Skip to content
This repository has been archived by the owner on Apr 14, 2021. It is now read-only.

Reproducible builds #93

Closed
3 tasks done
bpicode opened this issue Oct 14, 2017 · 2 comments · Fixed by #98
Closed
3 tasks done

Reproducible builds #93

bpicode opened this issue Oct 14, 2017 · 2 comments · Fixed by #98
Labels
CI Continuous integration Security Security relevant

Comments

@bpicode
Copy link
Owner

bpicode commented Oct 14, 2017 •
edited
Loading

See reproducible-builds.org.
@bpicode bpicode added CI Continuous integration Security Security relevant labels Oct 14, 2017
@bpicode bpicode changed the title Reproducible buillds Reproducible builds Oct 14, 2017
@bpicode
Copy link
Owner Author

bpicode commented Oct 29, 2017

Scope

Single binary fritzctl shall be reproducible for linux/amd64. Non-binaries like manpages, bash-completion, etc. will not be considered. deb packages signed and are irreproducible by design. rpms are omitted for convenience.

bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: remove vendor directory from .gitignore
174599d
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: check in contents of vendor folder
d65cecf
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: exclude vendor folder from bettercodehub analysis
664dacd
@bpicode
Copy link
Owner Author

bpicode commented Oct 29, 2017 •
edited
Loading

Notes

  • vendor folder will be committed, see dep FAQ: Should I commit my vendor directory?
  • Runs on commit 5e09a17
    • local run on commit 5e09a17
      • linux/amd64 50eda9d6057c20489ffa6bd8a3638c822f704dea7f2d9d3e033f2cf65adc8be1
      • linux/arm 58845b63c2f8748bc84168b543bf0b39313597dd6322b1dd6e0834b2492b8e82
      • darwin/amd64 3dcf7410c574f7af460095780858a99bf174f7912435efe1a17884fdf5ee2dd0
      • windows/amd64 32cff788da6ae871f254e1cffcffa4ce9e8995e43ebf1b84210dcd2aa0bfacc2
    • travis run on commit 5e09a17
      • linux/amd64 5900bdd235ad207a5a4610a243fa99c0cd79897c7e059d2acc3c696d92c97ba2
      • linux/arm 6a78b1b774dad92aba0ab9577544c36e02cdf0c83602418ffd7707c155df5181
      • darwin/amd64 48c63c88413f12ca409aa778b7059a4bc6eeb1407e476e66edee565809550caa
      • windows/amd64 eee5ae40a4c851bd9a15b5e9fd6d12573a19c66059bf07b42848f641fdf4002b
    • no match :(
  • Run on commit 3db1f0a
    • local: make clean dist_all
>> BUILD, linux/amd64 16366b469074c6c43cdb437d57257b13c8d963a483f921909a1bbc98bf8dfd52 [OK]
>> BUILD, linux/arm 41847f9090236861405491f65fccb6f4a095b2f36aa8f10eac241b4791985333 [OK]
>> BUILD, darwin/amd64 6a8f1733cb639d1c1a65c1fbba42e2d814116055abb964fa0fb7174f55cbbc66 [OK]
>> BUILD, windows/amd64 1c86d75e0ddb2c3f49e0557093040e770d7e67be10c6a401d42ebcd735f41a94 [OK]

bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: print SHA-256 sum of compiled binaries
c75d829
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: fix invalid -z option in come CI systems
5e09a17
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: remove bogus versions for travis and circle
6fe3527
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: apply -asmflags -trimpath=$(GOPATH) trick
2caae91
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: trampath also for gcflags; omit symbol table and debug inf…
69b0403 
…ormation as well as DWARF symbol table
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: print buildflags
e6c8b67
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: force rebuilding of packages that are already up-to-date; …
2066431 
…disable cgo
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: static flag (extld)
85966db
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: set installsuffix
4e259a9
bpicode added a commit that referenced this issue Oct 29, 2017
@bpicode
Issue #93: use netgo flag when building
9dc4883
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: print go env in travis
52980d6
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: let "make dist_*" produce binaries independent of GOPATH
a178de6 
 * print SHA-256 sum of compiled binaries
 * flag: -asmflags"-trimpath=$(GOPATH)"
 * flag: -gcflags="-trimpath=$(GOPATH)"
 * flag: omit symbol table and debug information as well as DWARF symbol table "-s -w"
 * print buildflags
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: also build binaries in cirlce
bfd9113
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: set GOROOT
6eb4a55
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: build target binaries in cirlce; reproduces local build;
3db1f0a
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: include plain binaries and sha256 sums when collecting art…
1912055 
…ifacts in gitlab
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Issue #93: Dockerfile and instructions for reproducing binaries
a3c16fb
@bpicode bpicode mentioned this issue Oct 30, 2017
Merged
bpicode added a commit that referenced this issue Oct 30, 2017
@bpicode
Merge pull request #98 from bpicode/Issue_93-reproducible_builds
1ea0bf8 
Issue #93: reproducible builds
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
CI Continuous integration Security Security relevant
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Issue #93: reproducible builds bpicode/fritzctl
1 participant
@bpicode