Re: Reproducible builds: a means to an end

[Alex Vong]

# Hi,
#
# I wasn't expecting this, but the Debian BTS actually provides
# mechanism for adding custom tags. I will use #21918 as an example.
#
# Limit the command to the guix package only
package guix
#
# Set an address, it can be the mailing list address for a team
user address@hidden
#
# Set usertag, the character set [A-Za-z0-9_-] should be safe
usertag 21918 + determinism
#
# Add usercategory unreproducible-build and friends
usercategory unreproducible-build
 * Non-derterministic-build [tag=]
 + Determinism [determinism]
 + Uncategorized []
usercategory normal
 * status
 * unreproducible-build
 * severity
usercategory <pkg>-sort
 * status
 * unreproducible-build
 * severity
usercategory old
 * status
 * severity
 * classification
#
# End of commands
thanks

Now, if you visit
<https://debbugs.gnu.org/cgi/pkgreport.cgi?package=guix;address@hidden>,
you should see `Outstanding bugs -- Determinism; Normal bugs (1 bug)`.
Of course, this is a rough example, the exact wordings can be changed.
Does this work for you?

References:
 https://wiki.debian.org/bugs.debian.org/usertags
 https://www.debian.org/Bugs/server-control
 https://www.debian.org/Bugs/server-request
 https://lists.debian.org/debian-devel-announce/2005/09/msg00002.html

Cheers,
Alex

On 18/11/2015, Ludovic Courtès <address@hidden> wrote:
> Alex Vong <address@hidden> skribis:
>
>> On 16/11/2015, Ludovic Courtès <address@hidden> wrote:
>
> [...]
>
>>> Sometimes there are ready-made patches that can be found in Debian or
>>> other distros, sometimes not.  Often they’re hard to find though (for
>>> instance, patch-tracker.debian.org seems to be off-line.)
>>>
>> Yes, according to
>> <https://lists.debian.org/debian-devel/2014/05/msg00889.html>, the
>> maintainer of patch-tracker.debian.org has been missing in action
>> until now. I think the website will be off-line in the near future.
>
> OK.
>
>>> “guix challenge” is a simple way to find out which packages are non
>>> deterministic.  That’s how I found about those that can be seen at
>>> <http://bugs.gnu.org/guix> for example.
>>>
>> Does that mean we should have a bug report for every non-reproducible
>> packages? Or should we only have bug reports for popular packages?
>
> It’s OK to have bug reports for any package, as long as people volunteer
> to fix the bugs.  Often it’s a trivial timestamp issue; sometimes it’s
> more involved, like <http://bugs.gnu.org/21918>.
>
> Does Debbugs allow us to add custom tags?  We could have a “determinism”
> tag to facilitate triage.
>
> Ludo’.
>