[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#805321: marked as done (debian-installer: builds unreproducible netboot images)

Your message dated Fri, 01 Jan 2016 18:04:24 +0000
with message-id <E1aF43s-0007OH-Bf@franck.debian.org>
and subject line Bug#805321: fixed in debian-installer 20160101
has caused the Debian Bug report #805321,
regarding debian-installer: builds unreproducible netboot images
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org

805321: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=805321
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: debian-installer
Version: 20150422
Severity: wishlist
Tags: patch
User: reproducible-builds@lists.alioth.debian.org
Usertag: timestamps fileordering infrastructure
X-Debbugs-Cc: reproducible-builds@lists.alioth.debian.org
X-Debbugs-Cc: debian-bsd@lists.debian.org


The debian-installer package build produces netboot.tar.gz and
the mini.iso netboot install media.  It doesn't do this in an easily
reproducible way:

  * the d-i initrd/mfsroot is a filesystem image, having variable
    mtime/ctime/atime timestamps from package build time;
  * likewise in the generated mini.iso;
  * netboot.tar.gz also has varying timestamps;  the order of files
    may also vary depending on the filesystem;
  * likewise in the cd info tarball;
  * likewise in the debian-installer-images tarball;
  * all gzipped outfile files have a timestamp in the header.

I have a patch aimed at jessie-kfreebsd that should fix all of the
above.  It should be possible to do the same in sid with much less
code, due to new GNU tar features and other reproducible builds work.

I've 'clamped' timestamps to be no later than the most recent
debian/changelog entry date.  That way, the non-useful timestamps
from during the build are adjusted to a constant value.  Older
timestamps, actually indicating how old a file is, are untouched.
The BUILD_DATE, actually the package version number, is unchanged.

Specifically on kfreebsd, the generated mfsroot is a ffs filesystem
having file atimes, and another timestamp in the filesystem superblock.
I intend to patch makefs so that it can clamp timestamps to a given

Besides a file ordering issue in makefs, all output files including
netboot.tar.gz and mini.iso then seem to be reproducible for
jessie-kfreebsd, at least.  :)

Steven Chamberlain

Attachment: signature.asc
Description: Digital signature

--- End Message ---
--- Begin Message ---
Source: debian-installer
Source-Version: 20160101

We believe that the bug you reported is fixed in the latest version of
debian-installer, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 805321@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
Cyril Brulebois <kibi@debian.org> (supplier of updated debian-installer package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)

Hash: SHA1

Format: 1.8
Date: Fri, 01 Jan 2016 18:46:41 +0100
Source: debian-installer
Binary: debian-installer
Architecture: source
Version: 20160101
Distribution: unstable
Urgency: medium
Maintainer: Debian Install System Team <debian-boot@lists.debian.org>
Changed-By: Cyril Brulebois <kibi@debian.org>
 debian-installer - Debian Installer documentation
Closes: 722735 789600 803711 805321 807716 808875 809301
 debian-installer (20160101) unstable; urgency=medium
   [ Karsten Merker ]
   * Provide u-boot and SD-card images for the LinkSprite pcDuino.
   [ Cyril Brulebois ]
   * Adjust p-u support to handle file:// instead of (f|ht)tp:// only,
     thanks to Łukasz Stelmach for both the report and the patch
     (Closes: #803711).
   [ Samuel Thibault ]
   * Bump hurd kernel version.
   * Prevent spurious speech synthesis boot entry.
   [ Vagrant Cascadian ]
   * bootscr.mainline_common: Prefer newer u-boot distro_bootpart variable.
   [ Cyril Brulebois ]
   * Cherry-pick the following changes by Steven Chamberlain from the
     jessie-kfreebsd branch.
   * build/Makefile: Rename GZIP into gzip, and pass an extra -T to pigz
     (it needs both -n and -T to behave as gzip's -n).
   * build/config/x86.cfg: Also pass -n to gzip.
   * Bump linux kernel version from 4.2.0-1 to 4.3.0-1
   * Replace the module-init-tools build-dep with a kmod one since the
     transitional package got dropped in kmod/22-1.
   * Apply patch from gregor herrmann to fix new warnings with perl 5.22
     (Closes: #808875). Thanks!
   * Update copyright years on the F10 help screen.
   * Update translation-status for the release.
   [ Steven Chamberlain ]
   * Improve reproducibility of debian-installer netboot images
     (Closes: #805321):
   * Add a new utility build/util/gen-tarball to make reproducible
     tarballs, and use it for:
     - netboot.tar.gz
     - debian-cd_info.tar.gz
     - the overall debian-installer-images tar.gz file.
   * Inhibit gzip timestamp in initrd.gz
   * Ensure SOURCE_DATE_EPOCH is exported throughout the build system,
     define it if unset, or fall back to 'now' if build/Makefile is
     directly invoked.
   [ Steve McIntyre ]
   * Add the part_gpt module into the core grub image to make it easier
     for users doing slightly different things with our images; include
     support for GPT partition tables as well as msdos (Closes: #789600).
   [ Ben Hutchings ]
   * Include leds-modules on armhf if available
   * Update i386 config to use 686 kernel flavour instead of 586
   [ Martin Michlmayr ]
   * Update docs to reflect that Package-Type and Installer-Menu-Item
     are official fields nowadays (Closes: #807716).
   * Remove minix-modules from the orion5x network-console image since
     it was only required by the D-Link DNS-323, a device that's no longer
   * Exclude usb-serial-modules from the armel network-console image
     since it's not useful there (Closes: #809301).
   * Exclude usb-modules explicitly on armel/orion5x network-console
     to work around a bug in util/pkg-list.
   * Stop including sata and ext2/ext3 modules on the armel/orion5x
     network-console image due to size limitations on QNAP TS-x09.
   * Drop the file extension from the initrd for QNAP devices.
   * Re-introduce installer images for QNAP TS-x09.
   * Recognize /dev/disk1_1 and /dev/ls_disk1_1 as boot devices
     on Linkstation.  Thanks Roger Shimizu (Closes: 722735).
   [ John Paul Adrian Glaubitz ]
   * Set KERNELVERSION for sparc64 to $(LINUX_KERNEL_ABI)-sparc64.
   * Set KEYRING to debian-ports on sparc64.
   * Add silo to Build-Depends on sparc64.
   * Fix typo (problimatic -> problematic) in silo comment.
   * Clone boot configuration files from sparc for sparc64.
 074a49d56a672decc393e828d9dbccba07401181 3434 debian-installer_20160101.dsc
 1e62df10d9e2b81b56e925e4f18a295129a724fa 1375522 debian-installer_20160101.tar.gz
 5a4e8ccfb5670bc3514a1c2f2acdca91f58c99efd2bde7ee38bb3eb2499d415a 3434 debian-installer_20160101.dsc
 257c7a0d4c04486fce0ed46dd1a0d5441770b4f67ec93966e0ae64c7dd65644b 1375522 debian-installer_20160101.tar.gz
 95fcf40227dbffcdf13ead8f3ceea1e3 3434 devel optional debian-installer_20160101.dsc
 ac785dca4dd335627e345c66bfc4ca88 1375522 devel optional debian-installer_20160101.tar.gz

Version: GnuPG v1


--- End Message ---

Reply to: