If it compiles, ship it.

Transcription

1 If it compiles, ship it.

2 Who am I? c and python developer hardware and embedded projects coreboot - open source bootloader LEDE + OpenWrt freelancer

3 pain station?

4 pain station? Who has broken a board?

5 pain station? Who has broken a board? Who had to solder UART?

6 pain station? Who has broken a board? Who had to solder UART? Who had to use JTAG?

7 pain station? Who has broken a board? Who had to solder UART? Who had to use JTAG? Who has soldered the flash chip?

8 pain station? Who has broken a board? Who had to solder UART? Who had to use JTAG? Who has soldered the flash chip? Who has broken 100 devices at once?

9

10 Testing..

11 Testing.. unit tests

12 Testing.. unit tests integration tests on VMs

13 Testing.. unit tests integration tests on VMs test on real devices

14 Testing.. unit tests integration tests on VMs test on real devices human tests

15 build bot git clone git.lede-project.org/source.git make rsync bin/

16 build bot git clone git.lede-project.org/source.git make rsync bin/ you ll get blamed on IRC when you break it

17 travis active on feeds only pull request

18 travis active on feeds only pull request make check make compile

19 travis active on feeds only pull request make check make compile report into the Pull Request

20 uscan checks for updates

21 uscan checks for updates CVEs

22 uscan checks for updates CVEs send mails to maintainer

23 uscan checks for updates CVEs send mails to maintainer Thanks to swalker

24 coverity static anlysis

25 coverity static anlysis finds memleaks

26 coverity static anlysis finds memleaks finds runtime issues

27 coverity static anlysis finds memleaks finds runtime issues randomly updated

28 boardfarm hardware testing network tests (iperf, netperf, nat) setup wifi, memory usage,... no integration

29 LAVA hardware testing distributed api more flexible no tests no integration

30 reproducible builds means: bit-by-bit identical

31 reproducible builds means: bit-by-bit identical enable anyone to verify

32 reproducible builds means: bit-by-bit identical enable anyone to verify provides a trustworthy link between binary and source

33 reproducible builds means: bit-by-bit identical enable anyone to verify provides a trustworthy link between binary and source environment must the same as in the original build

34 reproducible builds means: bit-by-bit identical enable anyone to verify provides a trustworthy link between binary and source environment must the same as in the original build missing ḃuildinfo files

35 reproducible builds means: bit-by-bit identical enable anyone to verify provides a trustworthy link between binary and source environment must the same as in the original build missing ḃuildinfo files how to recreate the exact same build env in the future?

36 reproducible builds means: bit-by-bit identical enable anyone to verify provides a trustworthy link between binary and source environment must the same as in the original build missing ḃuildinfo files how to recreate the exact same build env in the future? [...]

37 What s a good tool? upstream

38 What s a good tool? upstream well integrated

39 What s a good tool? upstream well integrated automated

40 What s a good tool? upstream well integrated automated green and red lights

41 What s a good tool? upstream well integrated automated green and red lights helpful, not painful

42 What s a good tool? upstream well integrated automated green and red lights helpful, not painful maintained by YOU!

43

44

45 Future plans and ideas CVE/CPE tag in packages

46 Future plans and ideas CVE/CPE tag in packages more PKG XYZ checks e.g. license

47 Future plans and ideas CVE/CPE tag in packages more PKG XYZ checks e.g. license reproducible builds

48 Future plans and ideas CVE/CPE tag in packages more PKG XYZ checks e.g. license reproducible builds automated hardware tests

49 Future plans and ideas CVE/CPE tag in packages more PKG XYZ checks e.g. license reproducible builds automated hardware tests automated test of commits before merging

50 Future plans and ideas CVE/CPE tag in packages more PKG XYZ checks e.g. license reproducible builds automated hardware tests automated test of commits before merging your ideas

51 Thank you 390D CF78 8BF9 AA50 4F8F F1E2 C29E 9DA6 A0DF 8604