Bug 11730

Summary: kernel-devsrc: various references to the host build system
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Juro Bystricky <juro.bystricky>
Component: kernelAssignee: sweeaun <swee.aun.khor>
Status: RESOLVED FIXED QA Contact:
Severity: normal    
Priority: Medium CC: sgw, tom.zanussi
Version: 2.4   
Target Milestone: 2.4   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)
Attachments:
Description Flags
diffoscope output that corroborates the claim. none

Description Juro Bystricky 2017-06-28 16:47:49 UTC
Created attachment 3848 [details]
diffoscope output that corroborates the claim.

The package kernel-devsrc contains many references to the host build system.
This makes binary reproducibility impossible. These are mostly (possibly all) in a hidden folder /usr/src/kernel/.kernel-meta/. IMHO this folder should not be included in the package at all.
Please see the diffoscope output attachment.
Comment 1 Bruce Ashfield 2017-06-28 17:04:09 UTC
I had an old bug about this, but I can't find it any more .. but yes, assuming that all of the kernel meta data makes it into anything that needs to rebuild the kernel, we don't need to have this directory as part of the devsrc.
Comment 2 Saul Wold 2017-07-21 01:03:40 UTC
Looking at the kernel-devsrc recipe today with Swee Aun, it looked like a possible straight forward approach might be to include the .kernel-meta directory in the prune list of the find that generates the cpio list in do_install().  This would prevent those files from getting into the final installable package without modifying the shared source area.
Comment 3 Juro Bystricky 2017-08-09 22:57:29 UTC
So where is the fix?