Improve and document local build workflow

sorenisanerd · sorenisanerd · commit deb7fa543971 · 2025-08-28T14:31:01.000+02:00
diff --git a/.gitignore b/.gitignore
@@ -0,0 +1,6 @@
+/.cache
+/out
+/mkosi.tools
+/cosign
+/syft
+/syft*.tar.gz
diff --git a/Makefile b/Makefile
@@ -0,0 +1,27 @@
+build:
+	mkosi
+
+clean:
+	rm -rf out
+
+download:
+	wget -O cosign-linux-amd64 https://github.com/sigstore/cosign/releases/download/v2.5.3/cosign-linux-amd64
+	wget -O syft-linux-amd64.tar.gz https://github.com/anchore/syft/releases/download/v1.32.0/syft_1.32.0_linux_amd64.tar.gz
+
+verify: SHA256SUMS
+	sha256sum -c SHA256SUMS
+
+syft:
+	tar xzf syft-linux-amd64.tar.gz syft
+
+cosign:
+	mv cosign-linux-amd64 cosign
+
+bootstrap: cosign syft
+	SKIP_SYFT=1 mkosi
+
+mkosi.tools:
+	rm -rf mkosi.tools
+	version="$$(mkosi summary --json | jq .Images[0].ImageVersion -r)"; mkdir mkosi.tools ; tar -xf out/mangos.tools_$${version}.tar.zst --zstd -C mkosi.tools 
+
+.PHONY: mkosi.tools
diff --git a/README.md b/README.md
@@ -4,3 +4,19 @@ mkosi uses a lot of different tools to do its job. By default
 it will use the tools available on the host, but for a more
 consistent build process, it's better to build a tools bundle
 and use that instead.
+
+## Build instructions
+
+To build this locally, run:
+
+```
+make download verify bootstrap mkosi.tools clean build mkosi.tools
+```
+
+1. `make download`: Downloads cosign and syft
+2. `make verify`: Verifies cosign and syft against known checksums
+3. `make bootstrap`: Builds tools tarball in bootstrap mode
+4. `make mkosi.tools`: Extracts the built tools into mkosi.tools
+5. `make clean`: Cleans up the build artifacts
+6. `make build`: Performs a regular, full build
+7. `make mkosi.tools`: Replaces `mkosi.tools` from step 4 with the fully built version
diff --git a/SHA256SUMS b/SHA256SUMS
@@ -0,0 +1,2 @@
+783b5d6c74105401c63946c68d9b2a4e1aab3c8abce043e06b8510b02b623ec9  cosign-linux-amd64
+d6400b579fa84dd383573b1d1ff6f081a37fc64d3ffaafdfdda95c4325f204be  syft-linux-amd64.tar.gz
diff --git a/mkosi.conf b/mkosi.conf
@@ -1,5 +1,5 @@
 [Config]
-Profiles=debug,misc,package-manager,runtime
+Profiles=debug,misc,package-manager,runtime,cosign,syft
 
 [Include]
 Include=mkosi-tools
@@ -21,8 +21,6 @@ Distribution=ubuntu
 Release=noble
 
 [Content]
-ExtraTrees=cosign:/usr/bin/cosign
-           syft:/usr/bin/syft
 Packages=binutils
          wget
          unzip
diff --git a/mkosi.profiles/cosign/mkosi.conf b/mkosi.profiles/cosign/mkosi.conf
@@ -0,0 +1,2 @@
+[Content]
+ExtraTrees=%D/cosign:/usr/bin/cosign
diff --git a/mkosi.profiles/syft/mkosi.conf b/mkosi.profiles/syft/mkosi.conf
@@ -0,0 +1,2 @@
+[Content]
+ExtraTrees=%D/syft:/usr/bin/syft

-Original file line number
+Diff line change
@@ @@ -0,0 +1,6 @@ @@
 +/.cache
 +/out
 +/mkosi.tools
 +/cosign
 +/syft
 +/syft*.tar.gz
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+783b5d6c74105401c63946c68d9b2a4e1aab3c8abce043e06b8510b02b623ec9 cosign-linux-amd64`
	`2`	`+d6400b579fa84dd383573b1d1ff6f081a37fc64d3ffaafdfdda95c4325f204be syft-linux-amd64.tar.gz`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+[Content]`
	`2`	`+ExtraTrees=%D/cosign:/usr/bin/cosign`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+[Content]`
	`2`	`+ExtraTrees=%D/syft:/usr/bin/syft`