Support reproducible builds (except packages)

See docker-library/official-images issue 16044 - `ARG SOURCE_DATE_EPOCH` is added. The argument value is consumed by the build scripts to make the binary reproducible. - For Debian, `/var/log/*` is removed as they contain timestamps - For Debian, `/var/cache/ldconfig/aux-cache` is removed as they contain inode numbers, etc. - For Alpine, virtual package versions are pinned to "0" to eliminate the timestamp-based version numbers that appear in `/etc/apk/world` and `/lib/apk/db/installed` > [!NOTE] > The following topics are NOT covered by this commit: > > - To reproduce file timestamps in layers, BuildKit has to be executed with > `--output type=<TYPE>,rewrite-timestamp=true`. > Needs BuildKit v0.13 or later. > > - To reproduce the base image by the hash, reproducers may: > - modify the `FROM` instruction in Dockerfile manually > - or, use the `CONVERT` action of source policies to replace the base image. > <https://github.com/moby/buildkit/blob/v0.13.2/docs/build-repro.md> > > - To reproduce packages, see the `RUN` instruction hook proposed in > moby/buildkit issue 4576 Signed-off-by: Akihiro Suda <[email protected]>
docker-library · May 2, 2024 · 5a5b457 · 5a5b457
1 parent 024ece8
commit 5a5b457
Show file tree

Hide file tree

Showing 15 changed files with 136 additions and 24 deletions.
diff --git a/2.0/Dockerfile b/2.0/Dockerfile
diff --git a/2.0/alpine/Dockerfile b/2.0/alpine/Dockerfile
diff --git a/2.2/Dockerfile b/2.2/Dockerfile
diff --git a/2.2/alpine/Dockerfile b/2.2/alpine/Dockerfile
diff --git a/2.4/Dockerfile b/2.4/Dockerfile
diff --git a/2.4/alpine/Dockerfile b/2.4/alpine/Dockerfile
diff --git a/2.6/Dockerfile b/2.6/Dockerfile
diff --git a/2.6/alpine/Dockerfile b/2.6/alpine/Dockerfile
diff --git a/2.8/Dockerfile b/2.8/Dockerfile
diff --git a/2.8/alpine/Dockerfile b/2.8/alpine/Dockerfile