]> git.lizzy.rs Git - micro.git/commit
Support reproducible builds (#1802)
authorMorten Linderud <morten@linderud.pw>
Sun, 2 Aug 2020 00:26:39 +0000 (02:26 +0200)
committerGitHub <noreply@github.com>
Sun, 2 Aug 2020 00:26:39 +0000 (20:26 -0400)
commit9a3fb52b4286755c532f7983335c8e24fd3bbdca
tree04a68ea3d6c43408407fbdb0f62804cd053ce6f9
parentcfb8d4a6b5192a8b785b7b3d38ca68da80a8ce7d
Support reproducible builds (#1802)

* Makefile: Ensure we strip out embedded paths

To reproduce binaries undeterministic values needs to be removed. By
default Go embeds several module paths into the binaries, which prevents
people from reproducing said distributed binary.

The distributed binary from micro contains the full home path of the
current builder of the binary. -trimpath removes these paths from the
binary.

    $ strings micro | grep "/home/zyedidia" | wc -l
    868

This also helps other distributions providing reproducible versions of
micro down the line.

Signed-off-by: Morten Linderud <morten@linderud.pw>
* build-date: Ensure build time adheres to SOURCE_DATE_EPOCH

Embedding undeterministic values into binaries prevents reproduction of
the binaries. The reproducible builds projects defines
`SOURCE_DATE_EPOCH` to allow deterministic insertion of build times.

This patch ensures `build-date` checks the environment variable before
building with the local time.

    $ SOURCE_DATE_EPOCH=123123 go run tools/build-date.go
    January 02, 1970
    $ go run tools/build-date.go
    July 31, 2020

    $ make build-quick && ./micro --version
    [...]
    Compiled on July 31, 2020
    $ SOURCE_DATE_EPOCH=123123 make build-quick && ./micro --version
    [...]
    Compiled on January 02, 1970

https://reproducible-builds.org/specs/source-date-epoch/

Signed-off-by: Morten Linderud <morten@linderud.pw>
Makefile
tools/build-date.go