Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Reproducible release tarballs #1550

Open
wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Reproducible release tarballs #1550

Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
17b1a28
build: Sort distributekernel METALOG when using -DNO_ROOT
patmaddox Dec 13, 2024
a6fbdd7
build: Set METALOG time when using -DWITH_REPRODUCIBLE_BUILD
patmaddox Dec 13, 2024
a5eb00d
build: Wait to build mandoc.db when making distributeworld
patmaddox Dec 13, 2024
6bc903d
release: Document reproducible release tarballs
patmaddox Dec 14, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions share/man/man7/release.7
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -283,6 +283,16 @@ This is intended for use only when
.Fa /usr/ports
is expected to exist by alternative means.
.El
.Sh REPRODUCIBLE BUILDS
Different builders can produce bit-identical release tarballs using
.Va PKG_TIMESTAMP
and
.Va REVISION :
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We probably want to differentiate PKG_TIMESTAMP from REVISION -- the former is an actual (literal) env variable used by Makefile*, but the latter is a placeholder in the example command below. I'm not sure off hand what the markup for that should be.

I wonder if we should have newvers.sh collect the commit time (e.g. from git show -s --format=%ct) and have the default SOURCE_DATE_EPOCH derived from that.

.Bd -literal -offset indent
git checkout <REVISION>
make -DWITH_REPRODUCIBLE_BUILD buildworld buildkernel
make -C release -DWITH_REPRODUCIBLE_BUILD PKG_TIMESTAMP=<TIMESTAMP> packagesystem
.Ed
.Sh EMBEDDED BUILDS
The following
.Fa release.conf
Expand Down