Re: Missing Debian Live Kde Testing iso

Roland Clobus <[email protected]> Thu, 1 Jan 2026 10:45:44 +0100
Newsgroups gmane.linux.debian.alioth.reproducible-builds,gmane.linux.debian.devel.live,gmane.linux.debian.devel.cd
Message-ID <[email protected]>
Hello all,

On 31/12/2025 17:38, Holger Levsen wrote:
> On Mon, Dec 29, 2025 at 12:22:21PM +0100, Cyril Brulebois wrote:
>> That doesn't seem to be a problem with other environments, possibly
>> because that hook exits early if vlc components aren't spotted? Why
>> disorderfs cannot be installed is likely due to its being missing from
>> testing at the moment:
>> See: https://bugs.debian.org/1084451
> 
> indeed. I'm just surprised disorderfs is to be installed for this image
> at all...

I'm the one who introduced the dependency on disorderfs for the KDE live 
image (and Debian Junior live as well). disorderfs is required because 
VLC creates a file in the live image whose content depends on the 
directory order (See 
https://salsa.debian.org/live-team/live-build/-/blob/master/examples/hooks/reproducible/2009-reproducible-vlc.hook.chroot)

Due to the fuse2 to fuse3 transition, disorderfs has a FTBFS (#1084451) 
and therefore it was removed from testing on 2025-12-04.

I tried to write a fix, but that didn't work 
(https://salsa.debian.org/reproducible-builds/disorderfs/-/merge_requests/8). 
It builds without errors but does not mount properly.

Since only KDE for forky is affected, and sid still builds reproducibly, 
I've not been too worried that we would end up with a forky release 
without KDE.

I think that requiring a reproducible build (after reproducibility has 
been reached) is the way forward. So a fix could be one of the following:

A) Make the use of readdir in vlc-cache-gen reproducible. I had a peek 
at the code a few years ago, and it didn't look easy
B) Fix disorderfs and bring it back to testing. The tool is valuable to 
make builds reproducible.
C) Investigate whether the cached file is actually required inside the 
live image and could be re-generated on-the-fly

While a fix is pending (and needs a few more weeks), we could create a 
bug report for this issue against debian-live and mention this issue in 
the header text of 
https://get.debian.org/images/weekly-live-builds/amd64/iso-hybrid/

With kind regards,
Happy New Year,
Roland Clobus
Maintainer of the live images

_______________________________________________
Reproducible-builds mailing list
Reproducible-builds-wVTzQnVv9Y8Rm1jG9FmulZdwIE86Xf0q@public.gmane.org
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/reproducible-builds
OpenPGP_signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=N8yz
-----END PGP SIGNATURE-----