[Bug 13876] New: busybox cpio can't generate reproducible archives

bugzilla at busybox.net bugzilla at busybox.net
Sun Jun 27 13:34:55 UTC 2021


https://bugs.busybox.net/show_bug.cgi?id=13876

            Bug ID: 13876
           Summary: busybox cpio can't generate reproducible archives
           Product: Busybox
           Version: unspecified
          Hardware: All
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: Other
          Assignee: unassigned at busybox.net
          Reporter: git at rxv.cc
                CC: busybox-cvs at busybox.net
  Target Milestone: ---

Created attachment 9021
  --> https://bugs.busybox.net/attachment.cgi?id=9021&action=edit
busyboxconfig

Hello!

I'm working on reproducible alpine images and after a bit of debugging I
noticed the alpine image contains the inode numbers of files in my build
folder.

https://twitter.com/sn0int/status/1408961464401121281

This is a problem because, naturally, those are going to be basically random
and there's no way for me to normalize them. gnu cpio has a `--reproducible`
flag that acts as an alias for `--ignore-devno --renumber-inodes`, I'm not sure
yet if I need `--ignore-devno` as well, but I definitely need
`--renumber-inodes` to build deterministic images. :)

Besides the inode numbers the alpine initramfs is already fully reproducible
with the patches I've submitted to alpine.

Thanks!

-- 
You are receiving this mail because:
You are on the CC list for the bug.


More information about the busybox-cvs mailing list