This is an automated email from the ASF dual-hosted git repository.
ccondit pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/yunikorn-release.git
The following commit(s) were added to refs/heads/master by this push:
new 2b6ca82 [YUNIKORN-2487] Force REPRODUCIBLE_BUILDS=1 when generating
release artifacts (#176)
2b6ca82 is described below
commit 2b6ca82804ff01043007ae001c6dae43aebc65f4
Author: Craig Condit <[email protected]>
AuthorDate: Tue Mar 19 10:44:11 2024 -0500
[YUNIKORN-2487] Force REPRODUCIBLE_BUILDS=1 when generating release
artifacts (#176)
Closes: #176
---
release-top-level-artifacts/README.md | 25 ++++++++++++++++++++++++-
tools/build-release.py | 4 ++--
2 files changed, 26 insertions(+), 3 deletions(-)
diff --git a/release-top-level-artifacts/README.md
b/release-top-level-artifacts/README.md
index b957729..f9360cc 100644
--- a/release-top-level-artifacts/README.md
+++ b/release-top-level-artifacts/README.md
@@ -40,7 +40,8 @@ All dependencies are included in the image.
NOTE: the scheduler can be used without a web UI build or deployed.
## Building
-Run the `make` command to build docker images.
+Run the `make` command to build docker images. To generate verifiable,
reproducible binaries,
+run `make REPRODUCIBLE_BUILDS=1`
```shell script
make
@@ -108,6 +109,28 @@ located in the [User
Guide](https://yunikorn.apache.org/docs/).
The convenience build images are multi-architecture images. Supported
architectures are `amd64` and `arm64`.
+## Reproducible builds
+Building YuniKorn from source generates reproducible build artifacts which
+depend only on the version of YuniKorn built and the go compiler version used.
+
+This release was compiled by the official release manager using Go version
`@GO_VERSION@`
+and generated binary artifacts with the following SHA-512 checksums:
+
+### linux/amd64
+```
+@AMD64_BINARIES@
+```
+
+### linux/arm64
+```
+@ARM64_BINARIES@
+```
+
+To verify your own binaries, be sure to execute your build in reproducible
mode:
+```shell script
+make REPRODUCIBLE_BUILDS=1
+```
+
## Testing the build
Running the unit tests is supported via the make command.
It will run the tests for all parts of YuniKorn in order:
diff --git a/tools/build-release.py b/tools/build-release.py
index 51a386a..040e67e 100755
--- a/tools/build-release.py
+++ b/tools/build-release.py
@@ -265,7 +265,7 @@ def build_web_and_generate_hashes(staging_dir,
release_name, arch):
unpack_staging_tarball(staging_dir, tmp_dir, release_name)
web_dir = os.path.join(release_dir, "web")
os.chdir(web_dir)
- retcode = subprocess.call(['make', 'HOST_ARCH=' + arch,
'build_server_prod'])
+ retcode = subprocess.call(['make', 'REPRODUCIBLE_BUILDS=1', 'HOST_ARCH=' +
arch, 'build_server_prod'])
if retcode:
fail("failed to build yunikorn-web (%s)" % arch)
hash = get_checksum("build/prod/yunikorn-web", "yunikorn-web")
@@ -285,7 +285,7 @@ def build_shim_and_generate_hashes(staging_dir,
release_name, arch):
unpack_staging_tarball(staging_dir, tmp_dir, release_name)
shim_dir = os.path.join(release_dir, "k8shim")
os.chdir(shim_dir)
- retcode = subprocess.call(['make', 'HOST_ARCH=' + arch, 'scheduler',
'plugin', 'admission'])
+ retcode = subprocess.call(['make', 'REPRODUCIBLE_BUILDS=1', 'HOST_ARCH=' +
arch, 'scheduler', 'plugin', 'admission'])
if retcode:
fail("failed to build yunikorn-k8shim (%s)" % arch)
adm_hash = get_checksum("build/bin/yunikorn-admission-controller",
"yunikorn-admission-controller")
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
