From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail05.groups.io (mail05.groups.io [45.79.224.7]) by spool.mail.gandi.net (Postfix) with ESMTPS id 86E6A78003C for ; Fri, 27 Jun 2025 15:22:57 +0000 (UTC) DKIM-Signature: a=rsa-sha256; bh=3NXcM+ktWX96s6Byy23L5cS+omCx/khiGGSPXz067lE=; c=relaxed/simple; d=groups.io; h=DKIM-Filter:Message-ID:Date:MIME-Version:User-Agent:Subject:To:References:From:In-Reply-To:Precedence:List-Subscribe:List-Help:Sender:List-Id:Mailing-List:Delivered-To:Resent-Date:Resent-From:Reply-To:List-Unsubscribe-Post:List-Unsubscribe:Content-Language:Content-Type:Content-Transfer-Encoding; s=groups1; t=1751037777; v=1; x=1751296976; b=uZOeLYt27lwFLB3WtyT25G90chhH51BZd0Sa7xt20KkCJ83eHTzcxw45CEku6aW7VY86SCAj 8ag8BNH8sclK7DqComHty9tqCZsKFQ2GXaEIuM3MkwDMnXk+LNpJyAd+5iuvEuocZIjggohp8iR PMbWagjP2dv/AtFWv0Qnl2Hn6xNm9I7h9OJMAnsgOSNcTTQFkN4SdTfqRAoVUKtzYSSPTtSaNhA w/HbcqfboMrtRjcXkTooKvcDrDqGUb79l0maP9zBdXUY+HkL/sNpCEzJIQOPMBs8ZejsekoOF0D LUuSl9DtyevgshlkMqhEYhgCWeWE3XEEZ/UiJEUcYs5ng== X-Received: by 127.0.0.2 with SMTP id A0X1YY7687511xM0eqlSFC3y; Fri, 27 Jun 2025 08:22:56 -0700 X-Received: from linux.microsoft.com (linux.microsoft.com [13.77.154.182]) by mx.groups.io with SMTP id smtpd.web11.16567.1751037775539342796 for ; Fri, 27 Jun 2025 08:22:55 -0700 X-Received: from [10.137.194.171] (unknown [131.107.147.171]) by linux.microsoft.com (Postfix) with ESMTPSA id 08EA72117FBF; Fri, 27 Jun 2025 08:22:55 -0700 (PDT) DKIM-Filter: OpenDKIM Filter v2.11.0 linux.microsoft.com 08EA72117FBF Message-ID: <6175e4be-3150-41e3-9a4c-9ed0feb85004@linux.microsoft.com> Date: Fri, 27 Jun 2025 08:22:54 -0700 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: [edk2-devel] Current State of Build Reproducibility in edk2 To: devel@edk2.groups.io, richard.lyu@suse.com References: <7492707f-d532-4aaf-b65f-6093c77eaa81@linux.microsoft.com> <0a38cea9-b9e4-4721-83f3-8192eddd14af@linux.microsoft.com> From: "Oliver Smith-Denny via groups.io" In-Reply-To: Precedence: Bulk List-Subscribe: List-Help: Sender: devel@edk2.groups.io List-Id: Mailing-List: list devel@edk2.groups.io; contact devel+owner@edk2.groups.io Resent-Date: Fri, 27 Jun 2025 08:22:55 -0700 Resent-From: osde@linux.microsoft.com Reply-To: devel@edk2.groups.io,osde@linux.microsoft.com List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: X-Gm-Message-State: jzT51YPNqJI3cW9OyOuZfgJux7686176AA= Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: quoted-printable X-GND-Status: LEGIT Authentication-Results: spool.mail.gandi.net; dkim=pass header.d=groups.io header.s=groups1 header.b=uZOeLYt2; dmarc=pass (policy=none) header.from=groups.io; spf=pass (spool.mail.gandi.net: domain of bounce@groups.io designates 45.79.224.7 as permitted sender) smtp.mailfrom=bounce@groups.io Hi Richard, Ah, so its my fault :). Thanks for pointing that out, that makes sense of course. A partner team of mine is looking at build reproducibility across environments, e.g. being able to reproduce what a pipeline has built. I think there is a path forward with using the same JSON file across builds. Thanks, Oliver On 6/24/2025 7:57 AM, Richard Lyu via groups.io wrote: > Hi Oliver, >=20 > I also noticed that edk2 is currently not reproducible in OvmfPkg because= the stack cookie value has been randomized in AutoGen.h since edk2-stable2= 02502. Fortunately, commit "cac0955658 BaseTools: Update Stack Cookie Logic= " addresses this issue. By keeping the JSON files in the build directory, t= he STACK_COOKIE_VALUE can be made reproducible. >=20 > I=E2=80=99ve tested this and was able to reproduce the same FDs and FVs w= ith both edk2-stable202502 and edk2-stable202505. Perhaps you might like to= give it a try as well. >=20 > Best regards, > Richard Lyu >=20 >=20 >=20 > On 2025/06/19 09:53, Oliver Smith-Denny via groups.io wrote: >> On 6/18/2025 5:21 PM, Michael D Kinney via groups.io wrote: >>> Should work for physical platform builds. >>> >>> The OVMF and EmulatorPkg build may have some timestamps in them. >>> >>> If the EmbeddedPkg VirtualRealTimeClockLib is used, then it pulls in sy= stem time >>> in Linux builds. I have a proposal to address this one queued up to su= pport >>> both windows and linux and reproducible builds when needed. >>> >>> [BuildOptions] >>> GCC:*_*_*_CC_FLAGS =3D -DBUILD_EPOCH=3D`printenv SOURCE_DATE_EPOCH = || date +%s` >>> >>> The following is a good resource on this topic and all the >>> elements need to be tracked so issues do not get introduced. >>> >>> https://reproducible-builds.org/docs/ >>> >> >> Thanks, let me play around with this some more. It may be that the >> platform I started trying this with had some similar dependencies. >> >> Thanks, >> Oliver >> >> >> >> >> >> >=20 >=20 >=20 >=20 -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D- Groups.io Links: You receive all messages sent to this group. View/Reply Online (#121436): https://edk2.groups.io/g/devel/message/121436 Mute This Topic: https://groups.io/mt/113714425/7686176 Group Owner: devel+owner@edk2.groups.io Unsubscribe: https://edk2.groups.io/g/devel/unsub [rebecca@openfw.io] -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-