Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add Dockerfile for reproducible build #605

Merged

Conversation

gaojiaqi7
Copy link
Member

The reproducibility of td-shim is limited by the same system user and source code path, so we can use a Docker container to reproduce binaries.

Resolves: #604

@gaojiaqi7 gaojiaqi7 marked this pull request as draft September 26, 2023 01:16
@jyao1
Copy link
Member

jyao1 commented Sep 26, 2023

@gaojiaqi7 gaojiaqi7 marked this pull request as ready for review October 9, 2023 00:35
@@ -37,3 +37,6 @@ RUN set -eux; \
git clone https://github.com/sslab-gatech/Rudra.git; \
cd Rudra; \
./install-release.sh;

RUN git clone https://github.com/confidential-containers/td-shim.git
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we move this to docker.sh?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@jiangliu , are you OK with that change?

@gaojiaqi7 gaojiaqi7 marked this pull request as draft October 9, 2023 02:10
@gaojiaqi7 gaojiaqi7 closed this Oct 9, 2023
The reproducibility of td-shim is limited by the same system user and
source code path, so we can use Docker container to reproduce binaries.

Signed-off-by: Jiaqi Gao <jiaqi.gao@intel.com>
@gaojiaqi7 gaojiaqi7 reopened this Oct 9, 2023
@gaojiaqi7 gaojiaqi7 marked this pull request as ready for review October 11, 2023 14:18
@jyao1 jyao1 merged commit 2300bb8 into confidential-containers:main Oct 16, 2023
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Cannot reproduce binary in different paths when secure-boot feature is enabled
2 participants