<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugzilla.yoctoproject.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.6"
          urlbase="https://bugzilla.yoctoproject.org/"
          
          maintainer="it-coreprojects-helpdesk@linuxfoundation.org"
>

    <bug>
          <bug_id>13515</bug_id>
          
          <creation_ts>2019-09-10 21:15:00 +0000</creation_ts>
          <short_desc>reproducible QA: Verify final images are binary identical</short_desc>
          <delta_ts>2026-10-22 15:26:54 +0000</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>7</classification_id>
          <classification>Build System, Metadata &amp; Runtime</classification>
          <product>OE-Core</product>
          <component>core</component>
          <version>unspecified</version>
          <rep_platform>x86</rep_platform>
          <op_sys>Multiple</op_sys>
          <bug_status>NEW</bug_status>
          <resolution></resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>Medium</priority>
          <bug_severity>enhancement</bug_severity>
          <target_milestone>6.99</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Joshua Watt">JPEWhacker</reporter>
          <assigned_to name="Unassigned">unassigned</assigned_to>
          <cc>jacob.kroon</cc>
    
    <cc>meta.mr.watcher</cc>
    
    <cc>meta.watcher</cc>
    
    <cc>randy.macleod</cc>
    
    <cc>tim.orling</cc>
          
          
          <cf_os>---</cf_os>
          <cf_regression_type>---</cf_regression_type>
          
          <cf_docchange>No (bug/feature does not impact docs)</cf_docchange>

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>84919</commentid>
    <comment_count>0</comment_count>
    <who name="Joshua Watt">JPEWhacker</who>
    <bug_when>2019-09-10 21:15:00 +0000</bug_when>
    <thetext>In addition to verifying that the final produced packages are binary identical, the reproducible build QA test should also verify that the final produced images (e.g. core-image-minimal, core-image-sato) are identical. Note that for some image types, this should be easy but for some (e.g. squashfs) it may require work to make the image generation tools product reproducible output in the first place.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>86485</commentid>
    <comment_count>1</comment_count>
    <who name="Jacob Kroon">jacob.kroon</who>
    <bug_when>2020-02-19 17:21:36 +0000</bug_when>
    <thetext>For vfat images, mkfs.vfat has an &quot;--invariant&quot; flag which helps when creating reproducible images.

For ext2/3/4, mkfs.ext* has support for two undocumented features:
  1. Setting env. variable E2FSPROGS_FAKE_TIME to a specific nbr. of seconds.
     Helps with setting file-system creation date.
  2. Passing -E hash_seed=&lt;directory-hash-seed&gt;.
Also, passing &quot;-U clear&quot; makes the UUID reproducible.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>86569</commentid>
    <comment_count>2</comment_count>
    <who name="Jacob Kroon">jacob.kroon</who>
    <bug_when>2020-02-23 16:21:40 +0000</bug_when>
    <thetext>For ext4, &quot;debugfs&quot; can be used to reset ctime/atime/mtime for files in an image.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>95445</commentid>
    <comment_count>3</comment_count>
    <who name="Randy MacLeod">randy.macleod</who>
    <bug_when>2023-04-21 18:45:47 +0000</bug_when>
    <thetext>Moved en masse from 4.2 to 4.3 by Randy.</thetext>
  </long_desc>
      
      

    </bug>

</bugzilla>