Debian Bug report logs - #1028615
tracker.debian.org: tracker.d.o should display results of reproducible rebuilds, not just reproducible CI results

Reply or subscribe to this bug.

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Holger Levsen <holger@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: tracker.debian.org: tracker.d.o should display results of reproducible rebuilds, not just reproducible CI results

Date: Fri, 13 Jan 2023 18:49:48 +0100

[Message part 1 (text/plain, inline)]

Package: tracker.debian.org
Severity: normal
X-Debbugs-Cc: frederic.pierret@qubes-os.org, reproducible-builds@lists.alioth.debian.org

Dear Maintainer,

since some years, tracker.d.o is thankfully showing results from
https://tests.reproducible-builds.org/debian - which was and is awesome!
However, these are just continious integration test results and
not based on the binaries we publish on ftp.debian.org

But there is a new service, which rebuilds packages and compares the results
against the binaries we publish at ftp.d.o, which is https://rebuild.notset.fr/debian

The data is available in json format here:

- https://rebuild.notset.fr/debian/results/debian_unstable.json
- https://rebuild.notset.fr/debian/results/debian_bookworm.json
- https://rebuild.notset.fr/debian/results/debian_bullseye.json

It would be great, if tracker.d.o could display both kind of results, CI *and*
rebuild results.


Thank you for maintaining tracker.d.o!

-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

First they ignore you, then they laugh at you, and then it's too late.
Don't look up!

[signature.asc (application/pgp-signature, inline)]

Message #10 received at 1028615@bugs.debian.org (full text, mbox, reply):

From: Holger Levsen <holger@layer-acht.org>

To: 1028615@bugs.debian.org

Cc: frederic.pierret@qubes-os.org, reproducible-builds@lists.alioth.debian.org

Subject: Re: tracker.debian.org: tracker.d.o should display results of reproducible rebuilds, not just reproducible CI results

Date: Fri, 13 Jan 2023 23:51:55 +0000

[Message part 1 (text/plain, inline)]

On Fri, Jan 13, 2023 at 06:49:48PM +0100, Holger Levsen wrote:
> But there is a new service, which rebuilds packages and compares the results
> against the binaries we publish at ftp.d.o, which is https://rebuild.notset.fr/debian

<h01ger> pollo: hmpf, i ment https://rebuild.notset.fr/

thanks, pollo.


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The devel is in the details.

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 1028615@bugs.debian.org (full text, mbox, reply):

From: Holger Levsen <holger@layer-acht.org>

To: 1028615@bugs.debian.org, Reproducible Builds discussion list <reproducible-builds@lists.alioth.debian.org>

Subject: Re: Bug#1028615: tracker.debian.org: tracker.d.o should display results of reproducible rebuilds, not just reproducible CI results

Date: Fri, 14 Apr 2023 18:20:48 +0000

[Message part 1 (text/plain, inline)]

On Fri, Jan 13, 2023 at 06:49:48PM +0100, Holger Levsen wrote:
> since some years, tracker.d.o is thankfully showing results from
> https://tests.reproducible-builds.org/debian - which was and is awesome!
> However, these are just continious integration test results and
> not based on the binaries we publish on ftp.debian.org
[...]
> The data is available in json format here:
> - https://rebuild.notset.fr/debian/results/debian_unstable.json
> - https://rebuild.notset.fr/debian/results/debian_bookworm.json
> - https://rebuild.notset.fr/debian/results/debian_bullseye.json
> It would be great, if tracker.d.o could display both kind of results, CI *and*
> rebuild results.

friendly ping on this. Also if there's anything we can do...!?!


-- 
cheers,
	Holger

 ⢀⣴⠾⠻⢶⣦⠀
 ⣾⠁⢠⠒⠀⣿⡁  holger@(debian|reproducible-builds|layer-acht).org
 ⢿⡄⠘⠷⠚⠋⠀  OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
 ⠈⠳⣄

The mark of a civilized man is the ability to look at a column of numbers and
weep. (Bertrand Russell)

[signature.asc (application/pgp-signature, inline)]

Message #20 received at 1028615@bugs.debian.org (full text, mbox, reply):

From: Raphael Hertzog <hertzog@debian.org>

To: Holger Levsen <holger@layer-acht.org>, 1028615@bugs.debian.org

Cc: Reproducible Builds discussion list <reproducible-builds@lists.alioth.debian.org>

Subject: Re: Bug#1028615: tracker.debian.org: tracker.d.o should display results of reproducible rebuilds, not just reproducible CI results

Date: Mon, 17 Apr 2023 15:05:16 +0200

[Message part 1 (text/plain, inline)]

Hello Holger,

On Fri, 14 Apr 2023, Holger Levsen wrote:
> On Fri, Jan 13, 2023 at 06:49:48PM +0100, Holger Levsen wrote:
> > since some years, tracker.d.o is thankfully showing results from
> > https://tests.reproducible-builds.org/debian - which was and is awesome!
> > However, these are just continious integration test results and
> > not based on the binaries we publish on ftp.debian.org
> [...]
> > The data is available in json format here:
> > - https://rebuild.notset.fr/debian/results/debian_unstable.json
> > - https://rebuild.notset.fr/debian/results/debian_bookworm.json
> > - https://rebuild.notset.fr/debian/results/debian_bullseye.json
> > It would be great, if tracker.d.o could display both kind of results, CI *and*
> > rebuild results.
> 
> friendly ping on this. Also if there's anything we can do...!?!

My bandwidth for tracker.debian.org is quite limited and it seems unlikely
that I will tackle this on my own. That said the codebase is rather
sane and it should not be too hard for someone else to implement this...

It has even become much simpler since I implemented the ImportExternalData
mixin that makes it easy to download json and create action items (cf
181db12111b35f9f54e5ed07654d34cff604feb3 as an example).

I would suggest to only import the data from unstable, or at least to
only generate action items for packages in unstable. 

Cheers,
-- 
  ⢀⣴⠾⠻⢶⣦⠀   Raphaël Hertzog <hertzog@debian.org>
  ⣾⠁⢠⠒⠀⣿⡁
  ⢿⡄⠘⠷⠚⠋    The Debian Handbook: https://debian-handbook.info/get/
  ⠈⠳⣄⠀⠀⠀⠀   Debian Long Term Support: https://deb.li/LTS

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.