Open pietrushnic opened 3 weeks ago
The question is its importance; according to reproducible builds, the number of attributes related to the built environment should be limited. The lack of a reproducible build environment is a significant issue here because we cannot be sure that we will get the same build environment in the future; for now, we are relying on the fact that Dockerhub hosts coreboot-sdk images.
What can we do here?
As of version
2024-03-30_cccada28f7
, SeaBIOS is sensitive to information about the toolchain, which leads to a lack of reproducibility across toolchain versions (we are talking here coreboot-sdk/dasharo-sdk). The following log comes from building SeaBIOS using two different toolchains.