From 0460224ec819c8e9321fdf39a88e9059dc4b1e02 Mon Sep 17 00:00:00 2001 From: Christopher Baines Date: Sat, 15 Dec 2018 11:54:51 +0000 Subject: Add Reproducible Builds 2018 post --- posts/reproducible_builds_2018.mdwn | 113 +++++++++++++++++++++ .../IMG_20181211_133513.jpg | 1 + .../IMG_20181212_232630.jpg | 1 + .../IMG_20181212_232644.jpg | 1 + posts/reproducible_builds_2018/P1020108.JPG | 1 + posts/reproducible_builds_2018/P1020111.JPG | 1 + posts/reproducible_builds_2018/P1020123.JPG | 1 + .../groupphoto_rws4_paris_2018_small.png | 1 + posts/reproducible_builds_2018/guix.svg | 1 + posts/reproducible_builds_2018/rb.svg | 1 + 10 files changed, 122 insertions(+) create mode 100644 posts/reproducible_builds_2018.mdwn create mode 120000 posts/reproducible_builds_2018/IMG_20181211_133513.jpg create mode 120000 posts/reproducible_builds_2018/IMG_20181212_232630.jpg create mode 120000 posts/reproducible_builds_2018/IMG_20181212_232644.jpg create mode 120000 posts/reproducible_builds_2018/P1020108.JPG create mode 120000 posts/reproducible_builds_2018/P1020111.JPG create mode 120000 posts/reproducible_builds_2018/P1020123.JPG create mode 120000 posts/reproducible_builds_2018/groupphoto_rws4_paris_2018_small.png create mode 120000 posts/reproducible_builds_2018/guix.svg create mode 120000 posts/reproducible_builds_2018/rb.svg diff --git a/posts/reproducible_builds_2018.mdwn b/posts/reproducible_builds_2018.mdwn new file mode 100644 index 0000000..d218553 --- /dev/null +++ b/posts/reproducible_builds_2018.mdwn @@ -0,0 +1,113 @@ +[[!meta title="Reproducible Builds Workshop: Paris 2018" ]] + +
+ [[!img posts/reproducible_builds_2018/rb.svg size=400x ]] +
+ +I travelled to Paris over the last week for the [[Reproducible Builds +workshop|https://reproducible-builds.org/events/paris2018/]] there, as +well as a [[GNU Guix +meetup|https://libreplanet.org/wiki/Group:Guix/ParisGathering2018]] on +the day before. All in all, it's been awesome, if a little tiring. + +It was reassuring to spend some time with others who care enough about +free software and related things to take a number of days out to come +together and work on reproducible builds and related topics. + +
+
+ [[!img posts/reproducible_builds_2018/P1020108.JPG size=400x ]] +
+
+ [[!img posts/reproducible_builds_2018/P1020111.JPG size=400x ]] +
+
+ +# Monday, Guix meeting at Inria + +
+ [[!img posts/reproducible_builds_2018/guix.svg size=400x ]] +
+ +I'm very thankful to Ludovic and Inria to organising and hosting the +event. + +I've been looking at code review and automated testing in the last few +weeks, and I think the discussions around that did move things +forward. + +The issue of substitute delivery for GNU Guix was also discussed a few +times, and at the Reproducible Builds summit, the presence of some +people who were very knowledgeable about IPFS (the Inter Planetary +File System) at the summit were very helpful. + +# Tuesday, Start of the Reproducible Builds workshop + +The morning was filled with some knowledge sharing sessions, which was +great for me, as this was my first reproducible builds summit. + +I know now a little more about the Reproducible Builds organisations +infrastructure, and I discussed the technical side of getting data +regarding the reproducible of Guix packages in to the Reproducible +Builds database. + +The agenda and notes for the event are [[available +here|https://pad.riseup.net/p/reproduciblebuilds4-agenda]]. + +
+
+ [[!img posts/reproducible_builds_2018/IMG_20181211_133513.jpg size=450x ]] +
+
+ [[!img posts/reproducible_builds_2018/P1020123.JPG size=450x ]] +
+
+ +# Wednesday + +In the morning, I talked to others in the cross distribution session +on Guix things, issues with upstreams and various [[other +topics|https://pad.riseup.net/p/reproduciblebuilds4-crossdistro]]. + +I was already thinking about a patch I made to Ruby, and used in +govuk-guix to make downloading Rubygems more reproducible, however I +was hesitant to push it upstream as I wasn't sure it was more +generally useful. I ended up talking about this in the skill share +session, and found someone else who was interested in Ruby +reproducible builds. I've now pushed that [[patch up for +review|https://github.com/rubygems/rubygems/pull/2524]]. + +
+
+ [[!img posts/reproducible_builds_2018/IMG_20181212_232630.jpg size=450x ]] +
+
+ [[!img posts/reproducible_builds_2018/IMG_20181212_232644.jpg size=450x ]] +
+
+ +# Thursday + +I went along to a session on rebuilders, mostly to try and figure out +the relevance to Guix. I have a better understanding of this +now. Guix, and some other projects (Nix, maybe F-Droid, ...) already +have some of the pieces of this just due to how they normally +work. For Guix, the technical side of a "rebuilder" is just a standard +"build farm", ``ci.guix.info``, or ``hydra.gnu.org`` for example. + +The client verification with rebuilders is also mostly in place +already for Guix. Whereas in Debian, you need to use the buildinfo +files to check with rebuilders about the results they got, the narinfo +files Guix uses when trying to find substitutes already fulfil this +purpose, just because of how Guix works. + +
+
+ [[!img posts/reproducible_builds_2018/groupphoto_rws4_paris_2018_small.png ]] +
+
+ +I'm looking forward to all of the things that these events have +boosted. The next month or two is going to be very interesting, with +things like FOSDEM coming up at the start of February, and Guix maybe +releasing a 1.0 around then. diff --git a/posts/reproducible_builds_2018/IMG_20181211_133513.jpg b/posts/reproducible_builds_2018/IMG_20181211_133513.jpg new file mode 120000 index 0000000..db25d50 --- /dev/null +++ b/posts/reproducible_builds_2018/IMG_20181211_133513.jpg @@ -0,0 +1 @@ +../../.git/annex/objects/7w/ZP/SHA256E-s5482840--84699a215e19bfa46d750dc7d07e4768419e9635e87b5b0ab3fbe1c316a92111.jpg/SHA256E-s5482840--84699a215e19bfa46d750dc7d07e4768419e9635e87b5b0ab3fbe1c316a92111.jpg \ No newline at end of file diff --git a/posts/reproducible_builds_2018/IMG_20181212_232630.jpg b/posts/reproducible_builds_2018/IMG_20181212_232630.jpg new file mode 120000 index 0000000..61dff2e --- /dev/null +++ b/posts/reproducible_builds_2018/IMG_20181212_232630.jpg @@ -0,0 +1 @@ +../../.git/annex/objects/zx/wk/SHA256E-s7077476--760e3550d0d1c5ade932549fd9820d127f8a2dde35becf9e67589a583192fd68.jpg/SHA256E-s7077476--760e3550d0d1c5ade932549fd9820d127f8a2dde35becf9e67589a583192fd68.jpg \ No newline at end of file diff --git a/posts/reproducible_builds_2018/IMG_20181212_232644.jpg b/posts/reproducible_builds_2018/IMG_20181212_232644.jpg new file mode 120000 index 0000000..4098047 --- /dev/null +++ b/posts/reproducible_builds_2018/IMG_20181212_232644.jpg @@ -0,0 +1 @@ +../../.git/annex/objects/6P/zQ/SHA256E-s4583330--e5bf4ee40fd8f33a10e4390f16c541af5b6cf16263a83bbc65c42502190a88d2.jpg/SHA256E-s4583330--e5bf4ee40fd8f33a10e4390f16c541af5b6cf16263a83bbc65c42502190a88d2.jpg \ No newline at end of file diff --git a/posts/reproducible_builds_2018/P1020108.JPG b/posts/reproducible_builds_2018/P1020108.JPG new file mode 120000 index 0000000..9bfd3d9 --- /dev/null +++ b/posts/reproducible_builds_2018/P1020108.JPG @@ -0,0 +1 @@ +../../.git/annex/objects/JZ/6V/SHA256E-s5217828--cc57e9df7ab823292fa638818b6f240f3bef4f162d0a809a090eac0532e92799.JPG/SHA256E-s5217828--cc57e9df7ab823292fa638818b6f240f3bef4f162d0a809a090eac0532e92799.JPG \ No newline at end of file diff --git a/posts/reproducible_builds_2018/P1020111.JPG b/posts/reproducible_builds_2018/P1020111.JPG new file mode 120000 index 0000000..f64912b --- /dev/null +++ b/posts/reproducible_builds_2018/P1020111.JPG @@ -0,0 +1 @@ +../../.git/annex/objects/W3/Zp/SHA256E-s5065931--30d6745b7b6d4510817d33e935ec5c8b5b5676ffbde190b270fd5f79b2354ded.JPG/SHA256E-s5065931--30d6745b7b6d4510817d33e935ec5c8b5b5676ffbde190b270fd5f79b2354ded.JPG \ No newline at end of file diff --git a/posts/reproducible_builds_2018/P1020123.JPG b/posts/reproducible_builds_2018/P1020123.JPG new file mode 120000 index 0000000..2cdf91d --- /dev/null +++ b/posts/reproducible_builds_2018/P1020123.JPG @@ -0,0 +1 @@ +../../.git/annex/objects/P7/q4/SHA256E-s5461807--4f65be879127dfbd7e772f1a4a0e664f6add6ed43e3d4d9985b3f54f85905697.JPG/SHA256E-s5461807--4f65be879127dfbd7e772f1a4a0e664f6add6ed43e3d4d9985b3f54f85905697.JPG \ No newline at end of file diff --git a/posts/reproducible_builds_2018/groupphoto_rws4_paris_2018_small.png b/posts/reproducible_builds_2018/groupphoto_rws4_paris_2018_small.png new file mode 120000 index 0000000..ef7b0f9 --- /dev/null +++ b/posts/reproducible_builds_2018/groupphoto_rws4_paris_2018_small.png @@ -0,0 +1 @@ +../../.git/annex/objects/69/VX/SHA256E-s1117210--a898d799d86eae8eefa5c3f687b5443f0df283dfbeaea02990e6432f8edcaccb.png/SHA256E-s1117210--a898d799d86eae8eefa5c3f687b5443f0df283dfbeaea02990e6432f8edcaccb.png \ No newline at end of file diff --git a/posts/reproducible_builds_2018/guix.svg b/posts/reproducible_builds_2018/guix.svg new file mode 120000 index 0000000..020cb3c --- /dev/null +++ b/posts/reproducible_builds_2018/guix.svg @@ -0,0 +1 @@ +../../.git/annex/objects/W9/kv/SHA256E-s102959--decf5f063871ed1b18d6b598e6c448302e6bca95f18b45894f91d4d36ae902fc.svg/SHA256E-s102959--decf5f063871ed1b18d6b598e6c448302e6bca95f18b45894f91d4d36ae902fc.svg \ No newline at end of file diff --git a/posts/reproducible_builds_2018/rb.svg b/posts/reproducible_builds_2018/rb.svg new file mode 120000 index 0000000..580e379 --- /dev/null +++ b/posts/reproducible_builds_2018/rb.svg @@ -0,0 +1 @@ +../../.git/annex/objects/MZ/z9/SHA256E-s7839--e976bcbb121e76c361c236e7ec9a06d677e5a6087b8bcb4a3b9b0aeed0c0c29a.svg/SHA256E-s7839--e976bcbb121e76c361c236e7ec9a06d677e5a6087b8bcb4a3b9b0aeed0c0c29a.svg \ No newline at end of file -- cgit v1.2.3