Reproducible Builds: Weekly report #140

Merry Christmas! Here’s what happened in the Reproducible Builds effort between Sunday December 24 and Saturday December 30 2017:

Media coverage

Reproducible builds were mentioned in several 34C3 talks:

• NERF and Heads
• Hardening Open Source Development
• Antipatterns und Missverständnisse in der Softwareentwicklung

Development and fixes in key packages

• Chris Lamb opened and fixed #885327 in Lintian to warn about packages that ship (non-reproducible) .doctree files»

Packages reviewed and fixed, and bugs filed

• Chris Lamb:
  • #885326 filed against flask-peewee.
  • #885408 filed against multipath-tools.
  • #885658 filed against python-h2.
  • #885695 filed against golang-github-tjfoc-gmsm.
  • #885853 filed against sasview.
  • #885873 filed against cypari2 (sent upstream)
• Jelle van der Waa:
  • libical - hash table ordering

Reviews of unreproducible packages

12 package reviews have been added, 23 have been updated and 45 have been removed in this week, adding to our knowledge about identified issues.

diffoscope development

Versions 89 and 90 were uploaded to unstable by Mattia Rizzolo. They included contributions already covered by posts of the previous weeks as well as new ones from:

• Juliana Oliveira:
  • Skip tests that depends on xz
  • Fix LLVM >= 5.0 testcase
• Mattia Rizzolo:
  • Skip Android tests involving abootimg on BE archs (see #725729)
  • Remove .cache when cleaning Debian packaging
  • d/rules: revert PYTHONPATH mangling, unneeded
  • Bump Debhelper “compat” level to 11.
  • Set Rules-Requires-Root: no in debian/control

jenkins.debian.net development

• Mattia Rizzolo (scheduler changes):
  • Rename -d/--noisy to --notify-on-start
  • Ignore unknown_args
  • Convert the distro positional argument into a --distro flag instead

Misc.

This week’s edition was written by Bernhard M. Wiedemann, Chris Lamb and Jelle van der Waa & reviewed by a bunch of Reproducible Builds folks on IRC & the mailing lists.