Re: [PATCH v3 00/10] Make rootfs build reproducible

[Uladzimir Bely <ubely@ilbers.de>]

In mail from понедельник, 16 января 2023 г. 06:35:42 +03 user Felix Moessbauer 
wrote:
> This series finally makes the rootfs generation bit-reproducible
> from debian bullseye on. Parts of it have already been sent
> as individual patches. However, image reproducibility can only
> be achived once all parts are reproducible itself. By that,
> these patches are included in this series as well.
> 
> With this series, the following parts are now fully reproducible.
> This has been tested on the isar-image-base target.
> 
> - custom initramfs (creation and updates)
> - debian initramfs (only updates are relevant)
> - custom kernel (debian kernel is reproducible itself)
> - rootfs itself
> - tar file generation (<image>.tar)
> - ext4 generation (only from bookworm on, more tests needed)
> 
> Other parts that are still not reproducible are:
> 
> - WIC (should be solved in OE already)
> - containers (untested yet)
> - SDK (note added in v3)
> 
> Changes since v2:
> 
> - fix issue issue when SOURCE_DATE_EPOCH is not defined
> - replaced "fix rebuild of rootfs_finalize task" with Hennings version
> - minor style fix in image-account-extension
> 
> Changes since v1:
> 
> - dropped patch "deb_add_changelog: use SOURCE_DATE_EPOCH"
> - fixed typo in "generate deterministic clear-text password hash"
> - added comment about why SOURCE_DATE_EPOCH must only be set for
>   image rootfs but not for other rootfs'.
> 
> Best regards,
> Felix Moessbauer
> Siemens AG
> 
> Felix Moessbauer (8):
>   rootfs postprocess: clean python cache
>   remove non-portable ldconfig aux-cache
>   generate deterministic clear-text password hash
>   update debian initramfs in deterministic mode
>   create custom initramfs in deterministic mode
>   make deb_add_changelog idempotent
>   deb_add_changelog: set timestamp to valid epoch
>   make custom linux-image bit-by-bit reproducible
> 
> Henning Schild (1):
>   image: make sure do_rootfs_finalize can run multiple times
> 
> venkata pyla (1):
>   image.bbclass: fix non-reproducible file time-stamps inside rootfs
> 
>  meta-isar/conf/local.conf.sample              | 10 +++++
>  meta/classes/debianize.bbclass                | 20 ++++++----
>  meta/classes/image-account-extension.bbclass  | 10 ++++-
>  meta/classes/image.bbclass                    | 39 +++++++++++++++----
>  meta/classes/initramfs.bbclass                |  5 +++
>  meta/classes/rootfs.bbclass                   | 13 +++++++
>  .../linux/files/debian/isar/build.tmpl        |  1 +
>  .../linux/files/debian/rules.tmpl             | 14 ++++++-
>  meta/recipes-kernel/linux/linux-custom.inc    |  2 +
>  9 files changed, 98 insertions(+), 16 deletions(-)

Applied to next, thanks.