From 54489c4acd2a31f02ae638fdf5a2aca589dd2a96 Mon Sep 17 00:00:00 2001 From: Holger Levsen Date: Fri, 16 Oct 2015 15:59:37 +0200 Subject: reproducible arch: update --- TODO | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) (limited to 'TODO') diff --git a/TODO b/TODO index 7f0da5ac..8039153b 100644 --- a/TODO +++ b/TODO @@ -292,8 +292,8 @@ properties: ==== reproducible Arch Linux -* create a job, to bootstrap an arch schroot: -* use regular maintenace job to update the arch schroot +* create a job, to bootstrap an arch schroot: done. needs to be made idempotent. +* use regular maintenace job to update the arch schroot: 'schroot --directory /tmp -c source:jenkins-reproducible-arch -u root -- pacman -Syu --noconfirm' * create another job, to build a single package and a webpage for it… ---- @@ -306,20 +306,19 @@ properties: ** schroot, find packages in /var/abs/core/, schedule those *** idea: reschedule reverse build depends too * more random notes: +** use -source schroot +** download bootstrap.tar.gz sig and verify +** build with -j X +** 'echo "keyserver-options auto-key-retrieve" >> ~/.gnupg/gpg.conf' +** patch pacman to create .buildinfo files - or better: wait + ---- - # todo: - use -source schroot - download bootstrap.tar.gz sig and verify - maintenance job does updates: - schroot --directory /tmp -c source:jenkins-reproducible-arch -u root -- pacman -Syu --noconfirm - -j X +notes on source and binary versions: tar-1.28.tar.xz (source) -> tar-1.28-1-x86_64.pkg.tar.xz (binary) $PKG/PKGBUILD has: pkgname=tar pkgver=1.28 # sometimes this is calculated and not greppable, so PKGBUILD has to be sourced (in a safe environment…) pkgrel=1 - echo 'keyserver-options auto-key-retrieve' >> ~/.gnupg/gpg.conf - patch pacman to create .buildinfo files - or better: wait ---- ==== reproducible... -- cgit v1.2.3-70-g09d2