RE: [PATCH 00/11] Make rootfs build reproducible

[<Venkata.Pyla@toshiba-tsip.com>]

>-----Original Message-----
>From: isar-users@googlegroups.com <isar-users@googlegroups.com> On
>Behalf Of Felix Moessbauer
>Sent: 11 January 2023 09:41
>To: isar-users@googlegroups.com
>Cc: jan.kiszka@siemens.com; daniel.bovensiepen@siemens.com;
>henning.schild@siemens.com; pyla venkata(ＴＳＩＰ TMIEC ODG Porting)
><Venkata.Pyla@toshiba-tsip.com>; Felix Moessbauer
><felix.moessbauer@siemens.com>
>Subject: [PATCH 00/11] Make rootfs build reproducible
>
>This series finally makes the rootfs generation bit-reproducible from debian
>bullseye on. Parts of it have already been sent as individual patches. However,
>image reproducibility can only be achived once all parts are reproducible itself.
>By that, these patches are included in this series as well.
>
>With this series, the following parts are now fully reproducible.
>This has been tested on the isar-image-base target.
>
>- custom initramfs (creation and updates)
>- debian initramfs (only updates are relevant)
>- custom kernel (debian kernel is reproducible itself)
>- rootfs itself
>- tar file generation (<image>.tar)
>- ext4 generation (only from bookworm on, more tests needed)
>
>Other parts that are still not reproducible are:
>
>- WIC (should be solved in OE already)
>- containers (untested yet)

This is great work, thank you.

>
>Best regards,
>Felix Moessbauer
>Siemens AG
>
>Felix Moessbauer (10):
>  fix rebuild of rootfs_finalize task
>  rootfs postprocess: clean python cache
>  remove non-portable ldconfig aux-cache
>  generate deterministic clear-text password hash
>  update debian initramfs in deterministic mode
>  create custom initramfs in deterministic mode
>  make deb_add_changelog idempotent
>  deb_add_changelog: set timestamp to valid epoch
>  deb_add_changelog: use SOURCE_DATE_EPOCH
>  make custom linux-image bit-by-bit reproducible
>
>venkata pyla (1):
>  image.bbclass: fix non-reproducible file time-stamps inside rootfs
>
> meta-isar/conf/local.conf.sample              | 10 +++++++++
> meta/classes/debianize.bbclass                | 22 +++++++++++++------
> meta/classes/image-account-extension.bbclass  | 10 ++++++++-
> meta/classes/image.bbclass                    | 21 ++++++++++++++++--
> meta/classes/initramfs.bbclass                |  5 +++++
> meta/classes/rootfs.bbclass                   | 13 +++++++++++
> .../linux/files/debian/isar/build.tmpl        |  1 +
> .../linux/files/debian/rules.tmpl             | 14 +++++++++++-
> meta/recipes-kernel/linux/linux-custom.inc    |  2 ++
> 9 files changed, 87 insertions(+), 11 deletions(-)
>
>--
>2.34.1
>
>--
>You received this message because you are subscribed to the Google Groups
>"isar-users" group.
>To unsubscribe from this group and stop receiving emails from it, send an email
>to isar-users+unsubscribe@googlegroups.com.
>To view this discussion on the web visit
>https://groups.google.com/d/msgid/isar-users/20230111041140.3460393-1-
>felix.moessbauer%40siemens.com.