Questions tagged [reproducible-build]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
1 answer
32 views

Minor kernels updates applicability for people running custom kernel builds

Imagine the situation. You're running a custom kernel which you compiled from the vanilla sources using your own .config. A new minor update gets released, let's say 5.16.16 which was released just ...
user avatar
1 vote
1 answer
118 views

Why can't I install an almost indentical kernel on brand new debian 11?

My overall objective is to build an RT_PREEMPT kernel that I can modify. As an intermediate step, I'm trying to build and install (and run as a grub entry) a generic, non-RT_PREEMPT kernel. But I ...
user avatar
2 votes
2 answers
66 views

How to verify if a given package is built in a reproducible way as an end user?

Let's I would like to verify if the package mksh can be built in a reproducible way. I am trying with apt build-dep mksh apt source mksh cd mksh; dpkg-buildpackage -uc -us cd ..; sha256sum <freshly ...
user avatar
  • 547
1 vote
1 answer
71 views

How to list which unreproducible packages are installed on a Debian system?

Why reproducible builds are important is explained at reproducible-builds.org: Whilst anyone may inspect the source code of free and open source software for malicious flaws, most software is ...
user avatar
  • 3,410
4 votes
2 answers
2k views

How to make a reproducible iso file with mkisofs/genisoimage?

In an automated process an iso file is created with mkisofs. Even, as the original data is excactly the same, the resulting iso files are not the same (their md5sum changes). Since I rsync --checksum ...
user avatar
  • 517
1 vote
2 answers
434 views

Is there a practical way to make binary-reproducible CPIO (initramfs) archives?

I would like my initramfs to have the same hash no matter when or where I build it if the contents of the files are the same (and are owned by root and have same permissions). I don't see any options ...
user avatar
  • 373
7 votes
1 answer
455 views

Can files compressed with bzip2 be relied upon to be deterministic (reproducible)?

I am trying to determine if there are any potential issues using bzip2 to compress files that need to be 100% reproducible. Specifically: can metadata (name / inode, lastmod date, etc) or anything ...
user avatar
4 votes
4 answers
588 views

Making bit identical ext2 filesystems

I'm preparing an image file for a linux system. I need to be able to run my script that creates the image and have the output be bit-for-bit identical each time. I do the normal procedure, by making ...
user avatar
  • 151
8 votes
1 answer
4k views

Visualizing dependencies coded up in makefiles as a graph

Closely related to How to display dependencies given in a makefile as a tree? But the answers given there is not satisfactory (i.e. do not work). Is there a tool to visualize the Directed Acylic ...
user avatar
1 vote
2 answers
970 views

Is there a standard archive format with no file metadata?

For some context, I'm working on a package manager-like utility that supports building packages as a non-root user. I want to make sure that packages built by a root user and built by a non-root user ...
user avatar
  • 2,846
4 votes
1 answer
551 views

Dockerfile, Docker image and reproducible environment

The usual documentation and notes on docker mention version controlling and sharing the Dockerfile, which should let anyone build an identical image. This sounds great, however, we typically have ...
user avatar
11 votes
3 answers
3k views

Compressing two identical folders give different result

I have two identical folders, with same structure and contents like this: folder_1 hello.txt subfolder byebye.txt folder_2 hello.txt subfolder byebye.txt if I compress them as tar....
user avatar
  • 3,349
1 vote
0 answers
321 views

Is there a Linux distribution with reproducible build system?

Something like Gitian for Bitcoin when several people independently build binaries and publish their checksums, I found NixOS but it has only reproducible packages but I mean a whole iso image?
user avatar
1 vote
2 answers
100 views

What does mean by "Debian on track to prove binaries' origins"?

I found an article on The Register of the UK about the reproducible builds in Debian. I couldn't understand much from it. Could anyone simply this for me, please? Here's the link: Reproducible Builds
user avatar