Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
reproducible builds and openSUSE
Search
Bernhard M. Wiedemann
June 27, 2016
Technology
0
840
reproducible builds and openSUSE
https://events.opensuse.org/conference/oSC16/program/proposal/838
Bernhard M. Wiedemann
June 27, 2016
Tweet
Share
More Decks by Bernhard M. Wiedemann
See All by Bernhard M. Wiedemann
syscalls - gate to the linux kernel
bmwiedemann
0
350
Other Decks in Technology
See All in Technology
OSSコミットしてZennの課題を解決した話
dyoshikawa1993
0
150
E2Eテスト自動化プラットフォームにおけるAIの活用
shift_evolve
0
190
コンテナ・K8s研修 - 前半 コンテナ基礎・ハンズオン【MIXI 24新卒技術研修】
mixi_engineers
PRO
0
170
推薦システムを本番導入する上で一番優先すべきだったこと~NewsPicks記事推薦機能の改善事例を元に~
morinota
0
130
How to Think Like a Performance Engineer
csswizardry
4
590
Git 研修 Advanced【MIXI 24新卒技術研修】
mixi_engineers
PRO
0
200
AutomatedLabを使って内部ペンテストを勉強しよう! -やられ社内ネットワークの自動構築-
n_etupirka
1
610
[I/O Extended Android 2024] What`s new in Android 2024
kyeongwan
0
220
頼られるのが大好きな 皆さんへ - 支援相手との期待の合わせ方、突き放し方 -/For_people_who_like_to_be_relied_on
naitosatoshi
1
290
Matterport を使ってクラスメソッド各拠点のバーチャルオフィスツアーを作成してみた
wakatsuki
0
160
目標設定は好きですか? アジャイルとともに目標と向き合い続ける方法 / Do you like target Management?
kakehashi
10
3k
クラウド利用者の「責任」をどう果たす?AWSセキュリティ対策のススメ #AWSSummit
hiashisan
0
280
Featured
See All Featured
Into the Great Unknown - MozCon
thekraken
20
1.3k
Happy Clients
brianwarren
94
6.6k
5 minutes of I Can Smell Your CMS
philhawksworth
200
19k
10 Git Anti Patterns You Should be Aware of
lemiorhan
652
58k
Code Review Best Practice
trishagee
58
16k
How to train your dragon (web standard)
notwaldorf
79
5.5k
VelocityConf: Rendering Performance Case Studies
addyosmani
321
23k
Building a Modern Day E-commerce SEO Strategy
aleyda
25
6.7k
Atom: Resistance is Futile
akmur
261
25k
A Philosophy of Restraint
colly
200
16k
I Don’t Have Time: Getting Over the Fear to Launch Your Podcast
jcasabona
26
1.8k
The Mythical Team-Month
searls
217
43k
Transcript
Reproducible builds and openSUSE Bernhard M. Wiedemann Cloud Developer
[email protected]
Introduction
3 Where does our code come from
4 What are reproducible builds? • Get the same results
from building sources • Two use-cases ‒ ideally bit-by-bit identical (thus same hashes) ‒ weaker: same content after applying some filters (via build-compare)
5 Why reproducible builds? • Need less trust in the
build hosts • Reduced load on build-service from rebuilds
6 Typical problems • embedded timestamps, hostname • embedded rebuild
counters • random .o file link order changes optimization • compile-time CPU detection
Current state
8 Work done • 71 submit-requests • 6 bugs filed
• 4 upstream fixes merged • some build-compare filters added (e.g. for javadoc)
9 rebuild-test-scripts • available from https://github.com/bmwiedemann/reproducibl eopensuse • including this
presentation's source https://github.com/bmwiedemann/reproducible opensuse/blob/master/presentation/reproduci ble.md
10 How reproducible can we get? • bit-identical with rpm+build
from home:bmwiedemann:reproducible repo and effort ‒ https://build.opensuse.org/package/rdiff/home:bmw iedemann:reproducible/build?linkrev=base&rev=2
11 Where do we want to go? • fix all
build-compare issues • not yet produce fully bit-identical rpms
Thank you. 12 Questions?
Corporate Headquarters Maxfeldstrasse 5 90409 Nuremberg Germany +49 911 740
53 0 (Worldwide) www.suse.com Join us on: www.opensuse.org 14