Skip to content

Fixed the source tarball still not being reproducible - #3202

Merged
larsewi merged 1 commit into
cfengine:masterfrom
larsewi:reproducible-source-tarball
Aug 7, 2026
Merged

Fixed the source tarball still not being reproducible#3202
larsewi merged 1 commit into
cfengine:masterfrom
larsewi:reproducible-source-tarball

Conversation

@larsewi

@larsewi larsewi commented Aug 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

72c04dd covered everything but gzip's header, which records the time it ran, so two builds of the same tree still differed.

$ ./build-in-container.py --tarballs --build-type DEBUG --output-dir output/a/
 ---snip---
$ ./build-in-container.py --tarballs --build-type DEBUG --output-dir output/b/
 ---snip---
$ cat output/{a,b}/tarballs/sha256sums.txt
adefc308051307a6f7a45f062e2778fb31ea814f86c4519116a829c8b9dee758  cfengine-3.29.0a.a83bad3aa.tar.gz
ac9527080d1a389e6405656f528a3ac15e66d406536c7d2ede33135c8c31d45e  cfengine-masterfiles-3.29.0a.586c7ec2f-1.pkg.tar.gz
d537ae82d86a5a0d1a8b7b10d5654d08bd0a28535b3af9c918e97fd70a303a3c  cfengine-masterfiles-3.29.0a.586c7ec2f.tar.gz
adefc308051307a6f7a45f062e2778fb31ea814f86c4519116a829c8b9dee758  cfengine-3.29.0a.a83bad3aa.tar.gz
ac9527080d1a389e6405656f528a3ac15e66d406536c7d2ede33135c8c31d45e  cfengine-masterfiles-3.29.0a.586c7ec2f-1.pkg.tar.gz
d537ae82d86a5a0d1a8b7b10d5654d08bd0a28535b3af9c918e97fd70a303a3c  cfengine-masterfiles-3.29.0a.586c7ec2f.tar.gz

Changelog: The source tarball is now reproducible
Signed-off-by: Lars Erik Wik lars.erik.wik@northern.tech

Together with cfengine/buildscripts#2402

@larsewi
Fixed the source tarball still not being reproducible
586c7ec 
72c04dd covered everything but gzip's header, which records the time it
ran, so two builds of the same tree still differed.

Changelog: The source tarball is now reproducible
Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
@larsewi
larsewi force-pushed the reproducible-source-tarball branch from ae17871 to 586c7ec Compare August 6, 2026 09:32
@larsewi

larsewi commented Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

@cf-bottom Jenkins please :)

@cfengine cfengine deleted a comment from cf-bottom Aug 6, 2026
@cf-bottom

cf-bottom commented Aug 6, 2026

Copy link
Copy Markdown

Sure, I triggered a build:

Build Status

Jenkins: https://ci.cfengine.com/job/pr-pipeline/14402/

Packages: http://buildcache.cfengine.com/packages/testing-pr/jenkins-pr-pipeline-14402/

@larsewi
larsewi merged commit 6c6f534 into cfengine:master Aug 7, 2026
41 of 44 checks passed
@larsewi
larsewi deleted the reproducible-source-tarball branch August 7, 2026 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@craigcomstock craigcomstock craigcomstock approved these changes
@SimonThalvorsen SimonThalvorsen Awaiting requested review from SimonThalvorsen
@victormlg victormlg Awaiting requested review from victormlg

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@larsewi @cf-bottom @craigcomstock