Add repro test for the rootFS

Show bit for bit reproducibility of the rootFS
This commit is contained in:
Robin Candau 2026-03-31 01:05:58 +02:00
parent af4e991076
commit cccc73178e
No known key found for this signature in database
GPG Key ID: FDC3040B92ACA748

View File

@ -149,10 +149,16 @@ image:build:secure:
.test_repro:
stage: repro
before_script:
- pacman -Syu --noconfirm git make fakechroot fakeroot podman diffoci
- pacman -Syu --noconfirm git make fakechroot fakeroot podman diffoscope diffoci
- pacman -Sdd --noconfirm devtools
script:
- make BUILDDIR="$PWD/repro-build" OUTPUTDIR="$PWD/repro-output" $PWD/repro-output/Dockerfile.repro
- echo "The sha256 hash of the original rootFS is:"
- cat output/repro.tar.zst.SHA256
- echo "The sha256 hash of the rebuilt rootFS is:"
- cat repro-output/repro.tar.zst.SHA256
- diffoscope output/repro.tar.zst repro-output/repro.tar.zst
- echo "RootFS is reproducible!"
- |
SOURCE_DATE_EPOCH=$(date -u -d "-1 day" +%s)
podman build \