From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7187242631035879424 X-Received: by 2002:a05:600c:510f:b0:3cf:e8f0:ad11 with SMTP id o15-20020a05600c510f00b003cfe8f0ad11mr5049169wms.65.1673410361872; Tue, 10 Jan 2023 20:12:41 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a5d:59c9:0:b0:298:bd4a:4dd9 with SMTP id v9-20020a5d59c9000000b00298bd4a4dd9ls4201800wry.1.-pod-prod-gmail; Tue, 10 Jan 2023 20:12:40 -0800 (PST) X-Google-Smtp-Source: AMrXdXsonGLDszBGm/aDUmDUBLaJCsFJDr4LYRfZvNOnwcWrRy2h0cnBcWFc5VSKsUaz40ssjUaZ X-Received: by 2002:adf:f983:0:b0:2b9:28ef:24d8 with SMTP id f3-20020adff983000000b002b928ef24d8mr12504651wrr.51.1673410360501; Tue, 10 Jan 2023 20:12:40 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1673410360; cv=none; d=google.com; s=arc-20160816; b=JNe+G/arCebqbUWBV33DGRf5w+kpF+X32PVmKkZq3HVbegE09AmjzkJ4yMFfAKDwyA wtstv90l3os22Au96RbOsUAtDvMEos34JRIreS5Uw1Op+y8PtK816I61O0noFrDqSoVt qU2sg2bzXMM2M4cqqr77KtaEbrwRWuTh9BFXVap6ac2JWktXBjmMC7KtRaF3YlSnZqnR OWKsPz3TzD4vF+cskbarFKdJcSY3kq/Aw4C9NZfBczyQkmqGSvAZ0FA8wK3fXrQnj8fo eW3CNWWXSoxpPmOZ91ftYHPpvUk8xN1OFjKi38654koo9jgk9+BUEzPCVDUCJbR8/v6s 27fA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=7uE7dFnz9XmvdggbItxcS0o8lOgGuuHUeM9XvOIe/pM=; b=Ibc7rDBLh1z+xYfvbGTMZI5Kmme1XRoA3F+5A5+IEKLKTdgpBIZuk8bcZWu5xxZKxi g7z/FUe+X5PI14QfQjWS90+hI265sZtvddVj25nnKPLcpidkpcYMLKmR54ikeACzFpQt TmXxL6l6VKIxE17XZV9b5eV3woszLf2TMkypn0WTsBqTz2c3ShmT2o6wP5fUwbxaytv3 K3QYftYRQCF1fGcD0/qCq/Wu1GrpVBWHkFjFLVuP6sGf8OqFsB4/SfWkNa+ePwBX64Zl pUdfxRx1MXdLoT66foMtfALCVrqfWiCFAOmoGhBRF/FqI6bNzy2r2swke1o1leU8t+Pc Hr0g== ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WCs1wQyY; spf=pass (google.com: domain of fm-72506-20230111041240149b1e852550b2e045-p9nqoy@rts-flowmailer.siemens.com designates 185.136.65.226 as permitted sender) smtp.mailfrom=fm-72506-20230111041240149b1e852550b2e045-p9NqOY@rts-flowmailer.siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from mta-65-226.siemens.flowmailer.net (mta-65-226.siemens.flowmailer.net. [185.136.65.226]) by gmr-mx.google.com with ESMTPS id v5-20020a5d59c5000000b00236e8baff63si573321wry.0.2023.01.10.20.12.40 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 10 Jan 2023 20:12:40 -0800 (PST) Received-SPF: pass (google.com: domain of fm-72506-20230111041240149b1e852550b2e045-p9nqoy@rts-flowmailer.siemens.com designates 185.136.65.226 as permitted sender) client-ip=185.136.65.226; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=WCs1wQyY; spf=pass (google.com: domain of fm-72506-20230111041240149b1e852550b2e045-p9nqoy@rts-flowmailer.siemens.com designates 185.136.65.226 as permitted sender) smtp.mailfrom=fm-72506-20230111041240149b1e852550b2e045-p9NqOY@rts-flowmailer.siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: by mta-65-226.siemens.flowmailer.net with ESMTPSA id 20230111041240149b1e852550b2e045 for ; Wed, 11 Jan 2023 05:12:40 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=felix.moessbauer@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=7uE7dFnz9XmvdggbItxcS0o8lOgGuuHUeM9XvOIe/pM=; b=WCs1wQyY4KnfhIungUiP45cdP674naQFkPNOjkkasECiJzB6NSAvqieNe+K/YdLLCgj/7g X4UISl6UrnCxRwT3pYCyGSSyAe+tSxOUOUEhZ96HZSeBb7MU3UrAVX/MC4yUl7ft7jsijnib AFNRZgfvwJgLvLzqxA2fgMlfZud+Q=; From: Felix Moessbauer To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, daniel.bovensiepen@siemens.com, henning.schild@siemens.com, venkata.pyla@toshiba-tsip.com, Felix Moessbauer Subject: [PATCH 06/11] update debian initramfs in deterministic mode Date: Wed, 11 Jan 2023 04:11:35 +0000 Message-Id: <20230111041140.3460393-7-felix.moessbauer@siemens.com> In-Reply-To: <20230111041140.3460393-1-felix.moessbauer@siemens.com> References: <20230111041140.3460393-1-felix.moessbauer@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-72506:519-21489:flowmailer X-TUID: u2APoH2rXZ3m This patch exports the SOURCE_DATE_EPOCH variable in the image install task. By that, update-initramfs is switched into reproducible mode. Before this patch, each trigger of update-initramfs created a new non-deterministic version of the initramfs. Signed-off-by: Felix Moessbauer --- meta/classes/image.bbclass | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass index b86a428..c981c7a 100644 --- a/meta/classes/image.bbclass +++ b/meta/classes/image.bbclass @@ -304,6 +304,13 @@ python() { } +# make generation of initramfs reproducible +rootfs_install_pkgs_install_prepend() { + if [ ! -z "${SOURCE_DATE_EPOCH}" ]; then + export SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH}" + fi +} + # here we call a command that should describe your whole build system, # this could be "git describe" or something similar. # set ISAR_RELEASE_CMD to customize, or override do_mark_rootfs to do something -- 2.34.1