From mboxrd@z Thu Jan 1 00:00:00 1970 From: Holger Levsen Date: Sun, 19 Jul 2015 14:36:07 +0200 Subject: [U-Boot] [Reproducible-builds] [PATCH] build: create time and date independent binary In-Reply-To: <1434220011.3445.21.camel@collins> References: <1434123073-22459-1-git-send-email-hs@denx.de> <201506131110.21979.holger@layer-acht.org> <1434220011.3445.21.camel@collins> Message-ID: <201507191436.14384.holger@layer-acht.org> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de Hi Paul, sorry for the late reply. On Samstag, 13. Juni 2015, Paul Kocialkowski wrote: > > you've seen https://reproducible.debian.net/u-boot ? > This seems very minimalistic, but it's good to see U-Boot was given some > attention already! :-) > > but maybe you can explain why u-boot needs more reproducibility testing > > than what there currently is. i'm definitly interested and not opposed, > > even though I think there shoukd be good reasons to treat some software > > specially. > The point is to make U-Boot reproducible for all possible targets, not > only the few ones that are supported by U-Boot. I think your sentence is missing some word??!? > I think this requires > some extra infrastructure. In that sense, it is very similar to > Coreboot. > > > (also please note that we currently only have amd64 hw to run our tests > > on.) > > The problem is the same as Coreboot, which uses its own toolchain to > build images. We don't need to have native armhf builds for U-Boot, > testing with the armhf toolchain that is in Debian should be enough. I see. > I understand, this works out nicely because all the work on Coreboot > will be inherited by Libreboot. However, on U-Boot, the work to bring > reproducible builds has to take place initially. I know for a fact that > parts of the code use things like __FILE__ or timestamps. Ah. > That makes sense. For U-Boot, it will certainly make sense for the > distributions packaging it. I'm the main developer of Replicant, the > fully free version of Android, and it would definitely be useful to have > a smartphone on which we can trust that the bootloader can be built in a > reproducible manner (and checked after being installed). indeed! > > All this said, if you send me patches, I will probably deploy them as I'm > > very curious and more reproducibility efforts are good :-) We can can > > always decide to remove or move them later. > > I wish to make all contributions upstream. What would really help at > first would be to have all targets built regularly to see where work is > needed. This is where I think the Debian infrastructure could help, in a > similar way as what was started for Coreboot. can you point me to a how to explaining this or tell me those steps, starting with "git clone..."? cheers, Holger -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 828 bytes Desc: This is a digitally signed message part. URL: