From owner-svn-doc-all@freebsd.org Sat Jul 9 22:09:56 2016 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B2FC4B83926; Sat, 9 Jul 2016 22:09:56 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 8AC2019B3; Sat, 9 Jul 2016 22:09:56 +0000 (UTC) (envelope-from dru@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id u69M9tcb024892; Sat, 9 Jul 2016 22:09:55 GMT (envelope-from dru@FreeBSD.org) Received: (from dru@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id u69M9tTG024891; Sat, 9 Jul 2016 22:09:55 GMT (envelope-from dru@FreeBSD.org) Message-Id: <201607092209.u69M9tTG024891@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dru set sender to dru@FreeBSD.org using -f From: Dru Lavigne Date: Sat, 9 Jul 2016 22:09:55 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r49085 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.22 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 09 Jul 2016 22:09:56 -0000 Author: dru Date: Sat Jul 9 22:09:55 2016 New Revision: 49085 URL: https://svnweb.freebsd.org/changeset/doc/49085 Log: Add reproducible builds status report submitted by emaste@freebsd.org. Reviewed by: wblock Sponsored by: iXsystems Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2016-04-2016-06.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2016-04-2016-06.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2016-04-2016-06.xml Sat Jul 9 17:50:43 2016 (r49084) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2016-04-2016-06.xml Sat Jul 9 22:09:55 2016 (r49085) @@ -1668,4 +1668,77 @@ Extensive testing. + + + Reproducible Builds in &os; + + + + + Ed + Maste + + emaste@FreeBSD.org + + + + + Base System Reproducible Builds wiki page + Ports Reproducible Builds wiki page + BSDCan 2016 Reproducible Builds in FreeBSD talk + Reproducible Builds website + Diffoscope home page + Diffoscope results from the BSDCan Reproducible Builds talk + + + +

Reproducible builds are a set of software development + practices which create a verifiable path from human readable + source code to the binary code used by computers. In brief, + the idea is that building the same binary, software package, + document, or other binary artifact twice from the same source + produces identical output. The reproducible-builds.org website + provides background information and documentation on making + builds reproducible.

+ +

Many folks have contributed to the reproducible build effort + in &os; src and ports over the last decade. There are many + practical benefits of reproducible builds, such as bandwidth + and storage savings. However, there is a growing interest in + the broad open source and free software communities, + primarily from a software and toolchain integrity perspective. + Over the last few years, some members of the Debian Project + have led a comprehensive and structured reproducible builds + effort.

+ +

Baptiste Daroussin and Ed Maste attended the first + Reproducible Builds Summit in Athens last year. Since then, + Ed investigated the state of build reproducibility + in the ports tree, and presented + Reproducible Builds in &os; at BSDCan 2016. With + some work in progress patches, over 80% of the &os; ports tree + builds reproducibly.

+ +

The Diffoscope tool performs in-depth comparison of files, + archives, or directories to understand why a binary artifact + does not build reproducibly. Diffoscope results for the + nonreproducible builds in Ed's talk are available at one of + the links above.

+ + + The &os; Foundation + + + Integrate &os; ports builds into the + reproducible-builds.org continuous integration + infrastructure. + + Integrate reproducible build patches into the ports + tree. + + Investigate sources of nonreproducibility in individual + ports. + +