*** toscalix has joined #trustable | 08:53 | |
*** locallycompact has joined #trustable | 09:33 | |
*** locallycompact has quit IRC | 10:49 | |
* CTtpollard ponders what's best to try & focus on | 11:05 | |
CTtpollard | (which doesn't involve wrangling gem dependency hell) | 11:17 |
---|---|---|
*** locallycompact has joined #trustable | 11:48 | |
paulsherwood | CTtpollard: i was going to ask you what you'd decided :) | 12:34 |
CTtpollard | still trying to get a foothold on something | 13:12 |
CTtpollard | preferably as part of an on-going project | 13:14 |
paulsherwood | ack | 13:20 |
paulsherwood | what have you considered so far? | 13:20 |
paulsherwood | (even including the gem hell) | 13:20 |
CTtpollard | I started looking at gollum & their wip | 13:22 |
CTtpollard | which once deployable has some nice changes such as support for the ace editor (Along with yaml frontmatter rendering) however it also removes the liveviewer | 13:24 |
CTtpollard | Didn't get much in response from #gitlab | 13:24 |
CTtpollard | freedesktop sounds interesting from the snippets of info I can find | 13:24 |
paulsherwood | CTtpollard: ok, well i suggest the most useful thing would be help make freedesktop-sdk reproducible | 13:27 |
paulsherwood | ie bit-for-bit | 13:27 |
paulsherwood | and if that is too easy, then start progressing up the gnome stack :) | 13:28 |
* CTtpollard was impressed at the latest stats from debian reproducible, after not looking for over a year | 13:35 | |
paulsherwood | CTtpollard: that's probably a false indicator | 14:03 |
paulsherwood | the remaining ones are the hardest | 14:03 |
CTtpollard | oh definitely | 14:04 |
paulsherwood | so if you're up for a challenge, #freedesktop-sdk, #reproducible-builds on freenode, #buildstream on gimpnet | 14:04 |
paulsherwood | (fixing reproducible issues is strangely hard... the bugs are often weird) | 14:05 |
paulsherwood | s/reproducible/reproducibility/ | 14:05 |
CTtpollard | I'm already there :) | 14:06 |
CTtpollard | & even weirder when CI comes into the mix | 14:06 |
paulsherwood | yup | 14:07 |
paulsherwood | also, i have a slight fear that the buildstream folks have maybe forgotten/missed some of the implications for trustability | 14:08 |
paulsherwood | but i hope i'm wrong | 14:08 |
paulsherwood | (e.g. i think they are building from upstreams direct. no sane production project would do that... so how easy is it to continue consuming any buildstream 'reference distro' while making guarantees and not trusting the internet) | 14:19 |
CTtpollard | Yeh you mentioned trove usage before | 14:32 |
CTtpollard | yocto have made some improvements since I was actively maintaining a poky based system too | 14:36 |
paulsherwood | ack | 14:36 |
CTtpollard | (99% reproducible rate claimed on building a core minimal system of debian packages) | 14:38 |
CTtpollard | although not merged yet | 14:38 |
CTtpollard | I presume that matches the debian success rates for the same package with no offenders generated by the buildsystem | 14:39 |
paulsherwood | ok, first task... establish the equivalent metric for freedesktop-sdk | 14:39 |
paulsherwood | preferably as part of their ci :) | 14:40 |
CTtpollard | yep, only considering yocto here as I'm trying to gather what the current conversion is from the existing system | 14:41 |
CTtpollard | (which is yocto based) | 14:41 |
paulsherwood | oh, interesting - i didn't realise that | 14:44 |
CTtpollard | https://github.com/flatpak/freedesktop-sdk-base it may have been fully replaced now, I'm just going off the wiki here | 14:45 |
paulsherwood | https://gitlab.com/freedesktop-sdk/ | 14:48 |
*** toscalix has quit IRC | 16:54 | |
*** locallycompact has quit IRC | 17:01 | |
*** CTtpollard has quit IRC | 17:59 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!