Hi,

I did some nice patches this month. I managed to understand some rust issues that were caused by read_dir calls in vendored libraries for lzma and zstd.

last month's status:
https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/XQQ44R5MZ2HUKYXDZXUOEMTNLRFQVFBJ/

Last months' reproducible builds project updates (including my work):
https://reproducible-builds.org/reports/2022-10/

I uploaded https://rb.zq1.de/compare.factory-20221103/ today

https://rb.zq1.de/spec/glossar.txt explains the meaning of below values:
total-packages: 14578 (+45)
build-tried: 14565 (+45)
build-failed: 45 (+10)
build-n-a: 227 (-3)
build-succeeded: 14294 (+39)
build-official-failed+na: 17 (-218)
build-compare-failed: 575 (+13)
build-compare-succeeded: 13719 (+26)
verify-failed: 419 (-3)
verified-semi-reproducible: 11677 (-22)
bit-by-bit-identical: 13490 (+23)
not-bit-by-bit-identical: 800 (+12)
not-bit-by-bit-identicalcheck: 804 (+16)

https://rb.zq1.de/compare.factory-20221103/graph.png
shows the change over time

https://rb.zq1.de/compare.factory-20221103/unreproduciblerings.txt
lists very unreproducible core packages (bootstrap+DVD)

Of the badly unreproducible packages,
4 were in ring0
78 were in ring1

That makes it 82/3316 => 2.47 %
which is below the overall average of
575/14294 => 4.02 %

800/14294 => 5.60 % of packages are not perfectly reproducible
==> ./python-reconfigure/.rb.notes <==
python3 toolchain pyc ASLR+filesys

==> ./kubernetes1.24/.rb.notes <==
= https://github.com/kubernetes/kubernetes/issues/110928 random tmpdir unknown/random


==> ./chezmoi/.rb.notes <==
go1.19 parallelism

==> ./qt6-positioning/.rb.notes <==
/usr/lib64/qt6/examples/positioning/weatherinfo/weatherinfo differs in assembler output


==> ./waf/.rb.notes <==
time-based .pyc

==> ./netgen/.rb.notes <==
time-based pyc /usr/lib64/python3.10/site-packages/netgen/__pycache__/config.cpython-310.pyc
from "/usr/bin/python3", "-m", "pybind11_stubgen", "--no-setup-py", "--ignore-invalid=all", "netgen"

==> ./libnvme/.rb.notes <==
=> SR 1032570 date
+++ new//usr/share/man/man2/nvmf_update_config.2        2022-09-01 12:23:50.953451512 +0000

==> ./vectorscan/.rb.notes <==
=> SR 1032506 CPU -march=
/usr/bin/unit-hyperscan differs in assembler output

==> ./himalaya/.rb.notes <==
random | rust
+++ new /usr/bin/himalaya (objdump)

==> ./grass/.rb.notes <==
#=> https://github.com/OSGeo/grass/pull/263 host
#=> https://github.com/OSGeo/grass/pull/247 sort readdir + dict

==> ./fastjet-contrib/.rb.notes <==
=> SR 1010423 sort find
=> https://github.com/alisw/fastjet/pull/6 sort find / readdir filesys order

==> ./ldap-sdk/.rb.notes <==
javadoc toolchain

==> ./rustup/.rb.notes <==
= https://github.com/rust-lang/rustup/issues/2972 filesys
https://github.com/alexcrichton/xz2-rs/blob/master/lzma-sys/build.rs#L77

==> ./python-khal/.rb.notes <==
=> https://github.com/pimutils/khal/pull/1185 flaky FTBFS
found range good=2170735352 bad=2170737277 (2038-10-15T06:34:37)

==> ./texlab/.rb.notes <==
ASLR rust


==> ./asymptote/.rb.notes <==
=> https://github.com/vectorgraphics/asymptote/pull/351 date ; remaining pdf issue


==> ./bin86/.rb.notes <==
date 2038-overflow


==> ./translate-toolkit/.rb.notes <==
python3 toolchain pyc ASLR

==> ./google-noto-fonts/.rb.notes <==
/usr/share/fonts/truetype/Arimo-BoldItalic.ttf
header diff

==> ./ansible/.rb.notes <==
python3 toolchain pyc ASLR

==> ./plasma5-workspace/.rb.notes <==
parallelism


==> ./mirrormagic/.rb.notes <==
=> SR 1005891 parallelism/date


==> ./apache-commons-dbcp/.rb.notes <==
javadoc toolchain

==> ./weblate/.rb.notes <==
= https://bugzilla.opensuse.org/show_bug.cgi?id=1204884 FTBFS/stuck
osc build --noservice --clean --vm-type=kvm standard

==> ./helmfile/.rb.notes <==
=> https://github.com/helmfile/helmfile/pull/486 date


==> ./rust-keylime/.rb.notes <==
= missing https://github.com/gyscos/zstd-rs/commit/6fe67d6a - needs release
rust/LLVM issue

==> ./kyverno/.rb.notes <==
go1.19 .note.go.buildid parallelism

==> ./gosec/.rb.notes <==
=> https://github.com/securego/gosec/pull/887 date
+++ new /usr/bin/gosec (objdump)