[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Irregular status update about reproducible live-build ISO images



Hello lists,

here is the 18th update of the status for reproducible live-build ISO images [1].

Single line summary: Live images are looking good, and the number of (passed) automated tests is growing

Reproducible status:
* All major desktops build reproducibly with bullseye, bookworm, trixie and sid

My activities in March, April, May, June:
* Non-free-firmware is added, the images are reproducible
* The live images are generated officially by Debian
* Better support for UEFI secure boot in live-build [10]
* Stabilising the tests in openQA [6][7][9]
* New test in openQA: the Calamares installer [8]
* The live images have less authentication prompts (pending) [2]
* A little bug triaging

Work to be done:
* More investigation is required to provide long-term reproducibility, because the live image will be generated without using a snapshot server * Test the official images and regular snapshot images in openQA as well as the images generated by Jenkins (possibly replacing the images generated by Jenkins)
* Review the results of the generated ISO images in my local openQA instance
* Adjust the content of the live-build image
** Make the boot menu more similar to the live-wrapper menu
** Add a 'persistent' option (as seen in Kali)
** Keep the accessibility improvements made in the live-wrapper boot menu
** Verify the package lists
*** e.g. the Debian Reference is installed for es and it, but not en
** The additional firmware has made the live images much larger
** All locales are present in the live image, but they are not activated, which results in a silly GNOME welcome screen [3]
** The .disk/info file must be made similar to the 11.x series [4]
* Bug triaging for issues reported against live-build
* Many other things. I'll update the current TODO page [5]

With kind regards,
Roland Clobus

[1] https://wiki.debian.org/ReproducibleInstalls/LiveImages
[2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037295
[3] https://lists.debian.org/debian-live/2023/06/msg00017.html
[4] https://lists.debian.org/debian-live/2023/06/msg00023.html
[5] https://wiki.debian.org/DebianLive/TODO
[6] https://salsa.debian.org/live-team/live-build/-/merge_requests/308
[7] https://salsa.debian.org/live-team/live-build/-/merge_requests/309
[8] https://salsa.debian.org/qa/openqa/openqa-tests-debian/-/merge_requests/27 [9] https://salsa.debian.org/live-team/live-build/-/merge_requests/306, https://salsa.debian.org/live-team/live-build/-/merge_requests/305, #1023472
[10] https://salsa.debian.org/live-team/live-build/-/merge_requests/304

Attachment: OpenPGP_signature
Description: OpenPGP digital signature


Reply to: