staging/chunkeey/scripts, branch master

build: use numeric-owner in ipkg-build

2022-04-19T20:59:50Z

To create packages the `ipkg-build` script is used which double packs `control.tar.gz` and `data.tar.gz` to a single package. By default it's using a verbose username instead of a numeric value for files. Official OpenWrt images (artifacts) are created within docker containers which do not seem to contain those verbose usernames and instead defaults to numeric values. This becomes a problem when rebuilding public artifacts because other build environments may offer verbose usernames and there the created packages is different from the official ones. With this commit `ipkg-build` always uses numeric values for user/group and thereby making it easier to reproduce official artifacts. Signed-off-by: Paul Spooren

scripts: format to black

2022-04-16T12:53:17Z

clean up formatting with black using 80 character line limit Signed-off-by: Doug Kerr

scripts: use std library for jam crc32 calculation

2022-04-16T12:53:17Z

CRC32 is available in a standard library. It seems reasonable to defer to that rather than run a custom implementation. Signed-off-by: Doug Kerr

scripts/gen_image_generic.sh: fix order of files in EFI bootfs

2022-04-15T00:17:04Z

mtools recursive copy (mcopy -s ...) is using READDIR(3) to iterate over the directory entries, hence they end up in the FAT filesystem in traversal order which breaks reproducibility (rather than being added to the FAT filesystem in a reproducible order). Implement recursive copy in gen_image_generic.sh in Shell code instead, as in that way we can force files to be copied in reproducible order. Fixes: aece8f5ae8 ("scripts/gen_image_generic.sh: generate reproducible EFI filesystem") Signed-off-by: Daniel Golle

scripts/gen_image_generic.sh: generate reproducible EFI filesystem

2022-04-11T14:29:33Z

Generate FAT filesystem for EFI boot in a reproducible way: * use '--invariant' option of mkfs.fat * set timestamps of all files to SOURCE_DATE_EPOCH * make sure files are ordered locale-independent Signed-off-by: Daniel Golle

scripts: make sure sort-order is independent from locale

2022-04-06T16:33:31Z

Set LC_ALL=C environment variable when calling 'sort' as the sort order otherwise depends on the locale set. Fixes: 56ce110b73 ("scripts: make sure conffiles are sorted") Signed-off-by: Daniel Golle

scripts: make sure conffiles are sorted

2022-04-01T12:08:58Z

It may happen that conffiles are in different order on different builds. Make sure they have the same order by sorting them. FIX: #9612 Signed-off-by: Paul Spooren

build: store sha256_unsigned in JSON

2022-03-29T20:41:06Z

Introduce `sha256_unsigned` which is a checksum of the image _before_ a signature is attached. This is helpful to compare image reproducibility. Since the `.sha256sum` file is located in the $(KDIR) folder, switch $(BIN_DIR) with $(KDIR) to simplify the code. The value of $(BIN_DIR) itself is not stored inside the resulting JSON file, so it can be replaced. Signed-off-by: Paul Spooren

scripts/gen_image_generic.sh: make ext4 bootfs reproducible

2022-03-28T19:52:37Z

Set fixed timestamp for kernel other files in /boot filesystem. This should help making x86 *combined* images reproducible. Signed-off-by: Daniel Golle

scripts/mkits.sh: replace forgotten '-' with ${REFERENCE_CHAR}

2022-03-24T00:46:45Z

Cosmetical change to improve style in mkits.sh. Fixes: fd679086473 ("scripts: mkits.sh: Allow legacy @ mode for dts creation") Signed-off-by: Daniel Golle