From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 7187242631035879424 X-Received: by 2002:a5d:5d11:0:b0:242:14bb:439e with SMTP id ch17-20020a5d5d11000000b0024214bb439emr3443432wrb.191.1673840202420; Sun, 15 Jan 2023 19:36:42 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a05:600c:1d93:b0:3cf:9be3:73dd with SMTP id p19-20020a05600c1d9300b003cf9be373ddls6865303wms.3.-pod-canary-gmail; Sun, 15 Jan 2023 19:36:41 -0800 (PST) X-Google-Smtp-Source: AMrXdXtAUEdDN27KysZwgwQYo45J2pmX8/8ejIrO8GVNo9PdhM+jyFodHHxTLDBSlOAb6fifRxH2 X-Received: by 2002:a05:600c:16c4:b0:3da:f475:6480 with SMTP id l4-20020a05600c16c400b003daf4756480mr4731252wmn.7.1673840201168; Sun, 15 Jan 2023 19:36:41 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1673840201; cv=none; d=google.com; s=arc-20160816; b=jgu1viiyd7yZBbRtpDybnIA9QfNdq1XT6lhSYf7TS2x7MhMem7ympWPYVaxCyrHHjx ww47XTnsNX6ZtVRGssEnlxyrUlGanvLvqrk5Zp5xPKf9HhX+BM5hz4GUmO1Ar1zGQbC4 sMy0KOH2Y8BXLIpHRZ3I3AVxlTNWLsBLd9AAsUHT9lrUl3QSRigJyWPYz1kO+zfK+/wU c3sCjEF/WiFPaQ3y6APKCNLbE+bDmO8BCvg0FbKRq0uWfzaNSTLqLvqtbMM8iv8b0dKh YVPgvyep4byt/rr4wKe7bH+m47sI1ck4AnGRt2vp8RaqF6airWOkc9i2D8DC/7hGthkg QlSA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=feedback-id:content-transfer-encoding:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=16ALNF12WdMW/+gEbN2TsPAW/weLCx3JBjJeVkaRH+8=; b=0A/RFdaIhdwP+fbYeopmBaHU9Jrw7Aqf42Nx2KXee1n14uCxoInG4prJOrOA7XGkRJ cbAHarssAVjIOKcUSWJKqCVV/cbKUIbOTmO95glNCvRDm5TA1HAtn08mB1vY599JKXLt pLZZkeeb9Fmu03DvgsqlVwV8lNxUQEEuF24YAb7L4pAZwJSQoKPUrn/3TsTJtKboza8/ cnsT12+ANsQvKlsWf0WMBy/6Rng2/dWeUqsOw9qhnBBKastyQt5o94+DtnxX8CQLywpZ oPxhT8RduvcPjRpWDSWPcdxNjcnX1H/fsYCOpupVF7TetEOxtNUr0He5hNWoRIcRDsAu UDUA== ARC-Authentication-Results: i=1; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=ZR2LzVrc; spf=pass (google.com: domain of fm-72506-2023011603364023ebd5b7d6811d9046-j2gh0a@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-72506-2023011603364023ebd5b7d6811d9046-J2GH0a@rts-flowmailer.siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Return-Path: Received: from mta-64-227.siemens.flowmailer.net (mta-64-227.siemens.flowmailer.net. [185.136.64.227]) by gmr-mx.google.com with ESMTPS id d10-20020a5d644a000000b002bddc018216si430371wrw.1.2023.01.15.19.36.41 for (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Sun, 15 Jan 2023 19:36:41 -0800 (PST) Received-SPF: pass (google.com: domain of fm-72506-2023011603364023ebd5b7d6811d9046-j2gh0a@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) client-ip=185.136.64.227; Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=fm1 header.b=ZR2LzVrc; spf=pass (google.com: domain of fm-72506-2023011603364023ebd5b7d6811d9046-j2gh0a@rts-flowmailer.siemens.com designates 185.136.64.227 as permitted sender) smtp.mailfrom=fm-72506-2023011603364023ebd5b7d6811d9046-J2GH0a@rts-flowmailer.siemens.com; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=siemens.com Received: by mta-64-227.siemens.flowmailer.net with ESMTPSA id 2023011603364023ebd5b7d6811d9046 for ; Mon, 16 Jan 2023 04:36:40 +0100 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; s=fm1; d=siemens.com; i=felix.moessbauer@siemens.com; h=Date:From:Subject:To:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding:Cc:References:In-Reply-To; bh=16ALNF12WdMW/+gEbN2TsPAW/weLCx3JBjJeVkaRH+8=; b=ZR2LzVrclqTmbxcCEbNUEsJHTImdgAtyYEenb9+i4tlo+U5jYCMQyf7+HYBa8TTdWeCU3k OFxlowuVtk0GHznU2/1SoB5w4Kv9VGmboEF4BHpx1mabqCCJNWJ4eBwukSy8fViEL9AsJFlX KNNI3gIKgp+0nLHkDV3YVmJ1AOrOk=; From: Felix Moessbauer To: isar-users@googlegroups.com Cc: jan.kiszka@siemens.com, daniel.bovensiepen@siemens.com, henning.schild@siemens.com, venkata.pyla@toshiba-tsip.com, Felix Moessbauer Subject: [PATCH v3 06/10] update debian initramfs in deterministic mode Date: Mon, 16 Jan 2023 03:35:48 +0000 Message-Id: <20230116033552.139048-7-felix.moessbauer@siemens.com> In-Reply-To: <20230116033552.139048-1-felix.moessbauer@siemens.com> References: <20230116033552.139048-1-felix.moessbauer@siemens.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Flowmailer-Platform: Siemens Feedback-ID: 519:519-72506:519-21489:flowmailer X-TUID: rAy/pl9kgjgD This patch exports the SOURCE_DATE_EPOCH variable in the image install task. By that, update-initramfs is switched into reproducible mode. Before this patch, each trigger of update-initramfs created a new non-deterministic version of the initramfs. Signed-off-by: Felix Moessbauer --- meta/classes/image.bbclass | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass index 6a3f99e..e59767e 100644 --- a/meta/classes/image.bbclass +++ b/meta/classes/image.bbclass @@ -304,6 +304,17 @@ python() { } +# make generation of initramfs reproducible +# note: this function is shared across multiple rootfs, but we only want to make the +# image rootfs reproducible. Otherwise changes of SOURCE_DATE_EPOCH would +# invalidate the SSTATE entries for most packages, even if they don't use the +# global SOURCE_DATE_EPOCH variable. +rootfs_install_pkgs_install_prepend() { + if [ ! -z "${SOURCE_DATE_EPOCH}" ]; then + export SOURCE_DATE_EPOCH="${SOURCE_DATE_EPOCH}" + fi +} + # here we call a command that should describe your whole build system, # this could be "git describe" or something similar. # set ISAR_RELEASE_CMD to customize, or override do_mark_rootfs to do something -- 2.34.1