Bug 11177

Summary:	Generate archives with deterministic metadata
Product:	[Build System, Metadata & Runtime] OE-Core	Reporter:	Joshua Lock <joshuagloe>
Component:	core	Assignee:	Juro Bystricky <juro.bystricky>
Status:	RESOLVED MOVED	QA Contact:
Severity:	enhancement
Priority:	Medium+	CC:	meta.mr.watcher, meta.watcher, randy.macleod
Version:	2.4
Target Milestone:	2.5 M4
Hardware:	x86
OS:	Multiple
Whiteboard:
OS type for building Yocto:	---	Type of Regression:	---
Verified:		Documentation change:	Yes (doc changes required)
Bug Depends on:	12707
Bug Blocks:

Description Joshua Lock 2017-03-17 15:07:26 UTC

Pass options to tar, et al, to write archives with deterministic metadata (clamp uid & gid to 0, stable timestamp, etc).

Some archive formats don't provide this functionality OOTB, for those we should consider other techniques to ensure the archives are deterministic across builds.

https://reproducible-builds.org/docs/archives/

Comment 1 Juro Bystricky 2017-07-19 17:02:38 UTC

will be part of the "reproducible binaries" patch set.

Comment 2 Juro Bystricky 2017-08-30 23:40:12 UTC

There have been some incremental progress. Generally, archive commands (tar, gzip) are scattered all over. Several patches were accepted that fix some of the issues, but there are a few more left. Some patches are still pending/being reviewed in ML. So moving to 2.5 M1 for completion, as more patches are to follow before this can be closed as RESOLVED.

Comment 3 Juro Bystricky 2018-05-15 11:18:44 UTC

I am closing this as this has been either implement or superseded by more specific problems.