Skip to content

Conversation

@mdurnev
Copy link
Contributor

@mdurnev mdurnev commented Jul 28, 2021

CUSTOMER ISSUE ID: TBD
MGC ISSUE ID: ADIT-75
SUMMARY: glibc: Add versioning
DESCRIPTION: glibc: Add versioning

RESOLUTION:
We can calculate a hash value for the glibc sources and use it as
an argument for --with-pkgversion to sign our builds. That will allow us
to identify glibc binaries via the output of 'ldd --version'.

DEPENDENCIES: None
LICENSE: MIT
TEST SUMMARY: Build in two different workspaces and compare hashes. Hashes must depend only on the glibc sources.
KNOWN LIMITATIONS: None
SOURCES: None

glibc includes some binaries such as ldd, that support a --version flag.
glibc can be configured with --with-pkgversion=<something> to display
some additional information for the --version flag.

We can calculate a hash value for the glibc sources and use it as
an argument for --with-pkgversion to sign our builds. That will allow us
to identify glibc binaries via the output of 'ldd --version'.

Signed-off-by: Mikhail Durnev <[email protected]>
@kergoth
Copy link
Contributor

kergoth commented May 21, 2022

This is an interesting approach, but bitbake already does checksumming of task input, including SRC_URI sources, so I wonder if we couldn't use that existing knowledge, which would capture both input sources and metadata.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants