search

flatcar / sysext-bakery

Recipes for baking systemd-sysext images
Apache License 2.0
59 stars 28 forks source link

[RFE] Reproducible builds #25

Closed pothos closed 12 months ago

pothos commented 12 months ago

Current situation

The binaries consumed from upstream should have the same checksums already but the resulting squashfs does not.

Impact

Local rebuilds and new releases of the same version create new files with different checksums, which is bad for reproducibility and deduplication.

Ideal future situation

For mksquashfs use -reproducible -all-time 0 -root-time 0 -mkfs-time 0 -noappend or something similar with another a fixed time.

pothos commented 12 months ago

Turns out https://reproducible-builds.org/docs/source-date-epoch/ is enough, done in https://github.com/flatcar/sysext-bakery/pull/27