Questions tagged [reproducible-build]
The reproducible-build tag has no summary.
18 questions
1
vote
1
answer
163
views
Are all packages necessarily reproducible on GUIX?
By default, what will happen if I try to install a package with GUIX and it's not bit-for-bit reproducible?
I'm very concerned about the state of package managers in 2024 (and the risks of supply ...
- 392
1
vote
1
answer
348
views
How to ensure that NixOS configuration will build or use the same package versions in the future?
In Software packaging and distribution for LHCb using Nix, the authors write:
In order to facilitate this use, software must be stable for long
periods; much longer than even Long Term Support ...
- 401
1
vote
0
answers
490
views
build Debian package "chromium 108" on Debian Buster
I am trying to build chromium 108 for Debian Buster. The package only exists for Debian Bullseye, so on my Debian Buster build machine, I need to change the /etc/apt/sources.list to bullesyse and ...
- 758
1
vote
1
answer
457
views
How to fix error building a Docker image with Nix using a pinned revision
I'm trying to build a Docker image with Nix at a pinned revision. The file works when it looks like this:
{ pkgs ? import <nixpkgs> { }
}:
pkgs.dockerTools.buildImage {
...
But fails when it ...
- 395
1
vote
1
answer
106
views
Minor kernels updates applicability for people running custom kernel builds
Imagine the situation.
You're running a custom kernel which you compiled from the vanilla sources using your own .config. A new minor update gets released, let's say 5.16.16 which was released just ...
- 32.9k
1
vote
1
answer
337
views
Why can't I install an almost indentical kernel on brand new debian 11?
My overall objective is to build an RT_PREEMPT kernel that I can modify. As an intermediate step, I'm trying to build and install (and run as a grub entry) a generic, non-RT_PREEMPT kernel. But I ...
- 11
2
votes
2
answers
239
views
How to verify if a given package is built in a reproducible way as an end user?
Let's I would like to verify if the package mksh can be built in a reproducible way. I am trying with
apt build-dep mksh
apt source mksh
cd mksh; dpkg-buildpackage -uc -us
cd ..; sha256sum <freshly ...
- 576
1
vote
1
answer
138
views
How to list which unreproducible packages are installed on a Debian system?
Why reproducible builds are important is explained at reproducible-builds.org:
Whilst anyone may inspect the source code of free and open source software for malicious flaws, most software is ...
- 4,846
7
votes
3
answers
11k
views
How to make a reproducible iso file with mkisofs/genisoimage?
In an automated process an iso file is created with mkisofs.
Even, as the original data is excactly the same, the resulting iso files are not the same (their md5sum changes). Since I rsync --checksum ...
- 907
1
vote
2
answers
1k
views
Is there a practical way to make binary-reproducible CPIO (initramfs) archives?
I would like my initramfs to have the same hash no matter when or where I build it if the contents of the files are the same (and are owned by root and have same permissions). I don't see any options ...
- 847
9
votes
1
answer
1k
views
Can files compressed with bzip2 be relied upon to be deterministic (reproducible)?
I am trying to determine if there are any potential issues using bzip2 to compress files that need to be 100% reproducible. Specifically: can metadata (name / inode, lastmod date, etc) or anything ...
- 268
4
votes
4
answers
1k
views
Making bit identical ext2 filesystems
I'm preparing an image file for a linux system. I need to be able to run my script that creates the image and have the output be bit-for-bit identical each time.
I do the normal procedure, by making ...
- 151
11
votes
1
answer
7k
views
Visualizing dependencies coded up in makefiles as a graph
Closely related to How to display dependencies given in a makefile as a tree? But the answers given there is not satisfactory (i.e. do not work).
Is there a tool to visualize the Directed Acylic ...
2
votes
2
answers
3k
views
Is there a standard archive format with no file metadata?
For some context, I'm working on a package manager-like utility that supports building packages as a non-root user. I want to make sure that packages built by a root user and built by a non-root user ...
- 3,166
5
votes
1
answer
657
views
Dockerfile, Docker image and reproducible environment
The usual documentation and notes on docker mention version controlling and sharing the Dockerfile, which should let anyone build an identical image. This sounds great, however, we typically have ...
- 153