[arch-dev-public] Reproducible builds progress report #3

栏目: IT技术 · 发布时间: 6年前

Allan McRae allan at archlinux.org

Fri May 29 09:20:03 UTC 2020
Hi all,

A quick updated on the progress of reproducible builds.

You may have noticed a couple of large rebuilds that occurred recently.
These fixed issues of non-reproducible file ordering with old versions
of makepkg. This and other hard work by the team improving our tooling
and fixing packaging issues has resulted in 96% of [core] being
reproducible, and 90% of [extra]. You can see the status of which
packages are reproducible here [1].

The remaining packages to fix in [core] are dnssec-anchors, linux,
linux-lts, nss and perl. With the possible exception of perl, these are
in the "hard" basket. There is plans on how to fix the kernel packages,
but that will require some time to sort out. We would be happy for more
people to help out so we can get [core] to 100% reproducible.

We have investigated some of the packages in [extra] that fail to
reproduce here [2]. Note that there are quite a few packages that
currently "Failed to build from source" (FTBFS) - it would be very
helpful for the reproducible builds team if their maintainers can help
fix the packages. You can also use the CI of Arch packages run by Debian
to get an overview what the issue is with these packages and see many
other packages that are currently failing to build [3].

We also need help to investigate and fix the packages that fail to
reproduce that we have not investigated as of yet. There are two easy to
use tools to attempt to reproduce a package - "makerepropkg" from
devtools and "repro" from the archlinux-repro package. Once these have
rebuilt a package, you can use the "diffoscope" tool to look at the
differences. Jump in the #archlinux-reproducible IRC channel if you want
help interpreting the output, or you could just link to a copy of it in
the wiki.

[1] <a href="https://reproducible.archlinux.org/">https://reproducible.archlinux.org/</a>
[2] <a href="https://wiki.archlinux.org/index.php/Reproducible_Builds/Status">https://wiki.archlinux.org/index.php/Reproducible_Builds/Status</a>
[3] <a href="https://tests.reproducible-builds.org/archlinux/extra.html">https://tests.reproducible-builds.org/archlinux/extra.html</a>
More information about the arch-dev-public mailing list

以上就是本文的全部内容,希望本文的内容对大家的学习或者工作能带来一定的帮助,也希望大家多多支持 码农网

查看所有标签

本站部分资源来源于网络,本站转载出于传递更多信息之目的,版权归原作者或者来源机构所有,如转载稿涉及版权问题,请联系我们

有趣的二进制

有趣的二进制

[ 日] 爱甲健二 / 周自恒 / 人民邮电出版社 / 2015-10 / 39.00元

《有趣的二进制:软件安全与逆向分析》通过逆向工程,揭开人们熟知的软件背后的机器语言的秘密,并教给读者读懂这些二进制代码的方法。理解了这些方法,技术人员就能有效地Debug,防止软件受到恶意攻击和反编译。本书涵盖的技术包括:汇编与反汇编、调试与反调试、缓冲区溢出攻击与底层安全、钩子与注入、Metasploit 等安全工具。 《有趣的二进制:软件安全与逆向分析》适合对计算机原理、底层或计算机安全......一起来看看 《有趣的二进制》 这本书的介绍吧!

图片转BASE64编码
图片转BASE64编码

在线图片转Base64编码工具

URL 编码/解码
URL 编码/解码

URL 编码/解码

html转js在线工具
html转js在线工具

html转js在线工具