Skip to content

Made the source tarball reproducible - #6268

Open
larsewi wants to merge 2 commits into
cfengine:masterfrom
larsewi:repro
Open

Made the source tarball reproducible#6268
larsewi wants to merge 2 commits into
cfengine:masterfrom
larsewi:repro

Conversation

@larsewi

@larsewi larsewi commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Two builds of the same source tree now produce byte-identical tarballs, following GNU tar's reproducibility guidance. The same change 72c04dd9 made to masterfiles.

$ ./build-in-container.py --tarballs --build-type DEBUG --output-dir output/a/
 ---snip---
$ ./build-in-container.py --tarballs --build-type DEBUG --output-dir output/b/
 ---snip---
$ cat output/{a,b}/tarballs/sha256sums.txt
adefc308051307a6f7a45f062e2778fb31ea814f86c4519116a829c8b9dee758  cfengine-3.29.0a.a83bad3aa.tar.gz
ac9527080d1a389e6405656f528a3ac15e66d406536c7d2ede33135c8c31d45e  cfengine-masterfiles-3.29.0a.586c7ec2f-1.pkg.tar.gz
d537ae82d86a5a0d1a8b7b10d5654d08bd0a28535b3af9c918e97fd70a303a3c  cfengine-masterfiles-3.29.0a.586c7ec2f.tar.gz
adefc308051307a6f7a45f062e2778fb31ea814f86c4519116a829c8b9dee758  cfengine-3.29.0a.a83bad3aa.tar.gz
ac9527080d1a389e6405656f528a3ac15e66d406536c7d2ede33135c8c31d45e  cfengine-masterfiles-3.29.0a.586c7ec2f-1.pkg.tar.gz
d537ae82d86a5a0d1a8b7b10d5654d08bd0a28535b3af9c918e97fd70a303a3c  cfengine-masterfiles-3.29.0a.586c7ec2f.tar.gz

Changelog: The source tarball is now reproducible
Signed-off-by: Lars Erik Wik lars.erik.wik@northern.tech

Together with cfengine/buildscripts#2402

@larsewi

larsewi commented Aug 5, 2026

Copy link
Copy Markdown
Contributor Author

@cf-bottom Jenkins please :)

Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
Two builds of the same source tree now produce byte-identical tarballs,
following GNU tar's reproducibility guidance. The same change 72c04dd9
made to masterfiles.

Changelog: The source tarball is now reproducible
Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
@cfengine cfengine deleted a comment from cf-bottom Aug 6, 2026
@cfengine cfengine deleted a comment from cf-bottom Aug 6, 2026
@cf-bottom

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants