14:59:16 #startmeeting 14:59:16 Meeting started Tue Jan 25 14:59:16 2022 UTC. The chair is h01ger. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:59:16 Useful Commands: #action #agreed #help #info #idea #link #topic. 14:59:23 * h01ger moins 14:59:35 #topic agenda at https://pad.riseup.net/p/rb-irc-meetings-keep 15:00:01 #topic say hi or otherwise indicate your presence if you like (this meeting is publically logged) 15:00:22 * h01ger Holger Levsen says hi and welcome (again) to r-b in 2022 :-D 15:00:48 * vagrantc = Vagrant Cascadian 15:01:06 * danielsh waves 15:01:07 & thanks to whoever added the link to the november meeting to that agenda pad! <3 15:01:14 * aehlig is Klaus Aehlig 15:02:09 * h01ger will wait some more minutes to give more chance to say hi 15:02:56 Hi! 15:03:00 rclobus = Roland Clobus, working in reproducible live-build-based ISO images 15:03:30 aparcar = Paul Spooren, working (mostly) on reproducible OpenWrt builds 15:03:41 Hello! saksophony = Aditya Sirish, NYU, operating r-b.engineering.nyu.edu, mostly lurking 15:04:04 bmwiedemann: = Bernhard M. Wiedemann, working on openSUSE reproducible builds, also contributing upstream 15:04:20 Yo! Morten Linderud. Working on Arch Linux and misc upstreams and projects :) 15:05:30 yay. happy to see you all! :) 15:05:54 so lets start. late comers can still and always say hi :) 15:06:08 and please amend the agenda as needed.. 15:06:21 #topic short time slot for checkins from various projects 15:06:40 #topic short time slot for: Alpine Linux: status update (Ariadne) 15:07:12 i guess Ariadne is not here, so we'll move on in 15sec or so 15:07:35 #topic short time slot for: Arch Linux: rebuilder status update (kpcyrd) 15:07:56 or Foxboron or saksophony maybe? :) 15:08:10 I'm not aware of any progress :) 15:08:23 I have nothing to report either :) 15:08:36 We have some regressions in our rebuilder infra because of new developer tooling. But that will iron itself out after a little while 15:08:42 so the rebuilder is happily rebuilding i assume :) 15:08:51 Mostly :D 15:08:54 new developer tooling in arch? 15:09:24 h01ger: we now record the used "buildtool" to handle changed CFLAGS 15:09:30 buildtool and version 15:09:44 ah, nice. record in .buildinfo or where? 15:09:56 it's recorded in BUILDINFO indeed 15:10:08 coolio 15:10:08 "buildtool" = gcc/clang ? 15:10:36 danielsh: ah no the buildtool is like hmm dpkg-buildpackage, the package which provides the buildscripts 15:10:53 i'm presently driving 15:10:53 * fepitre waves and is sorry to be late 15:11:02 jelle, *nod* ty 15:11:20 (at a stop sign) 15:11:21 Ariadne: drive safely and give us a report later, eg in a month ;) 15:11:34 (or whenever you dont drive anymore) 15:11:34 danielsh: https://github.com/archlinux/devtools/pull/74 for background info 15:11:39 MeetBot, go go gadget text-to-speech 15:11:39 danielsh: Error: "go" is not a valid command. 15:11:58 fepitre: hi & just in time 15:12:25 jelle, tyvm 15:12:31 #info https://github.com/archlinux/devtools/pull/74 for background info on how arch records (in their .buildinfo files) the used "buildtool" to handle changed CFLAGS 15:12:56 thats it for arch / rebuilder now? 15:14:10 i guess so. 15:14:29 #topic short time slot for: Debian: snapshot.d.o mirror status update (fepitre) 15:14:48 Everything looks fine. I've did few improvements for rclobus 15:15:03 :thumbsup: 15:15:14 Thanks! 15:15:28 I've a refactor that I've not merged yet because I lack time for validating it 15:15:39 but still, I would prefer to work on a better design 15:15:45 ah, cool! 15:16:03 notably: https://github.com/fepitre/debian-snapshot/projects 15:16:36 (you may click on the project for subtasks) 15:16:55 anyway, currently all looks good for rebuilding Debian ( kpcyrd can confirm it too ) 15:17:16 * h01ger is very happy this project and subprojects exist (as a first step in getting it implemented :) 15:17:57 that's all for me for this part :) 15:17:58 * vagrantc cheers and dances 15:18:01 next topic i guess... 15:18:12 after some more time for dancing :) 15:18:29 #topic short time slot for: Debian: rebuilder (beta.t.r-b.o) status update (h01ger) 15:19:02 little progress here over the years :/ 15:19:28 though beta.t.r-b.o "looks good" as it still points to fepitre's server 15:19:47 and i'm happy the url has been shown around here and there 15:19:55 I owe you also some improvement for showing results 15:20:07 notably to split Debian suite 15:20:16 but more generally, I need to do this: https://github.com/fepitre/package-rebuilder/issues/7 15:20:37 my biggest concern is that loading of https://beta.tests.reproducible-builds.org/debian.html takes more than 10 sec even on a fast computer 15:20:51 h01ger, because it loads a big JSON 15:20:59 ah, cool i guess thats what you mean with 'split the debian suite' 15:21:04 yup 15:21:06 fepitre: i dont care why ;-D 15:21:15 (i assumed that also :) 15:21:27 this is what I meant indeed 15:21:37 :thumbsup: 15:22:00 fepitre: does this use rebuilderd? 15:22:06 jelle, no 15:22:08 aha 15:22:08 https://github.com/fepitre/package-rebuilder/issues/7 is not about the refactoring you've done and need to verify, or is it? 15:22:29 h01ger, this one is for package-rebuilder 15:22:31 #save 15:22:41 the other one I talked about earlier was for the snapshot service 15:22:46 ah 15:22:48 sorry 15:23:07 this one is to improve package-rebuilder and how you can manage it, how you get results (API) etc 15:23:15 no problem 15:23:16 raboof: there's backlog at http://meetbot.debian.net/reproducible-builds/2022/reproducible-builds.2022-01-25-14.59.log.html (not sure whether you have it or not) 15:23:43 jelle, it uses https://github.com/fepitre/package-rebuilder 15:23:48 fepitre: aha! 15:23:59 thanks! o/ latecomer, Arnout Engelen, NixOS, various upstreams and general enthousiast :) 15:24:12 \o 15:24:28 which internally uses https://github.com/fepitre/debrebuild (like rebuilderd) to rebuild Debian 15:24:49 rather btw & offtopic atm, but i really like this people indicating what they work on. now we all know whom to ask about nix :) 15:25:01 so, next topic?> 15:25:08 ok for me :) 15:25:34 #topic short time slot for: Debian live-build (rclobus) 15:25:51 I've sent a summary in advance: https://lists.debian.org/debian-live/2022/01/msg00015.html 15:26:16 Most notably: I've placed all hooks that I need for generating reproducible image in the live-build repository. 15:26:23 #info https://lists.debian.org/debian-live/2022/01/msg00015.html 15:26:30 That saves me some duplication work. 15:26:37 rclobus: thats super cool 15:26:41 #info https://wiki.debian.org/ReproducibleInstalls/LiveImages 15:26:44 upstream all the things 15:27:10 rclobus: i guess thats all for here+now? 15:27:30 Yes, that's the main point. 15:27:37 :thumbsup: 15:28:11 excellently short and high density :) 15:28:23 #topic short time slot for: F-Droid (obfusk) 15:29:22 i dont think we've seen obfusk or any other fdroid person recently 15:29:38 #topic short time slot for: rebuilderd: status update (kpcyrd) 15:30:06 nor kpcyrd and we've covered some rebuilderd news before already too, so.. 15:30:30 we are done with the short time slots :) 15:30:41 not sure if the upcoming ones will be much longer though 15:30:43 anyway 15:30:49 #topic r-b summit 2022 (mapreri) 15:30:58 * fepitre is happy that debrebuild.py is useful! 15:31:16 not seen mapreri here yet.. 15:31:55 mapreri wrote a mail on Oct 21 2021 asking for all our thoughs on a summit in 2022 15:33:06 were there any responses? I didn't see any 15:33:08 not sure what else to say about this now. it also doesnt feel sensible to even ask what you'd think about an online event :/ 15:33:27 why doesn't it feel sensible? 15:33:36 aparcar: i see 5 replies to that mail 15:33:37 aparcar, yes there have been 15:33:45 aparcar: because we are all sick of online meetings 15:33:57 (i assume, knowing i will be wrong on this :) 15:33:58 I missed it, will check the archives sorry 15:34:32 https://lists.reproducible-builds.org/pipermail/rb-general/2021-October/002404.html 15:34:37 and followups 15:34:41 might not hurt to at least have an online social if not a meeting 15:34:51 * h01ger would be happy to hear peoples though on a 2022 summit 15:35:00 offline or online or hybrid or whatever you think 15:35:08 I think there's two separate questions. 1. Where (online / offline) 2. What will it comprise 15:35:18 Whether it's talks, or hacking, or anything else 15:35:40 three questions! 15:35:41 danielsh: the previous summits were 'something else 15:35:42 ' 15:36:08 a bit of hacking but mostly something else, yeah 15:36:13 Yeah, that's good 15:36:33 synchronous events are few and far between; better to use them for discussions 15:36:45 but discussions don't strictly need to be in person :) 15:37:23 while i too weary of online meetings, mailing list discussions seem to trail off pretty quickly also 15:38:37 different mediums sometimes trigger different dynamics 15:39:14 yeah 15:39:55 but i think for the topic at hand it's fair to say we have no real idea when we'll be able to meet in person again :/ 15:39:57 i'd very much prefer an on-site outside event (and somehow i have not given up hope on this happening in 2022 on the 25th day of 2022 yet ;) 15:40:12 & what vagrantc just said 15:40:15 vagrantc, +1 15:40:19 so i'd say, move on to the next topic now 15:40:27 one moment 15:40:34 ok 15:40:37 * vagrantc also hopes and hopes :) 15:40:47 we can't have an in-person event... so we should think of how to get the same benefits in the given situation 15:41:06 e.g., if in-person means more chances for interaction/feedback, we should try to make that happen online. on IRC, lists, voice chat, whatever. 15:41:08 . 15:42:05 i'm not sure about "we can't have an in-person event", it always depends whom to exclude :/ (and online events also exclude people.) 15:42:23 shouldn't we table that and see how corona develops over the next month? 15:42:36 the world has sooo many regions.. 15:42:56 to some degree, i feel like we should just do more types of engagement and not necessarily have to be involved in all of them 15:43:04 but yes, we should move on *for now* and *here*. and have this topic again in a month here, and anytime on the list and also on irc, when there's no formal irc meeting 15:43:18 +1 on what vagrantc just said 15:43:28 +1 15:44:22 next topic then, though its a "no show" 15:44:25 #topic r-b summit 2022 (mapreri) 15:44:35 #topic r-b.o/docs/rebuilders and conflict with r-b.o/tools (h01ger) 15:44:41 (sorry about the noise) 15:45:02 nothing happening on improving rebuilder/tools documentation :( 15:45:57 yeah...problably I'm part of this failure 15:46:04 we all are. 15:46:15 and this is not a failure but slow progress ;) 15:46:24 #topic https://pad.sfconservancy.org/p/grow-r-b-debian - collecting ideas where to improve debian 15:46:28 is there a bug filed for this somewhere? 15:46:31 the previous topic 15:46:55 danielsh: no :( i think it would be great if you'd file one (as issue against the website.git) 15:47:31 I would, but I don't know what it should say exactly 15:47:52 those two pages should be merged and/or better split 15:47:58 read them and you should see 15:48:23 or lets discuss after the meeting? or should i go back to that topic formally? 15:48:34 after 15:48:41 ok, coolio 15:48:53 about 'grow your ideas for debian project' 15:49:05 https://salsa.debian.org/debian/grow-your-ideas 15:49:27 is an initiative to collect ideas how to grow debian in all kinds of areas 15:49:37 so i created https://pad.sfconservancy.org/p/grow-r-b-debian 15:49:46 to collect our ideas regarding improving r-b for debian 15:50:24 there's a timeline involved, so in about 10 days the pad should be moved into that salsa repo (i plan to do that) 15:50:53 so this topic is to make all of you (debian people) to go to https://pad.sfconservancy.org/p/grow-r-b-debian and write down your ideas there 15:51:01 . 15:51:22 \o/ 15:51:27 danielsh: ^ :) 15:52:01 for the log - I just filed https://salsa.debian.org/reproducible-builds/reproducible-website/-/issues/35 for the previous topic 15:53:20 so i guess thats it for grow your ideas for now too.. 15:54:00 #topic any other business 15:54:12 rclobus: Contacts with texlive? 15:54:35 I've seen that the Cinnamon image nowadays relies on texlive-base. 15:55:14 Wasn't there in the past something about the tex-world solving issues differently than SOURCE_DATE_EPOCH? 15:56:10 they originally implemented their own variable name, which defeated the point for the most part 15:56:33 we convinced them to use SOURCE_DATE_EPOCH, but they also require a second variable set, FORCE_SOURCE_DATE=1 15:57:10 Thanks, I'll keep that in mind when I propose new patches for them :-) 15:57:39 Why? They thing S_D_E could be set unintentionally? 15:57:42 think* 15:57:43 which is mentioned in https://reproducible-builds.org/docs/source-date-epoch/ and i think the spec as well 15:57:53 danielsh: somehow, yes. 15:58:15 ack 15:58:23 oops, cat walked across the keyboard and now SOURCE_DATE_EPOCH=-25 15:58:32 seems implausible, but ... who knows. 15:58:35 said cat could also set FORCE_* 15:58:39 lol 15:58:46 ah, true, we need a third variable 15:58:52 it's like a euphemism treadmill (q.v.) 15:59:06 CATS_ARE_UGLY=1 ? 15:59:10 no cat will set that. 15:59:15 MEOW=1 15:59:28 * h01ger thinks we'll just needs to wait until texlive fixes this better 15:59:30 Anyway, thanks... Next topic? 15:59:43 sure 15:59:54 any other business is rather freeflowing 16:00:13 there might also be issues with timezones and SOURCE_DATE_EPOCH if the implementation is only partly done correctly 16:00:14 h01ger is always asking me to ask about snapshot.reproducible-builds.org... 16:00:14 do you want to #info the issue 35 for the meeting logs ? 16:00:16 rclobus: but the topic you added to the agenda was already covered as short time slot 16:00:26 danielsh: if in doubt, always 16:00:36 #save 16:01:07 rclobus: short time slot for: Debian: rebuilder (beta.t.r-b.o) status update (h01ger) (h01ger, 15:18:29) 16:01:10 link's not there 16:01:23 Ah, I didn't recognize it as such. 16:01:38 #info filed https://salsa.debian.org/reproducible-builds/reproducible-website/-/issues/35 (see item 13 above) 16:01:40 Then this topic just disappeared... 16:03:15 Topic done :-) 16:03:26 :) 16:03:45 surely we can/could also continue topics here.. 16:04:44 do you know why ubuntu does not publish .buildinfo? 16:05:32 debian doesn't either :) 16:05:35 lol 16:05:42 debian does 16:05:57 oh, yeah, i guess we're debian :) 16:06:00 just via single volunteers, just like eg the amd64 port was started as well 16:06:09 right, not part of infrastructure 16:06:14 who would have thought amd64 would become a mainstream arch??? 16:06:23 Just wondering because more and more people are using Ubuntu (server) because of security fixes that are done much quicker than Debian 16:06:55 fepitre: it's a good question ... no idea if they're even saving the .buildinfo files at all 16:06:56 fepitre: i have some guesses but i'm not sure i want to share them here. 16:07:08 h01ger, sure no problem 16:09:13 just this: i believe its more a lawyer reasons then technical. AIUI you need a licence to distribute (modified) ubuntu or some such. AIUI its a bit similar with redhat, where they publish the sources but. - and then: i have no clue, this is no advice whatsover and random guessing. 16:09:47 my other guess is that they are waiting til debian has done the technical work and then they will just enable it and sell it as how cool they are. 16:09:50 * h01ger shrugs 16:10:17 i've definitely heard from some folks at canonical that they're waiting for Debian to *solve* reproducible builds 16:10:23 * h01ger is happy for all the ubuntu users 16:12:46 * h01ger is happy for all the free software users 16:12:50 any other business? 16:14:53 #topic next meeting: here, last Tuesday of the month, 15 UTC, so 20220222:15oo 16:15:22 & thank you all for attending & sharing your cool works! 16:15:33 indeed, thanks everyone! 16:16:31 #endmeeting