Skip to content
This repository has been archived by the owner on Jun 10, 2024. It is now read-only.

v0.3.0
Compare
Choose a tag to compare
@github-actions github-actions released this 14 Jan 23:13
· 96 commits to master since this release
v0.3.0
This tag was signed with the committer’s verified signature.
AkihiroSuda Akihiro Suda
GPG key ID: 49524C6F9F638F1A
Verified
Learn about vigilant mode.
c20c048
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

The examples images are now reproducible with BuildKit v0.11.0 🎉

docker run -d --name buildkitd --privileged moby/buildkit:v0.11.0
docker cp buildkitd:/usr/bin/buildctl /usr/local/bin/buildctl
export BUILDKIT_HOST=docker-container://buildkitd

examples/gcc

$ ./hack/test-dockerfile-repro.sh examples/gcc
...
[INFO] ===== Testing reproducibility of oci tar archives =====
+ sha256sum /tmp/df-repro/1673737584/0-oci.tar /tmp/df-repro/1673737584/1-oci.tar
+ tee /tmp/df-repro/1673737584/SHA256SUMS-oci-tar
0a3bcfebc67c85cac40e9c2cadee7b2b2b5077dc5ff985d8c396f008df818690  /tmp/df-repro/1673737584/0-oci.tar
0a3bcfebc67c85cac40e9c2cadee7b2b2b5077dc5ff985d8c396f008df818690  /tmp/df-repro/1673737584/1-oci.tar
...

examples/hello

$ ./hack/test-dockerfile-repro.sh examples/hello

...
[INFO] ===== Testing reproducibility of oci tar archives =====
+ sha256sum /tmp/df-repro/1673737271/0-oci.tar /tmp/df-repro/1673737271/1-oci.tar
+ tee /tmp/df-repro/1673737271/SHA256SUMS-oci-tar
ae125287b6766e18f8916fde1b54ccca0fe5144b44945488e773334c6903fd19  /tmp/df-repro/1673737271/0-oci.tar
ae125287b6766e18f8916fde1b54ccca0fe5144b44945488e773334c6903fd19  /tmp/df-repro/1673737271/1-oci.tar
...

GitHub Actions log (available for 90 days): https://github.com/reproducible-containers/repro-get/actions/runs/3920344680/jobs/6701913966

image

About the files

  • repro-get-<VERSION>-linux-amd64: Regular binary for x86_64
  • repro-get-<VERSION>-linux-amd64.upx: Compressed binary for x86_64
  • repro-get-<VERSION>.go-mod-vendor.tar.gz: Backup of go mod vendor (Not needed for most people)

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: https://github.com/reproducible-containers/repro-get/actions/runs/3920653128

The sha256sum of the SHA256SUMS file itself is f9a6e19740a372e5f061985a273e46962e8a9542a1f362b8f611d5cbf807f55f .

Assets 16
Loading