Hello lists, here is a third update of the status for reproducible live-build ISO images [1]. * All major configurations are still built regularly using live-build and bullseye [2] * The frequency for the build jobs has been reduced from daily to weekly * All major configurations (except for Cinnamon) are reproducible * The main focus for the last month was on the framework: ** At most one image will be run at the same time, to avoid spikes in the workload of the Jenkins node ** Diffoscope consumed too much memory when comparing the ISO files of Cinnamon [3] This issue has now been resolved since diffoscope 182 Many thanks to lamby for the code and sangy for further improvements ** The new snapshot service of fepitre is now used [4] Many thanks to fepitre, for the extended API, and hosting additionally the installer files and udebs ** The Jenkins builds generate artifacts when diffoscope finds issues ** The artifacts can not clutter /tmp on the Jenkins master any more ** The reporting page in Jenkins mentions the timestamp that was used Many thanks to h01ger and mapreri for bringing the changes to Jenkins Future plans: * Fix the Cinnamon image (see previous report for the diagnosis) * Fix the proxy handling of live-build, to guarantee the usage of the proxy * Add bookworm live-build images * Reprotest might be used instead of just 2 builds without a short time frame, to capture more variations * I would like to test the functionality of the generated ISO image. ** OpenQA was presented on DebConf21, it already tests the current daily images [5] * Long term: When live-build images are working fine, the work could be extended to other images, e.g. the live-wrapper images, the netinst images or perhaps even Docker images With kind regards, Roland Clobus [1] https://wiki.debian.org/ReproducibleInstalls/LiveImages [2] https://jenkins.debian.net/view/live/ [3] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=991059 [4] https://debian.notset.fr/snapshot [5] https://openqa.debian.net/
Attachment:
OpenPGP_signature
Description: OpenPGP digital signature