Bug 11730 - kernel-devsrc: various references to the host build system
Summary: kernel-devsrc: various references to the host build system
Status: RESOLVED FIXED
Alias: None
Product: OE-Core
Classification: Build System, Metadata & Runtime
Component: kernel (show other bugs)
Version: 2.4
Hardware: x86 Multiple
: Medium normal
Target Milestone: 2.4
Assignee: sweeaun
QA Contact:
URL:
Whiteboard:
Depends on:
Blocks:
 
Reported: 2017-06-28 16:47 UTC by Juro Bystricky
Modified: 2017-08-10 09:24 UTC (History)
2 users (show)

See Also:
OS type for building Yocto: ---
Type of Regression: ---
Verified:
Documentation change: No (bug/feature does not impact docs)


Attachments
diffoscope output that corroborates the claim. (666.00 KB, text/html)
2017-06-28 16:47 UTC, Juro Bystricky
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Juro Bystricky 2017-06-28 16:47:49 UTC
Created attachment 3848 [details]
diffoscope output that corroborates the claim.

The package kernel-devsrc contains many references to the host build system.
This makes binary reproducibility impossible. These are mostly (possibly all) in a hidden folder /usr/src/kernel/.kernel-meta/. IMHO this folder should not be included in the package at all.
Please see the diffoscope output attachment.
Comment 1 Bruce Ashfield 2017-06-28 17:04:09 UTC
I had an old bug about this, but I can't find it any more .. but yes, assuming that all of the kernel meta data makes it into anything that needs to rebuild the kernel, we don't need to have this directory as part of the devsrc.
Comment 2 Saul Wold 2017-07-21 01:03:40 UTC
Looking at the kernel-devsrc recipe today with Swee Aun, it looked like a possible straight forward approach might be to include the .kernel-meta directory in the prune list of the find that generates the cpio list in do_install().  This would prevent those files from getting into the final installable package without modifying the shared source area.
Comment 3 Juro Bystricky 2017-08-09 22:57:29 UTC
So where is the fix?