Hello, A little update about this project we have been tinkering about. First thing first, a tracking ticket has been opened against the Taskotron project to follow the progress of this effort: https://phab.qadevel.cloud.fedoraproject.org/T490. Just so you remember the big picture, for each stable package named N-stable-V-R, whenever a new update N-update-V-R is submitted, we want to compare the binaries (mostly C and C++ libraries) to see if there has been any harmful ABI change. If there has been any, then the update will not be pushed *automatically* to the stable repository when it reaches the karma threshold; rather, it will require a conscious decision by the maintainer. A number of things need to fall into place before we can actually have a working system. After discussing this in the audit trail of the tracking issue and on IRC, we are now heading toward triggering the ABI checks each time someone submits a build N-update-V-R to Koji. Whenever the information of a new build is broadcasted on the fedmsg bus, a dedicated Taskotron task kicks off and performs the following steps: 1/ retrieve the relevant N-stable-V-R package 2/ retrieve the debug info packages for N-stable-V-R and N-update-V-R 3/ perform an ABI comparison between N-stable-V-R and N-update-V-R, using their debug info as necessary input. 4/ store the result of the comparison in the ResultDB database. Then, when the package N-udpate-V-R is later submitted to Bodhi, the update creation process would query ResultDB for the result of the relevant ABI check that happened at build time. The decision to allow an automatic push of the update to stable will depend on the result of that query. For this system to start working, we need a set of things to fall into place. As noted in the tracking issue that I linked to above, we need to: * Extend koji directive to allow the download of debug info package. https://phab.qadevel.cloud.fedoraproject.org/T494. This is done now. * Support "latest stable build" with koji directive. https://phab.qadevel.cloud.fedoraproject.org/T491. * Have an abipkdiff tool, from the libabigail project that would compare binaries embedded in two RPMs and produce a report. This is tracked by https://sourceware.org/bugzilla/show_bug.cgi?id=18426. The tool recently started to work in the branch ksinny/abipkgtool. We are still working on it, but it can be used for prototyping already. * Have a Taskotron task that will use all of the above to perform the ABI comparison and store the result in ResultDB. Note that in the beginning, we'll perform only a basic kind of comparison: checking that no public symbols of functions and variables present in the stable version disappeared in the update. Obviously, the Libabigail tools can perform more sophisticated comparison involving the full signature of the functions and variables, including their sub-types. But we think that should be left for later when the whole system works for the basic kind of ABI checks first. I still need to file a tracking issue for this. I guess I can file it to Phabricator instance of Taskotron and assign it to myself? * Write a system wide change proposal for this project. So this is where we stand at the moment. So if you have any comment, please do not hesitate. And more importantly, if you feel like you can land us a helping hand, that would be greatly appreciated because obviously, this is far far far from being a one person project. I'd like to thank those who stepped up so far: Tim Flink, Kamil Páral, Martin Krizek, Sinny Kumari and Stephen Gallagher. Thank you for reading so far. Cheers, -- Dodji -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
