Merge pull request '[CHORE] Support reproducible builds' (#4970) from gusted/forgejo-reproducible-builds into forgejo
Reviewed-on: https://codeberg.org/forgejo/forgejo/pulls/4970 Reviewed-by: Earl Warren <earl-warren@noreply.codeberg.org> Reviewed-by: Michael Kriese <michael.kriese@gmx.de> Reviewed-by: Radosław Piliszek <radek@piliszek.it>
This commit is contained in:
commit
5b81cab0ed
|
@ -36,7 +36,7 @@ WORKDIR ${GOPATH}/src/code.gitea.io/gitea
|
||||||
RUN make clean
|
RUN make clean
|
||||||
RUN make frontend
|
RUN make frontend
|
||||||
RUN go build contrib/environment-to-ini/environment-to-ini.go && xx-verify environment-to-ini
|
RUN go build contrib/environment-to-ini/environment-to-ini.go && xx-verify environment-to-ini
|
||||||
RUN make RELEASE_VERSION=$RELEASE_VERSION go-check generate-backend static-executable && xx-verify gitea
|
RUN make RELEASE_VERSION=$RELEASE_VERSION GOFLAGS="-trimpath" LDFLAGS="-buildid=" go-check generate-backend static-executable && xx-verify gitea
|
||||||
|
|
||||||
# Copy local files
|
# Copy local files
|
||||||
COPY docker/root /tmp/local
|
COPY docker/root /tmp/local
|
||||||
|
|
21
Makefile
21
Makefile
|
@ -268,6 +268,7 @@ help:
|
||||||
@echo " - tidy run go mod tidy"
|
@echo " - tidy run go mod tidy"
|
||||||
@echo " - test[\#TestSpecificName] run unit test"
|
@echo " - test[\#TestSpecificName] run unit test"
|
||||||
@echo " - test-sqlite[\#TestSpecificName] run integration test for sqlite"
|
@echo " - test-sqlite[\#TestSpecificName] run integration test for sqlite"
|
||||||
|
@echo " - reproduce-build\#version build a reproducible binary for the specified release version"
|
||||||
|
|
||||||
###
|
###
|
||||||
# Check system and environment requirements
|
# Check system and environment requirements
|
||||||
|
@ -890,6 +891,26 @@ release-sources: | $(DIST_DIRS)
|
||||||
release-docs: | $(DIST_DIRS) docs
|
release-docs: | $(DIST_DIRS) docs
|
||||||
tar -czf $(DIST)/release/gitea-docs-$(VERSION).tar.gz -C ./docs .
|
tar -czf $(DIST)/release/gitea-docs-$(VERSION).tar.gz -C ./docs .
|
||||||
|
|
||||||
|
.PHONY: reproduce-build
|
||||||
|
reproduce-build:
|
||||||
|
# Start building the Dockerfile with the RELEASE_VERSION tag set. GOPROXY is set
|
||||||
|
# for convience, because the default of the Dockerfile is `direct` which can be
|
||||||
|
# quite slow.
|
||||||
|
@docker build --build-arg="RELEASE_VERSION=$(RELEASE_VERSION)" --build-arg="GOPROXY=$(shell $(GO) env GOPROXY)" --tag "forgejo-reproducibility" .
|
||||||
|
@id=$$(docker create forgejo-reproducibility); \
|
||||||
|
docker cp $$id:/app/gitea/gitea ./forgejo; \
|
||||||
|
docker rm -v $$id; \
|
||||||
|
docker image rm forgejo-reproducibility:latest
|
||||||
|
|
||||||
|
.PHONY: reproduce-build\#%
|
||||||
|
reproduce-build\#%:
|
||||||
|
@git switch -d "$*"
|
||||||
|
# All the current variables are based on information before the git checkout happened.
|
||||||
|
# Call the makefile again, so these variables are correct and can be used for building
|
||||||
|
# a reproducible binary. Always execute git switch -, to go back to the previous branch.
|
||||||
|
@make reproduce-build; \
|
||||||
|
(code=$$?; git switch -; exit $${code})
|
||||||
|
|
||||||
###
|
###
|
||||||
# Dependency management
|
# Dependency management
|
||||||
###
|
###
|
||||||
|
|
Loading…
Reference in New Issue