Bug 11177 - Generate archives with deterministic metadata
Summary: Generate archives with deterministic metadata
Status: RESOLVED MOVED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: core (show other bugs)
Version: 2.4
Hardware: x86 Multiple
: Medium+ enhancement
Target Milestone: 2.5 M4
Assignee: Juro Bystricky
QA Contact:
URL:
Whiteboard:
Depends on: 12707
Blocks:
  Show dependency tree
 
Reported: 2017-03-17 15:07 UTC by Joshua Lock
Modified: 2018-05-15 11:18 UTC (History)
3 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: Yes (doc changes required)


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joshua Lock 2017-03-17 15:07:26 UTC
Pass options to tar, et al, to write archives with deterministic metadata (clamp uid & gid to 0, stable timestamp, etc).

Some archive formats don't provide this functionality OOTB, for those we should consider other techniques to ensure the archives are deterministic across builds.

https://reproducible-builds.org/docs/archives/
Comment 1 Juro Bystricky 2017-07-19 17:02:38 UTC
will be part of the "reproducible binaries" patch set.
Comment 2 Juro Bystricky 2017-08-30 23:40:12 UTC
There have been some incremental progress. Generally, archive commands (tar, gzip) are scattered all over. Several patches were accepted that fix some of the issues, but there are a few more left. Some patches are still pending/being reviewed in ML. So moving to 2.5 M1 for completion, as more patches are to follow before this can be closed as RESOLVED.
Comment 3 Juro Bystricky 2018-05-15 11:18:44 UTC
I am closing this as this has been either implement or superseded by more specific problems.