Reproducible builds #546

New Issue

dan · 2022-09-22T17:11:19Z

dan commented

2022-09-22 17:11:19 +00:00

https://reproducible-builds.org/

use git tag date for build date, also inject into tool chain with rep build env var SOURCE_DATE_EPOCH
- this will allow builds to deploy to the same folder as they'll all have the same time
examine version pinning, will it always get the same version or newer with out ask
- go
- dart
start testing - most basics work
- libcwtch-go
  - go build ... & sha512sum & make clean & go build ... & sha512sum
- cwtch-ui
  - flutter build & sha512sum & flutter clean & flutter build & sha512sum
[C\X] strip out folders included in go
- https://reproducible-builds.org/tools/

stage 1

using the same pulled docker build containers the builds can be reproduced
- need scripts to execute the drone build locally using them and export results
- requires clearly fixed package versions

stage 2

reproducible locally (so including striping local build info and scripts with very fixed tool usage)

stage 3

how much work to make the docker containers more reproducible, i know there are some like apt update commands in them know that would def block that

https://reproducible-builds.org/ - [X] use git tag date for build date, also inject into tool chain with rep build env var SOURCE_DATE_EPOCH - this will allow builds to deploy to the same folder as they'll all have the same time - [ ] examine version pinning, will it always get the same version or newer with out ask - go - dart - start testing - most basics work - libcwtch-go - [x] go build ... & sha512sum & make clean & go build ... & sha512sum - cwtch-ui - [x] flutter build & sha512sum & flutter clean & flutter build & sha512sum - [C\X] strip out folders included in go - https://reproducible-builds.org/tools/ ## stage 1 - using the same pulled docker build containers the builds can be reproduced - need scripts to execute the drone build locally using them and export results - requires clearly fixed package versions ## stage 2 - reproducible locally (so including striping local build info and scripts with very fixed tool usage) ## stage 3 - how much work to make the docker containers more reproducible, i know there are some like `apt update` commands in them know that would def block that

dan self-assigned this 2022-09-22 17:11:19 +00:00

dan added this to the Cwtch Beta (In Progress) project 2022-09-22 18:21:01 +00:00

sarah added the

cwtch-beta-1.10

label 2022-10-04 15:36:47 +00:00

sarah removed the

cwtch-beta-1.10

label 2022-11-22 21:06:01 +00:00

sarah modified the project from Cwtch Beta (In Progress) to Graduate from Beta

2022-12-06 21:43:31 +00:00

sarah commented

2023-02-07 01:47:22 +00:00

cwtch bindings for linux, android, and windows are now reproducible: https://git.openprivacy.ca/cwtch.im/repliqate-scripts

sarah added the

cwtch-beta-1.11

label 2023-03-27 19:36:25 +00:00

sarah added the

cwtch-beta-1.13

label 2023-06-29 19:41:26 +00:00

sarah added the

stable-blocker

label 2023-08-14 16:55:17 +00:00

sarah modified the project from Graduate from Beta to Stable Blockers

2023-08-14 17:17:31 +00:00

sarah removed the

cwtch-beta-1.13

label 2023-09-19 20:46:03 +00:00

sarah commented

2023-09-25 20:06:51 +00:00

Cwtch UI is now reproducible given our docker containers OR a similar environment. we do no currently support such a configuration in our Repliqate builds https://docs.cwtch.im/blog/cwtch-ui-reproducible-builds-linux which would be the next big step in automating checking.

However, given that there are no more major technical investigations. I am considering this work complete.

Cwtch UI is now reproducible given our docker containers OR a similar environment. we do no currently support such a configuration in our Repliqate builds https://docs.cwtch.im/blog/cwtch-ui-reproducible-builds-linux which would be the next big step in automating checking. However, given that there are no more major technical investigations. I am considering this work complete.

sarah closed this issue

2023-09-25 20:06:51 +00:00

sarah referenced this issue from a commit

2024-01-29 18:18:23 +00:00

FIX #546 - Force Canadian Locale for Full Date Format

sarah referenced this issue from a commit

2024-01-29 18:20:28 +00:00

FIX #546 - Force Canadian Locale for Full Date Format

sarah referenced this issue from a commit

2024-01-29 18:21:17 +00:00

FIX #546 - Force Canadian Locale for Full Date Format

sarah referenced a pull request that will close this issue