From owner-freebsd-hackers@FreeBSD.ORG Mon May 11 19:56:36 2015 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 4AADA320 for ; Mon, 11 May 2015 19:56:36 +0000 (UTC) Received: from manchester-1.man.uk.cluster.ok24.net (unknown [IPv6:2001:41c8:51:40::1]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id F1DF413AD for ; Mon, 11 May 2015 19:56:35 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=simple/simple; d=pyro.eu.org; s=05.2015; h=Content-Type:MIME-Version:Reply-To:Message-ID:Subject:Cc:To:From:Date:Resent-To:Resent-Message-ID:Resent-Date:Resent-From; bh=6AH0R4UlKtrgks6J2iLBvDajdjOkrvRpJ1TlAx0Q+Og=; b=IwksI4BPJEqPyMpFzZKutMjwsU32FuM+6Yzs3IN2oAXAFsBDeCX007qTKs4PmDK0asFoNBkjYpqPvvyAjiI5838sCvEJXp26+/Kj3D208VSDfau0y2u7jjXmShLMZ+2UBAtnl5y0MjT+NdJsNfI24fUNgzlB2jx/duhoZQ4FOiI=; X-Spam-Status: No, score=0.4 required=2.0 tests=ALL_TRUSTED, BAYES_00, DKIM_ADSP_DISCARD, FAKE_REPLY_C Received: from guisborough-1.rcc.uk.cluster.ok24.net ([217.155.40.118] helo=smtp.ok24.net) by manchester-1.man.uk.cluster.ok24.net with esmtp (Exim 4.80) (envelope-from ) id 1YrtoU-0008Fc-Il for freebsd-hackers@freebsd.org; Mon, 11 May 2015 20:56:32 +0100 Received: from kfreebsd-amd64.pyro.eu.org (smtp.ok24.net [10.1.1.1]) by smtp.ok24.net (Postfix) with ESMTPS id 7AA8310A5DB for ; Mon, 11 May 2015 20:56:30 +0100 (BST) Received: by kfreebsd-amd64.pyro.eu.org (Postfix, from userid 1000) id 6000267EC; Mon, 11 May 2015 20:56:30 +0100 (BST) Resent-From: Steven Chamberlain Resent-Date: Mon, 11 May 2015 20:56:30 +0100 Resent-Message-ID: <20150511195630.GD20721@pyro.eu.org> Resent-To: freebsd-hackers@freebsd.org Date: Mon, 11 May 2015 19:37:40 +0100 From: Steven Chamberlain To: freebsd-hackers@freebsd.org, debian-bsd@lists.debian.org Cc: Holger Levsen Subject: Re: reproducible builds of FreeBSD in a chroot on Linux Message-ID: <20150511183740.GA20721@pyro.eu.org> Reply-To: freebsd-hackers@freebsd.org, debian-bsd@lists.debian.org MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="WIyZ46R2i8wDzkSu" Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 11 May 2015 19:56:36 -0000 --WIyZ46R2i8wDzkSu Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Hi! > On 5/7/15 5:22 PM, Holger Levsen wrote: >> So now I would like to build freebsd myself, twice, and compare the resu= lts >> and show these results as in >> https://reproducible.debian.net/rb-pkg/unstable/amd64/gcc-4.9.html - and= then >> quite probably set up a jenkins job on jenkins.debian.net and do this ev= ery >> week. Julian Elischer wrote: > Cross compiling FreeBSD from another platform has been a "gee the=20 > might be nice" goal for some years > [...] > If you really wanted to you could look at he kFreeBSD project and=20 > maybe they have a way to do stuff.. That we do! We package various FreeBSD stuff for Debian GNU/kFreeBSD and then build some of it reproducibly already. We already have in Debian - on kfreebsd and linux - the necessary toolchain packages such as clang-3.4, bmake, freebsd-mk, freebsd-buildutils and particular versions of byacc and flex. We prepend "/usr/lib/freebsd:" to $PATH in order to use these: https://anonscm.debian.org/viewvc/glibc-bsd/trunk/kfreebsd-10/debian/rules?= view=3Dmarkup#l46 We were actually able to build our package of the FreeBSD kernel on GNU/Linux, and the binary would match what we built on GNU/kFreeBSD. (Which I think is the ultimate in securing against attacks on the build/development systems). I haven't tried building much else from FreeBSD - on Linux, or on GNU/kFreeBSD - using only FreeBSD's original build system. In our packaging we tend to make changes as necessary to get individual bits to build. I understand wanting to do this on GNU/Linux, but if that's too difficult, it may be easier trying this in a chroot on GNU/kFreeBSD first. You can even run a Debian GNU/kFreeBSD host system with native FreeBSD binaries inside a chroot or jail, potentially a whole native build system inside of it. In any case, I'd like to someday see a GNU/kFreeBSD machine set up as a http://jenkins.debian.net slave, doing rebuilds and alerting us if any packages in sid are FTBFS, as well as other tests. > There may also be a better mailing list for this... Discussions are very welcome on debian-bsd@lists.debian.org, although we are rather busy this week finalising a jessie-kfreebsd release. Regards, --=20 Steven Chamberlain steven@pyro.eu.org --WIyZ46R2i8wDzkSu Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/kFreeBSD) iQEcBAEBCAAGBQJVUPbzAAoJELrpzbaMAu5TJXMIAMVSYY9RrtrNQCedVrWMO5Ml vDRHjTSUncZutVSnLaYiO/oWAQrGjf1aMN7e2XFQwdITCa2TvBrFJN2JHJyXDt1D XBKziJVLqrk4x1Ds9/piRYxaXZezk2lNU4LOGvppjwURd4LV1EC2lClAJu7IzGEK lNgknCPc0Oq/uedzpbybggo6nZKO6PrdtF6iSsQ9zSEbTVGVPg6emgUKIbe+qxW1 fVMSZgd6SfYDpsVyTFotOmil3UwbrcFTfKl+OL5VRLrKndmhfROZp+ohx5A+hyqe shthpNRAH6cct2Jt9xiwNuHbOmzrSgEZ7RobyFOOxZIXxMd8JRffd6xjQDZ8Nl0= =pbtR -----END PGP SIGNATURE----- --WIyZ46R2i8wDzkSu--