Holger Levsen

Holger Levsen has been a Debian user since almost 30 years and an official Debian member since 2007. In the years since 2001 he has been contributing to Debian in many areas, probably most notably with the DebConf (video) team, piuparts.debian.org and Reproducible Builds, which has become his main focus in 2014.

Accepted Talks:

Chameleon - trying out Sequoia the easy way - OpenPGP written in Rust

This short talk will explain to you how (when) to run:

  • apt install gpg-from-sq
  • apt install gpg-sq

and similar with s#gpg#gpgv#.

src:rust-sequoia-chameleon-gnupg is available in unstable (and by the time of the MiniDebConf, hopefully in trixie too) and in this short talk I will explain how you can use it (almost) as a full drop-in replacement today.

Under the hood, the chameleon is sequoia and while you can use OpenPGP like you’ve done it “forever”, there’s more.

preserving *other* build artifacts

Currently when building (official) Debian packages, there are 3 kinds of build artifacts, in this workshop we’ll be going to brainstorm and design a 4th type, which maybe needs a better wiki page name than https://wiki.debian.org/BuildArtifacts so let’s explain the 3 current types first:

  1. .deb files, the main results of every (successful) package build
  2. build logs, there’s one per package build per arch
  3. autopackage test logs and results, these have nothing to do with the actual build really.

The 4th type of build artifacts are used eg by src:binutils and src:gccX packages and today are stored in .debs making the builds of these important core packages unreproducible, shiver.

Please read https://wiki.debian.org/BuildArtifacts to learn more about this issue and possible ways out. And then please join this workshop if this topic interests you!