Re: [PATCH 00/11] Make rootfs build reproducible

[Jan Kiszka <jan.kiszka@siemens.com>]

On 11.01.23 05:11, Felix Moessbauer wrote:
> This series finally makes the rootfs generation bit-reproducible
> from debian bullseye on. Parts of it have already been sent
> as individual patches. However, image reproducibility can only
> be achived once all parts are reproducible itself. By that,
> these patches are included in this series as well.
> 
> With this series, the following parts are now fully reproducible.
> This has been tested on the isar-image-base target.
> 
> - custom initramfs (creation and updates)
> - debian initramfs (only updates are relevant)
> - custom kernel (debian kernel is reproducible itself)
> - rootfs itself
> - tar file generation (<image>.tar)
> - ext4 generation (only from bookworm on, more tests needed)
> 
> Other parts that are still not reproducible are:
> 
> - WIC (should be solved in OE already)
> - containers (untested yet)
> 
> Best regards,
> Felix Moessbauer
> Siemens AG
> 
> Felix Moessbauer (10):
>   fix rebuild of rootfs_finalize task
>   rootfs postprocess: clean python cache
>   remove non-portable ldconfig aux-cache
>   generate deterministic clear-text password hash
>   update debian initramfs in deterministic mode
>   create custom initramfs in deterministic mode
>   make deb_add_changelog idempotent
>   deb_add_changelog: set timestamp to valid epoch
>   deb_add_changelog: use SOURCE_DATE_EPOCH
>   make custom linux-image bit-by-bit reproducible
> 
> venkata pyla (1):
>   image.bbclass: fix non-reproducible file time-stamps inside rootfs
> 
>  meta-isar/conf/local.conf.sample              | 10 +++++++++
>  meta/classes/debianize.bbclass                | 22 +++++++++++++------
>  meta/classes/image-account-extension.bbclass  | 10 ++++++++-
>  meta/classes/image.bbclass                    | 21 ++++++++++++++++--
>  meta/classes/initramfs.bbclass                |  5 +++++
>  meta/classes/rootfs.bbclass                   | 13 +++++++++++
>  .../linux/files/debian/isar/build.tmpl        |  1 +
>  .../linux/files/debian/rules.tmpl             | 14 +++++++++++-
>  meta/recipes-kernel/linux/linux-custom.inc    |  2 ++
>  9 files changed, 87 insertions(+), 11 deletions(-)
> 

Cool!

Jan

-- 
Siemens AG, Technology
Competence Center Embedded Linux