Skip to content

verify-release is a new script to "verify" a release tarball - #14350

Closed
bagder wants to merge 5 commits into
masterfrom
bagder/verify-release
Closed

bagder wants to merge 5 commits into
masterfrom
bagder/verify-release

Conversation

@bagder

@bagder bagder commented Aug 2, 2024 •

Copy link
Copy Markdown
Member

Verify in this case means making sure that rebuilding the tarball generates the exact same output.

The verify-release script requires 754acd1, so it does not work on past curl release tarballs.

@bagder bagder added the script label Aug 2, 2024
@github-actions github-actions Bot added the CI Continuous Integration label Aug 2, 2024
@bagder
bagder force-pushed the bagder/verify-release branch from a70da56 to 9a08e18 Compare August 2, 2024 07:40
bagder added 4 commits August 2, 2024 10:25
... so that we can avoid the build failure if we run this in a clean
checkout.

Also remove -it from the docker invoke since it is not interactive and
it needs no TTY. They made the job fail in the CI.
Also fix the .dist replacing by avoiding all Makefiles because it
otherwise also went into the temporary release folder and got confused
about the Makefile.dist in there.
This script remakes a provided curl release and verifies that the newly
built version is identical to the original file.

Due to bugs in releases up to and including curl 8.9.1, it does not work
on tarballs generated before commit 754acd1.

Closes #14350
@bagder
bagder force-pushed the bagder/verify-release branch from 327a799 to f71265d Compare August 2, 2024 08:27
@vszakats

vszakats commented Aug 2, 2024 •

Copy link
Copy Markdown
Member

Do we need the old maketgz reproducibility test step after this?

@bagder

bagder commented Aug 2, 2024 •

Copy link
Copy Markdown
Member Author

Do we need the old maketgz reproducibility test step after this?

Ah no. This new one is a more complete test that supersedes the old one.

@bagder bagder closed this in 86039e6 Aug 2, 2024
@bagder
bagder deleted the bagder/verify-release branch August 2, 2024 21:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI Continuous Integration script

Development

Successfully merging this pull request may close these issues.

2 participants