Groups > linux.debian.bugs.dist > #842849

Bug#844431: Revised patch: seeking seconds

From	Holger Levsen <holger@layer-acht.org>
Newsgroups	linux.debian.bugs.dist, linux.debian.policy
Subject	Bug#844431: Revised patch: seeking seconds
Date	2017-08-12 21:00 +0200
Message-ID	<udJND-4BC-1@gated-at.bofh.it> (permalink)
References	<sDPS9-7Wd-3@gated-at.bofh.it> <udJkC-4qi-11@gated-at.bofh.it> <sDPS9-7Wd-3@gated-at.bofh.it> <udJkC-4qi-11@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sat, Aug 12, 2017 at 11:23:14AM -0700, Sean Whitton wrote:
> I am seeking formal seconds for this patch, from any DD.
> 
> In particular:
> 
> - for now, we only require reproducibility when the set of environment
>   variable values set is exactly the same
> 
>   This is because
> 
>   - the reproducible builds team aren't yet totally clear on the
>     variables that they think may be allowed to vary
> 
>   - we should wait until .buildinfo is properly documented in policy,
>     and then we can refer to that file
> 
> - we don't require reproducibility when build paths vary
> 
>   This is because
> 
>   - since there is not a consensus on whether we should require this,
>     and there is strong consensus on the requirement of reproducibility
>     if the path does /not/ vary, this issue should not block this change.
>     We should open a separate bug against debian-policy
> 
> diff --git a/policy/ch-source.rst b/policy/ch-source.rst
> index 127b125..cc4b020 100644
> --- a/policy/ch-source.rst
> +++ b/policy/ch-source.rst
> @@ -661,6 +661,22 @@ particularly complex or unintuitive source layout or build system (for
>  example, a package that builds the same source multiple times to
>  generate different binary packages).
>  
> +Reproducibility
> +---------------
> +
> +Packages should build reproducibly, which for the purposes of this
> +document [#]_ means that given
> +
> +- a version of a source package unpacked at a given path;
> +- a set of versions of installed build dependencies;
> +- a set of environment variable values; and
> +- a build architecture,
> +
> +repeatedly building the source package on any machine of the same
> +architecture with those versions of the build dependencies installed
> +and exactly those environment variable values set will produce
> +bit-for-bit identical binary packages.
> +
>  .. [#]
>     See the file ``upgrading-checklist`` for information about policy
>     which has changed between different versions of this document.
> @@ -790,3 +806,7 @@ generate different binary packages).
>     often creates either static linking or shared library conflicts, and,
>     most importantly, increases the difficulty of handling security
>     vulnerabilities in the duplicated code.
> +
> +.. [#]
> +   This is Debian's precisification of the `reproducible-builds.org
> +   definition <https://reproducible-builds.org/docs/definition/>`_.

very happily seconded, many thanks to everyone who has contributed to this bug
directly or "indirectly" (I'm thinking specifically about Lunar here).


-- 
cheers,
	Holger (who watched http://meetings-archive.debian.net/pub/debian-meetings/2017/debconf17/reproducible-builds-status-update.vp8.webm today and was equally happy when seeing the whole audience agreeing this should be in policy - and the applause after Russ's closing statement was also very very nice…!)

Thread

Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-12 20:30 +0200
  Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-12 21:00 +0200
  Bug#844431: Revised patch: seeking seconds Ondrej Novy <novy@ondrej.org> - 2017-08-12 21:00 +0200
  Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 21:30 +0200
  Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-12 22:10 +0200
    Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 22:30 +0200
      Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-12 22:40 +0200
  Bug#844431: Revised patch: seeking seconds Johannes Schauer <josch@debian.org> - 2017-08-12 22:50 +0200
    Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-12 23:10 +0200
      Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-13 00:40 +0200
        Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-13 01:20 +0200
          Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-13 14:30 +0200
        Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-13 15:40 +0200
        Bug#844431: Revised patch: seeking seconds gregor herrmann <gregoa@debian.org> - 2017-08-13 17:00 +0200
        Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 20:10 +0200
          Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-15 22:10 +0200
        Bug#844431: Revised patch: Oppose Adrian Bunk <bunk@stusta.de> - 2017-08-16 17:40 +0200
          Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 18:40 +0200
            Bug#844431: Revised patch: Oppose Adrian Bunk <bunk@debian.org> - 2017-08-16 20:30 +0200
              Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 20:40 +0200
            Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-16 20:50 +0200
              Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-16 21:20 +0200
                Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-16 23:50 +0200
                Bug#844431: Revised patch: Oppose Russ Allbery <rra@debian.org> - 2017-08-17 00:10 +0200
                Bug#844431: Revised patch: Oppose Ximin Luo <infinity0@debian.org> - 2017-08-21 16:30 +0200
              Bug#844431: Revised patch: Oppose Don Armstrong <don@debian.org> - 2017-08-16 21:40 +0200
                Bug#844431: Revised patch: Oppose Bill Allombert <ballombe@debian.org> - 2017-08-17 00:00 +0200
  Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 20:00 +0200
    Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 21:00 +0200
      Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 21:20 +0200
        Bug#844431: Revised patch: seeking seconds Holger Levsen <holger@layer-acht.org> - 2017-08-15 22:00 +0200
          Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-15 23:20 +0200
            Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 18:40 +0200
        Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 22:10 +0200
          Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-15 22:20 +0200
          Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-15 23:10 +0200
            Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-15 23:40 +0200
            Bug#844431: Revised patch: seeking seconds Sean Whitton <spwhitton@spwhitton.name> - 2017-08-16 01:10 +0200
              Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 07:40 +0200
            Bug#844431: Revised patch: seeking seconds Mattia Rizzolo <mattia@debian.org> - 2017-08-16 12:30 +0200
              Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 13:30 +0200
                Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 13:50 +0200
                Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 17:10 +0200
                Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 17:50 +0200
                Bug#844431: Revised patch: seeking seconds Adrian Bunk <bunk@debian.org> - 2017-08-16 18:20 +0200
                Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 18:40 +0200
                Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 18:50 +0200
                Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 20:30 +0200
          Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-15 23:40 +0200
            Bug#844431: Revised patch: seeking seconds Ximin Luo <infinity0@debian.org> - 2017-08-16 13:00 +0200
            Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 18:40 +0200
              Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-16 20:00 +0200
                Bug#844431: Revised patch: seeking seconds Russ Allbery <rra@debian.org> - 2017-08-16 20:00 +0200
                Bug#844431: Revised patch: seeking seconds Chris Lamb <lamby@debian.org> - 2017-08-17 02:50 +0200
                Bug#844431: Revised patch: seeking seconds Bill Allombert <ballombe@debian.org> - 2017-08-20 21:30 +0200
                Bug#844431: Revised patch: seeking seconds Chris Lamb <lamby@debian.org> - 2017-08-21 02:40 +0200
      Bug#872288: debian-policy: document .buildinfo files Holger Levsen <holger@layer-acht.org> - 2017-08-15 21:50 +0200

csiph-web