summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorintrigeri <intrigeri@boum.org>2019-12-06 17:01:36 +0000
committerintrigeri <intrigeri@boum.org>2019-12-07 09:40:03 +0000
commit005ada5a15ff98b06b234dd2761916158fcdf90c (patch)
tree8be2ffb886d3901b844b20d347c938b23c7434f3
parent2750ae8dc9b62dc90091dda00972aedeed0a5a77 (diff)
Release process: require a specific squashfs-tools version
Given: - We need reproducible IUKs, at least for #15287. Different versions of mksquashfs produce different output so we need to standardize on one single version. - Our Jenkins isobuilders and one of our RMs currently run Stretch, so they can't install 1:4.4-1 from sid. Some other RMs run sid. - squashfs-tools from sid (currently 1:4.4-1) generates smaller IUKs than 1:4.3-8.0tails1, so it would be sad to standardize on anything older. So let's standardize on 4.4; I've uploaded a backport for Stretch to our iukbuilder-stretch custom APT suite, which our isobuilders have been upgraded to.
-rw-r--r--wiki/src/contribute/release_process.mdwn14
1 files changed, 6 insertions, 8 deletions
diff --git a/wiki/src/contribute/release_process.mdwn b/wiki/src/contribute/release_process.mdwn
index 4dd2038..0d8386c 100644
--- a/wiki/src/contribute/release_process.mdwn
+++ b/wiki/src/contribute/release_process.mdwn
@@ -15,10 +15,10 @@ To release Tails you'll need some packages installed:
* `tidy mktorrent transmission-cli`
* aufs DKMS module for your running kernel.
-* [[!debpts squashfs-tools]] that honors `$SOURCE_DATE_EPOCH`.
- If you're running Stretch or Buster, ensure you have the latest version
- from our custom `devel` APT suite.
- If you're running Bullseye or sid, install it from sid.
+* [[!debpts squashfs-tools]]:
+ - If you're running Stretch or Buster, ensure you have the latest version
+ from our custom `iukbuilder-stretch` APT suite.
+ - If you're running Bullseye or sid, install it from sid.
* `tails-iuk` dependencies, including suggested packages (see
`debian/control` in the `debian` branch of its repo)
* `tails-perl5lib` dependencies (same trick as `tails-iuk` to get the
@@ -803,10 +803,8 @@ and run the following:
for source_version in $(echo ${IUK_SOURCE_VERSIONS:?}); do
squashfs_tools_version="$(dpkg-query --showformat '${Version}\n' --show squashfs-tools)"
- if [ "$squashfs_tools_version" != 1:4.3-3.0tails4 ] && \
- [ "$squashfs_tools_version" != 1:4.3-8.0tails1 ] && \
- dpkg --compare-versions "$squashfs_tools_version" lt 1:4.4-1; then
- echo 'ERROR! Your squashfs-tools probably does not honor SOURCE_DATE_EPOCH so any generated IUKs will *not* be reproducible!'
+ if dpkg --compare-versions "$squashfs_tools_version" lt '1:4.4-1~'; then
+ echo 'ERROR! Your squashfs-tools is too old so any generated IUKs will *not* be reproducible!'
break
fi
echo "Generating IUK file from ${source_version:?} to ${VERSION:?}"