[Debian-salsa-ci] Two questions about build-path reproducibility in Debian

James Addison jay at jp-hosting.net
Thu Feb 15 20:16:29 GMT 2024


Hi folks,

A quick recap: in July 2023, Debian's package build infrastructure
(buildd) intentionally began using a fixed directory path during
package builds (bug #1034424).  Previously, some string randomness
existed within each source build directory path.

I've two questions related to buildpaths - one relevant to the
Salsa-CI team, and the other a RB-team housekeeping question:

  1. [Salsa] Recently Debian's CI pipeline was reconfigured[1] to
enable more variance in builds.  However: I think that change also
(inadvertently?) enabled buildpath variation.  Is that useful and/or
aligned with Debian package migration incentives[2] -- or should we
disable that buildpath variance?

  2. [RB] Housekeeping: we use Debian's bugtracker to record packages
with buildpath-related build problems[3].  Do we want to keep those
bugs open, or should we close them?

Thanks,
James

[1] - https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/468

[2] - "Reproducibility migration policy" @
https://lists.debian.org/debian-devel-announce/2023/12/msg00003.html

[3] - https://udd.debian.org/bugs/?release=any&pending=ign&merged=ign&done=ign&fnewerval=7&flastmodval=7&fusertag=only&fusertagtag=buildpath&fusertaguser=reproducible-builds%40lists.alioth.debian.org&reproducible=1&sortby=id&sorto=asc&format=html#results



More information about the Debian-salsa-ci mailing list