This workshop will give a hands-on look at the tools that we use at the Reproducible Builds project to analyze build products and make them more reproducible. We'll go through how to use tools like diffoscope and reprotest, and give a few exercises for participants to try out. Then we'll do a brief tour of the Debian reproducibility toolchain, pointing out things like SOURCE_DATE_EPOCH and strip-nondeterminism. Finally, we'll pick out an unreproducible package from Debian unstable and apply what we've learned to try to make it reproducible.
Bring a laptop and a project you want to make reproducible, including its build dependencies. We'll install diffoscope and reprotest during the session, but if you're not on a Debian system then you're welcome to test that these programs work on your OS beforehand and submit bugs if they don't.
Speakers: Ximin Luo Vagrant Cascadian Valerie Young