers if its > in Vienna. Fr example, I can recommend this hotel, which is a

Re: Thinking of our next summit this year

2022-03-03 Thread Holger Levsen
hey, On Thu, Mar 03, 2022 at 06:25:04PM -, Chris Lamb wrote: > Mattia, I could see myself travelling this September for an RB summit. > Like others have mentioned, I would prefer somewhere Europe for a > variety of reasons. same for me. and yay, already looking forward to that! :) --

#r-b irc meeting, Tuesday, February 22nd, 15 UTC

2022-02-19 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, so 22nd of February, at 15 UTC on irc.oftc.net, which is in roughly 62h from now ;) The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just

#r-b irc meeting, Tuesday, January 25th, 15 UTC

2022-01-22 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month, so 25th of January, at 15 UTC on irc.oftc.net, which is in roughly 70h from now. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after

Re: #r-b irc meeting, Tuesday, October 26th, 15 UTC

2021-10-26 Thread Holger Levsen
hi, this is just a quick reminder that this is today, in 7.5h! On Thu, Oct 21, 2021 at 04:32:45PM +, Holger Levsen wrote: > this is a reminder for our next IRC meeting on #reproducible-builds on the > last Tuesday of the month (so 26th of October) at 15 UTC on irc.oftc.net. > Thi

#r-b irc meeting, Tuesday, October 26th, 15 UTC

2021-10-21 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 26th of October) at 15 UTC on irc.oftc.net. This is five days from now. :) The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after

Re: Please review the draft for September's report

2021-10-04 Thread Holger Levsen
On Mon, Oct 04, 2021 at 10:54:19PM +, Holger Levsen wrote: > On Mon, Oct 04, 2021 at 10:34:03PM -, Chris Lamb wrote: > > Sorry for the slight delay; been under the weather over the weekend. Anyway, > > please review the draft for September's Reproducible Builds repo

Re: Please review the draft for September's report

2021-10-04 Thread Holger Levsen
hi, On Mon, Oct 04, 2021 at 10:34:03PM -, Chris Lamb wrote: > Sorry for the slight delay; been under the weather over the weekend. Anyway, > please review the draft for September's Reproducible Builds report: > https://reproducible-builds.org/reports/2021-09/?draft jenkins is also not

Re: stage0-posix release

2021-10-04 Thread Holger Levsen
On Sun, Oct 03, 2021 at 09:38:50PM +, jerem...@pdp10.guru wrote: > Thanks to the incredible efforts of Andrius Štikonas over the last 4 > months, today we announce the release of version 1.4 of stage0-posix. [...] > As always all supported architectures are able to cross-verify all other >

#r-b irc meeting, tomorrow, Tuesday, 15 UTC

2021-09-27 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 28th of September) at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42m on one topic we move on

FYI: Debian hackmeeting in Hamburg open for R-B folks

2021-09-16 Thread Holger Levsen
hi, FYI: from Sep 26 til Oct 1 there will be a small Debian hackmeeting taking place in Hamburg, Germany, where we would be delighted to welcome people working on Reproducible Builds in general! (IOW: this not limited to Debian) If you are located somewhat nearby, please check out

Re: Recoding the configuration for live-build images

2021-09-06 Thread Holger Levsen
Hi Janneke, On Mon, Sep 06, 2021 at 12:41:49PM +0200, Jan Nieuwenhuizen wrote: > I'm thinking about the binary seed that's used to produce a new release, > as far as I understand it, Debian's binary seed is "build-essential". > > I imagine that for a new Debian binary release, e.g., Bullseye,

Re: Recoding the configuration for live-build images

2021-09-04 Thread Holger Levsen
On Sat, Sep 04, 2021 at 09:18:16AM +0200, Jan Nieuwenhuizen wrote: > [...] It would be amazing to get > a GNU Mes based reduced binary seed bootstrap into Debian. what does or would that mean? Debian is a binary distribution and sadly Debian is only bootstrapped once per port. (Not trying to

#r-b irc meeting, tuesday in 4 days, 15 UTC

2021-08-28 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 31st of August) at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42m on one topic we move on

Reproducible Buster, Bullseye & Bookworm - where we come from and where we are going

2021-08-23 Thread Holger Levsen
& Bookworm - where we come from and where we are going Speaker: Holger Levsen Language: English Track: Introduction to Free Software & Debian Type: Long talk (45 minutes) Room: Talks 1 Time: Aug 24 (Tue): 19:00 UTC Duration: 0:45 In this talk Holger Levsen will give an update on Reproducibl

Re: i-probably-didnt-backdoor-this: Reproducible Builds for upstreams

2021-08-20 Thread Holger Levsen
hi kpcyrd, On Thu, Aug 19, 2021 at 11:16:29PM +, kpcyrd wrote: > I uploaded a github repo that distributes a Hello World in various > formats (ELF binary, Docker image, 3rd party(!) Arch Linux package) and > documented every file and command needed to reproduce the artifacts > bit-for-bit: >

Re: Help us map the reproducible builds ecosystem

2021-08-11 Thread Holger Levsen
Hi Richard, thanks for your feedback! On Thu, Aug 05, 2021 at 04:46:27PM +0100, Richard Purdie wrote: > For yocto, we can generate packages and we do run tests of our default config  > on those: > > https://www.yoctoproject.org/reproducible-build-results/ > > so 36 exclusions (known issues,

Re: [Git][reproducible-builds/reproducible-website][master] Migrate 'history' from the Debian wiki.

2021-08-10 Thread Holger Levsen
On Mon, Aug 09, 2021 at 08:53:48PM +, Holger Levsen wrote: > And then, those lists are formatted incorrectly on > https://reproducible-builds.org/docs/history/ > and I fail to find a fix right this. This affects not only the list of > contributors but also lists, like the

Re: [Git][reproducible-builds/reproducible-website][master] Migrate 'history' from the Debian wiki.

2021-08-09 Thread Holger Levsen
Hi, On Sat, Jul 31, 2021 at 01:21:48PM +, Chris Lamb (@lamby) wrote: > Chris Lamb pushed to branch master at Reproducible Builds / > reproducible-website > > > Commits: > 1b5838fe by Chris Lamb at 2021-07-31T14:21:01+01:00 > Migrate history from the Debian wiki. yay, thank you Chris for

Re: Help us map the reproducible builds ecosystem

2021-08-05 Thread Holger Levsen
On Thu, Aug 05, 2021 at 02:51:17PM +0100, Chris Lamb wrote: > There is definitely an argument to be as complete as possible, but I > think the best thing from the perspective of the ecosystem map is to > be as consistent as possible across similar entities. I'm not sure there is so much

Re: Help us map the reproducible builds ecosystem

2021-08-02 Thread Holger Levsen
On Mon, Aug 02, 2021 at 11:07:21AM +0100, Chris Lamb wrote: > Thanks to everyone who contributed to this so far. I've spent a little > time this morning tidying up, merging and elaborating all of your > input — it is looking a lot more useful and complete now. > > However, can everyone have

Re: #r-b irc meeting, this coming Tuesday, 15 UTC

2021-07-22 Thread Holger Levsen
Hi, somehow I thought it was August already... which of course it isn't. Sorry for the confusion. So, this is correct: this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 27th of July) at 15 UTC on irc.oftc.net. The meeting is supposed to

#r-b irc meeting, next tuesday, 15 UTC

2021-07-22 Thread Holger Levsen
hi, this is a reminder for our next IRC meeting on #reproducible-builds on the last Tuesday of the month (so 31st of August) at 15 UTC on irc.oftc.net. The meeting is supposed to last between 1-2h, maybe rather an hour, though we have lots of time (just after 23-42m on one topic we move on

Re: Status update about reproducible live-build ISO images in Jenkins

2021-06-29 Thread Holger Levsen
Hi Roland, many thanks for your work and for keeping this list informed! I'll just briefly comment on a very few aspects, I've made most comments on irc allready. On Sun, Jun 27, 2021 at 05:03:09PM +0200, Roland Clobus wrote: > ** Question: could/should Jenkins use snapshot.d.o?

agenda for the IRC meeting tomorrow

2021-06-28 Thread Holger Levsen
hi, apologies for the very late reminder, but we'll be having an IRC meeting tomorrow (June 29th) at 15 UTC on #reproducible-builds on irc.oftc.net! I've just put a preliminary agenda up on https://pad.riseup.net/p/rb-irc-meetings-keep It currently reads: Reproducible-builds.org general IRC

Re: Reproducibility and microcode updates

2021-06-22 Thread Holger Levsen
Hi Dan, On Tue, Jun 22, 2021 at 11:50:37AM +0100, Dan Shearer wrote: > Here at LumoSQL we do repeated runs testing SQLite of various versions > and configurations, storing the results in an SQLite database. > > Here is an example of the kind of variation that justifies what some > have called

next irc meeting, tuesday, 29th of june, 15 UTC (Re: reviving regular IRC meetings)

2021-06-18 Thread Holger Levsen
hi, On Thu, Jun 17, 2021 at 01:13:20PM +, Holger Levsen wrote: > On Thu, Jun 10, 2021 at 08:26:12AM +0000, Holger Levsen wrote: > > Very seriously, we would like to revive our regular IRC meetings again, to > > discuss events and issues in the R-B world, to announce n

Re: reviving regular IRC meetings

2021-06-17 Thread Holger Levsen
hi, On Thu, Jun 10, 2021 at 08:26:12AM +, Holger Levsen wrote: > Very seriously, we would like to revive our regular IRC meetings again, to > discuss events and issues in the R-B world, to announce new shiny things > (or new broken stuff), to exchange skills, to ask for help and o

reviving regular IRC meetings

2021-06-10 Thread Holger Levsen
hi, Covid is over so we can meet via IRC again. Or no, wait. Covid isn't over, so we can still and again meet via IRC! :) Very seriously, we would like to revive our regular IRC meetings again, to discuss events and issues in the R-B world, to announce new shiny things (or new broken stuff), to

Re: [PATCH] Explain how to contribute to reproducible builds in Guix.

2021-05-26 Thread Holger Levsen
Hi Ludo, On Wed, May 26, 2021 at 11:49:45AM +0200, Ludovic Courtès wrote: > I thought it could be useful to have pointers to help out on reproducible > builds in Guix, so here we go. Let me know what you think! yay! already commited by Arnout it seems! \o/ -- cheers, Holger ⢀⣴⠾⠻⢶⣦⠀

Re: How can I contribute? -> broken URL fixed

2021-05-24 Thread Holger Levsen
On Sat, May 22, 2021 at 01:00:35PM +0200, Roland Clobus wrote: > I've fixed the website, you should now be able to read the > Debian-specific instructions again. thank you, Roland! And Felix for reporting here too! That said, the page about contributing to Debian is a bit outdated and the other

Re: Progress on reproducible Debian Live images

2021-05-07 Thread Holger Levsen
Hi Roland, On Wed, Feb 10, 2021 at 11:13:03PM +0100, Roland Clobus wrote: > I've created a Wiki page that details my progress in creating > reproducible live images, since I wrote to these lists on 2020-11-11. > https://wiki.debian.org/ReproducibleInstalls/LiveImages I'm sorry for the very late

Re: verifying reproducible APKs: apksigcopier

2021-03-29 Thread Holger Levsen
Hi Felix, On Mon, Mar 29, 2021 at 03:02:33AM +0200, Felix C. Stegerman wrote: > The F-Droid reproducible builds & verification effort recently led [1] > to the development of apksigcopier [2], a tool to copy APK signatures > from a signed APK to an unsigned one. nice, that seems very useful! :)

Re: where do I find artifacts

2021-02-22 Thread Holger Levsen
Hi Paolo, On Sun, Feb 21, 2021 at 07:05:52PM +0100, Paolo Greppi wrote: > Oops now I remember, I used to get those from salsa reprotest job. > I can get what I need from here for example: > https://salsa.debian.org/debian/doxygen/-/jobs/1325830 for those you need to talk to the salsa ci folks,

Re: Outreachy Summer 2021

2021-02-17 Thread Holger Levsen
hi, On Thu, Jan 21, 2021 at 07:09:03AM +0100, Mattia Rizzolo wrote: > We are pondering whether to do a round of Outreachy this year. > Contrary to last years' we are going to throw the topic much earlier, > and see if > some good proposal for that round. > > Example for the past rounds would be:

auto classification of issues found (was Re: Outreachy Summer 2021)

2021-02-16 Thread Holger Levsen
hi Chris, On Tue, Feb 16, 2021 at 12:15:30PM +, Chris Lamb wrote: [ bin/auto-classify script ] > Pushed to the reproducible-notes.git repo. :) nice & clear! Could you please add some comment to it, on how and where to run it? Do you think we could just run it on jenkins again every

Re: Outreachy Summer 2021

2021-02-01 Thread Holger Levsen
Hi Chris, On Mon, Feb 01, 2021 at 05:58:04PM -, Chris Lamb wrote: > > a diffoscope branch maybe, or upload to experimental? > Given that it's just a single file, it's likely to change > significantly and its value to others is as-yet untested, I was > thinking of simply putting it with the

Re: How could we accelerate *deployment* of verified reproducible builds?

2021-02-01 Thread Holger Levsen
On Mon, Feb 01, 2021 at 11:34:39PM +0800, Justin Cappos wrote: > Great question. I hope if you don't mind that I reply on list. > > in-toto provides a way to know what / how many keys should be trusted for > the build servers (and rotate them / replace them securely if needed, for > example if a

  1   2   3   >