Bug 13876

Summary: busybox cpio can't generate reproducible archives
Product: Busybox Reporter: kpcyrd <git>
Component: OtherAssignee: unassigned
Status: NEW ---    
Severity: normal CC: busybox-cvs
Priority: P5    
Version: unspecified   
Target Milestone: ---   
Hardware: All   
OS: Linux   
Host: Target:
Build:
Attachments: busyboxconfig

Description kpcyrd 2021-06-27 13:34:55 UTC
Created attachment 9021 [details]
busyboxconfig

Hello!

I'm working on reproducible alpine images and after a bit of debugging I noticed the alpine image contains the inode numbers of files in my build folder.

https://twitter.com/sn0int/status/1408961464401121281

This is a problem because, naturally, those are going to be basically random and there's no way for me to normalize them. gnu cpio has a `--reproducible` flag that acts as an alias for `--ignore-devno --renumber-inodes`, I'm not sure yet if I need `--ignore-devno` as well, but I definitely need `--renumber-inodes` to build deterministic images. :)

Besides the inode numbers the alpine initramfs is already fully reproducible with the patches I've submitted to alpine.

Thanks!