testing migration aging and reproducible builds

Rebecca N. Palmer rebecca_palmer at zoho.com
Mon Jul 22 07:56:10 BST 2019


Chris Lamb wrote:> Just to take one recent example: I noticed yesterday 
a regression
> whereby one of our tools (strip-nondeterminism) is causing a fair
> number of Java packages to be unreproducible — it would seem a little
> antisocial to block them from migrating to testing when it was "our"
> fault. It is not really within the power or remit of the maintainers
> in-question to fix this particular issue, and we should not implicitly
> encourage maintainers to manually (!) fix it in each of the affected
> packages just to get it to migrate...

Would it be practical to temporarily turn off the check when this 
happens?  (And if it currently isn't, should that itself be considered a 
bug in britney?)

Jonathan Wiltshire wrote:
> How about if the current bonus of three days is dependent on both
> autopkgtests *and* reproducibility? That keeps the incentive without ending
> up with same-day migrations.

That would mean you get nothing for one if it isn't practical to have 
the other.  Maybe:
autopkgtest AND reproducible = 2 days
autopkgtest OR reproducible = 4 days
neither = 6 days
and if we decide to treat regression as worse than never having it:
unreproducible when was previously reproducible = 10 days
(Though I don't know if britney allows having more than 3 levels.)

Alternative option for regressions: indefinite block by default (so they 
can't get through unnoticed), but if you ask for an unblock when that's 
the only thing wrong, you get one (to 4-6 days as if it was never 
reproducible) no further questions asked.  (Given that one of the 
reasons for wanting reproducibility is security, maybe require this 
request to be signed, so a compromised buildd can't also fake it.) 
Though that might not be a good idea too early on, as if there are a lot 
of regressions it would be a lot of work.





More information about the Reproducible-builds mailing list