Skip to content

ENT-14061: Reproducible masterfiles builds with container scripts#2271

Merged
larsewi merged 3 commits into
cfengine:masterfrom
larsewi:ci-source-date-epoch
Jun 2, 2026
Merged

ENT-14061: Reproducible masterfiles builds with container scripts#2271
larsewi merged 3 commits into
cfengine:masterfrom
larsewi:ci-source-date-epoch

Conversation

@larsewi
Copy link
Copy Markdown
Contributor

@larsewi larsewi commented May 27, 2026

Key changes for reproducible builds is in cfengine/masterfiles#3166. However, the version of tar must be pinned. Hence, we should build it in the container script.

Ticket: ENT-14061

TODO:

  • Check that masterfiles SHA is the same

Checksums between community and enterprise build:

$ sha256sum output.a/cfengine-masterfiles-* output.b/cfengine-masterfiles-*
f189bfaf12405708859f97c1c1deb9555f69147f298ab6534a0f9b25f800bb22  output.a/cfengine-masterfiles-3.28.0a.77c11bace-1.pkg.tar.gz
af92551c0210d4b0e091cc9d9282526a459f9abf724f40bfd9049612b064caaf  output.a/cfengine-masterfiles-3.28.0a.77c11bace.tar.gz
f189bfaf12405708859f97c1c1deb9555f69147f298ab6534a0f9b25f800bb22  output.b/cfengine-masterfiles-3.28.0a.77c11bace-1.pkg.tar.gz
af92551c0210d4b0e091cc9d9282526a459f9abf724f40bfd9049612b064caaf  output.b/cfengine-masterfiles-3.28.0a.77c11bace.tar.gz

@larsewi larsewi changed the title functions: Set SOURCE_DATE_EPOCH from core's HEAD commit timestamp ENT-14061: Set SOURCE_DATE_EPOCH from core's HEAD commit timestamp May 28, 2026
@cf-bottom
Copy link
Copy Markdown

Thanks for submitting a PR! Maybe @craigcomstock can review this?

@larsewi larsewi closed this May 29, 2026
@larsewi larsewi reopened this May 29, 2026
@larsewi larsewi force-pushed the ci-source-date-epoch branch from a652514 to 20d9a56 Compare May 29, 2026 10:49
larsewi added 3 commits June 2, 2026 09:16
Add a build step to build-in-container-inner.sh that runs "make dist"
and "make tar-package" on the masterfiles repo, dropping both the source
and package tarballs into /output alongside the platform packages.

Widen the output listing glob in build-in-container.py to *.tar.gz so the
source tarball is reported too.

Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
Without the zip extension Composer's --prefer-dist install fails to
unpack zip archives, causing the 03-mission-portal-deps build step to
error out.

Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
Just ignore the role option for community builds.

Signed-off-by: Lars Erik Wik <lars.erik.wik@northern.tech>
@larsewi larsewi force-pushed the ci-source-date-epoch branch from ebd4097 to 63d54eb Compare June 2, 2026 08:06
@larsewi larsewi changed the title ENT-14061: Set SOURCE_DATE_EPOCH from core's HEAD commit timestamp ENT-14061: Reproducible masterfiles builds with container scripts Jun 2, 2026
@larsewi larsewi marked this pull request as ready for review June 2, 2026 08:12
@larsewi larsewi merged commit 9695502 into cfengine:master Jun 2, 2026
1 check passed
@larsewi larsewi deleted the ci-source-date-epoch branch June 2, 2026 17:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants